last executing test programs: 21m4.210754422s ago: executing program 32 (id=20): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) r1 = syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000040)={'pcl711\x00', [0x7, 0x5, 0x70, 0xa, 0x717, 0x5, 0x9, 0x800, 0x60000000, 0x4, 0x2, 0x6, 0x0, 0xffff, 0xffffffff, 0x2, 0x4, 0x3, 0x101, 0x1, 0x7, 0x9, 0x3, 0x80000001, 0x0, 0x1, 0x1ff, 0x1, 0x7, 0x0, 0xac3, 0x5]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@nodatasum}, {@nobarrier}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nossd}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@acl}, {@treelog}, {@enospc_debug}, {}]}, 0xfb, 0x514b, &(0x7f0000005140)="$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") io_uring_enter(r1, 0x8aa, 0xfffffffd, 0x0, 0x0, 0x0) 19m7.540749133s ago: executing program 33 (id=164): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000000c0)="8c", 0x1}], 0x1}}], 0x1, 0x40840) 4m21.14833991s ago: executing program 34 (id=1312): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x3) 4m9.957344281s ago: executing program 35 (id=1372): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x1) 3m5.852882021s ago: executing program 36 (id=1799): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x80}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 3m4.615283859s ago: executing program 37 (id=1812): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m56.762892957s ago: executing program 38 (id=1861): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000740)=""/210, 0xd2, 0x40000100, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r2, 0x0) mprotect(&(0x7f0000271000/0x3000)=nil, 0x3000, 0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m28.447695699s ago: executing program 39 (id=2005): mount$tmpfs(0x0, 0x0, 0x0, 0x1030023, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0]) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x6d, 0x0, &(0x7f0000000140)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m26.671542049s ago: executing program 40 (id=2014): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 2m25.040645658s ago: executing program 9 (id=2025): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700), 0x0, 0x180, 0x9) 2m24.933848624s ago: executing program 9 (id=2027): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(r1, 0x14) 2m24.833771923s ago: executing program 9 (id=2028): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 2m24.423835532s ago: executing program 9 (id=2032): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m24.031160787s ago: executing program 9 (id=2034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m23.350076455s ago: executing program 41 (id=2035): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(0xffffffffffffffff) 2m23.305894353s ago: executing program 9 (id=2037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m22.632450782s ago: executing program 42 (id=2037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m22.622841981s ago: executing program 8 (id=2039): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000840) 2m22.448123105s ago: executing program 8 (id=2040): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 2m21.950172463s ago: executing program 8 (id=2041): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m21.750079468s ago: executing program 8 (id=2042): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m21.458241424s ago: executing program 8 (id=2043): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m19.626351151s ago: executing program 8 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m19.165108632s ago: executing program 43 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m39.782968811s ago: executing program 2 (id=2166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m39.391643675s ago: executing program 6 (id=2169): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x90e}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m39.00605227s ago: executing program 6 (id=2171): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x4000, 0xe) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1000000000000000) 1m38.784694443s ago: executing program 6 (id=2174): unshare(0xc020680) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13120, 0x2, 0x4}, 0x0, 0x0) 1m38.546745442s ago: executing program 6 (id=2176): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 1m38.545446577s ago: executing program 2 (id=2177): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) 1m38.129825496s ago: executing program 6 (id=2181): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x700) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1m37.364583657s ago: executing program 2 (id=2189): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m37.094924556s ago: executing program 2 (id=2191): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 1m36.730019025s ago: executing program 2 (id=2193): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x10, 0x0, 0x7ffc0001}]}) eventfd(0x0) 1m34.374060835s ago: executing program 6 (id=2201): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m34.373840665s ago: executing program 2 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x20004810}, 0x24040840) 1m33.108434846s ago: executing program 44 (id=2201): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m32.777898387s ago: executing program 45 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x20004810}, 0x24040840) 36.045343842s ago: executing program 7 (id=2653): syz_emit_ethernet(0x36, &(0x7f0000000d80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 35.816250287s ago: executing program 7 (id=2656): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0xfffffffffffffc01, 0x0) tee(r0, r4, 0x60000000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000a00)={0xd}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x404c080) r7 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r9, @ANYBLOB="00022cbd7000ffdbdf250a0000003c000180080003000c000001060005004e22000008000300e000000208000300ac14141b08000300e000000105000200fa00000005ba056c755400020000000c000180060005004e23000008000400ffff0000080003000800000008000400030000140800030008000000080002000600"/139], 0x8c}}, 0x20004001) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe88000101ac1414bb00000000000000000000000000000000000000000a00000064000000000000000000008f8fa27a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 33.790032703s ago: executing program 7 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='mrass=\t\x00\x00\x00fdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 32.905529015s ago: executing program 7 (id=2680): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797", 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, 0x0, 0x3ffff) 31.89104516s ago: executing program 7 (id=2690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='mrass=\t\x00\x00\x00fdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 29.750157737s ago: executing program 7 (id=2712): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3b, 0x0, 0x2, 0x7}, 0x8) 29.116524089s ago: executing program 46 (id=2712): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3b, 0x0, 0x2, 0x7}, 0x8) 6.861629958s ago: executing program 0 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 6.503805428s ago: executing program 5 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 6.420116982s ago: executing program 0 (id=2961): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 6.098103035s ago: executing program 0 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 5.684253176s ago: executing program 0 (id=2966): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x0) 5.529993994s ago: executing program 0 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 5.462991059s ago: executing program 4 (id=2970): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) epoll_create1(0x80000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 5.374460646s ago: executing program 3 (id=2971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) 5.251015876s ago: executing program 4 (id=2972): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 5.106314987s ago: executing program 5 (id=2973): socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.809793729s ago: executing program 4 (id=2974): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)}, 0x0) 4.772772138s ago: executing program 3 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000029"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.566129404s ago: executing program 3 (id=2976): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x58e9, @mcast1, 0x200}}}, 0x90) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000200)={0xe, 0x3ff, 0x1, 0x1}) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000004040)={{0x1, 0x1, 0x18}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 4.397365908s ago: executing program 5 (id=2977): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 3.767273248s ago: executing program 5 (id=2978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2.869899931s ago: executing program 1 (id=2981): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) getsockname$packet(r0, 0x0, 0x0) fallocate(r0, 0x0, 0xfff, 0x5) 2.523971573s ago: executing program 1 (id=2982): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) epoll_create1(0x80000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 2.318149654s ago: executing program 1 (id=2983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x2e, 0x8, "f3a86bb0dce012fe1061f7391b3cdc1590a72d135d87caf5f3faba2870dab8470a4453cccc4b73f88d16"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x4883}, 0x0) 2.225047654s ago: executing program 1 (id=2984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2504"], 0x114}, {&(0x7f00000009c0)=ANY=[], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.146634627s ago: executing program 1 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 472.481734ms ago: executing program 4 (id=2986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40000) 471.675673ms ago: executing program 5 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 402.112668ms ago: executing program 3 (id=2988): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) fsync(0xffffffffffffffff) 367.823057ms ago: executing program 0 (id=2989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 312.619113ms ago: executing program 1 (id=2990): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 278.935529ms ago: executing program 4 (id=2991): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)="72e0a01e28ad594daa3163f87e", 0xd}, {&(0x7f0000000380)="a5c930d5a5636015aef4beb68f7af32d188f86812ecac8d3b912a66c9c036452fe9f2bd78b5ee8fe8d499777a52530fe688f35c829f4439d4e8bd3bee729de597178e0b664435e748673b46ee808e6a484fd32bacc2cf7256409d71307a8b4eb333da4ea713747c9e3e21b29a0c356", 0x6f}, {&(0x7f00000004c0)="c1d5e1172b0eb4973392171508f4e651548f988e829c9bef5ab39c418fc10f3616a9ae032258f5885d93c7467e7c23ce9764dff6d266063125e3108b5d81bab2604991952097b14590715b51d94a5d010ab825f38c33ce1687e2fa45f1bea945c6ad3f8fdc93daa2eca2ccd4a17e", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="604a898ae59fa212e8d63a63a6303d0102b3478f91dd7a802fe9e6d7cc0a7a72c0d9dc4311332f43d095af29b9e06c92471d7d43955a49041ecd1b96931d4afc80aa92c55514da4ecd960595e9f1c75fab0239e8", 0x54}, {&(0x7f00000007c0)="baa066016db9e67a3c69907322f95c6e9ed379e658ed82dc637fdcadb95d9a2e1ffa156eda30b96cdc64a60f49530cc6c7f9daeadb099ca81a2d715b3d099158fefced9bf7c09e9c98fea5dcfd4d6ded7cb4bdd0e04f2af19120f5cf234dbe4471385f107e56634444a28859a7d7b050c9256390cc78a38a0eb902a38a50d32ff3d8b96ef942a10a9325222c998903cf9a128ebae54ab42e754e089121962cc15b11c88552ae631e5f12", 0xaa}, {&(0x7f0000000880)="ece417fc7f96212e550d4ad27388f8e2d890d00641c588fa34890984e35a8629c26c0e7217e7ea557d953a5017243af2f106f1e6d24b88dd424966eec111e551fca801b6a122326e9533492287de9391539fab52f3f3c703fd78269088a045d737f8a268a1ca445bdf32c631a1adeee7a86c11dd86dc5f8bdcebb5962fabd3d21e67724127a3ca590e6d5d574e9cedd82d3628f068bd315a2d835e7dfb459c6af1a1c5eb1512f590de11f22b318d2879993cc7a018f54c", 0xb7}, {&(0x7f00000000c0)="6afc678ca82e0dcebdb454a8ba30b4a9a184777c9d0782a05524120062fb24b3c039820caf07eacd9223516e722376cf6e273b124c48370226a71ed993cc1c9d09aa7c786424ffdacf6d7cc76408777cde6f3a9367d14f2089cbd4b7e9c9dde579412bd33ec107b18d01411e15d2df1aa1e0e83d051db6", 0x77}], 0x4}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="043ebef0c4e9be0c1f44ae8902e00272f6e514f467f73aee0b0020878b9a08ddfbbbe73189ac63cff3f05820d019badf4ceb8aba782de8199b9d2516b5c30b6560a7920768d7cef6b62244b5b6eacfae9e281ff493618123129a02ced96eed241b223847ca27996331ba84f7358013560cb877ba9f28b6", 0x77}, {&(0x7f0000000980)="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", 0x142}, {&(0x7f0000000cc0)="1297ae593585c53da2d9ab7f016d73799ac8b458de9ab9362e13bbd0f646dd543f73dc932715477d024e63cfc37429a14b3b3f6a7fccb39d21c495977315e7c968b37bfb98b38d2c5d77cd65762ce82c1964d1ab07e811f680c1cb79e192492c23ab72063a111966fdfe17ea76ff5434c21a1d0f3b0dcd963ef367e43f1cd4399936ea72a8df30ff3533b9e6583a1cc020efea4d90e21d8b20482489dfe726d2b1f2e8d920219cf4a35d4a47b816db404ac3aa0863e1da9135a217e3059472a09bb0e71ed72641c6447d8d0a416b772090e1ba5f00674f9513720a61732e23", 0xdf}, {&(0x7f0000000c40)="a03a95a2c4774e048b320683232d0e74ade1aa9d9b05db336d35ad68", 0x1c}, {&(0x7f0000000080)="bf23010b2d05d776d6ce5a83cb637f092ceba712fd33c6cbdc1a7fb5c20f55832ff636f4a805", 0x26}], 0x5}}], 0x4, 0x2000c044) write(r1, &(0x7f00000006c0)="71ef33", 0x3) 263.39028ms ago: executing program 3 (id=2992): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x10, 0x0, 0x7ffc0001}]}) eventfd(0x0) 262.388239ms ago: executing program 5 (id=2993): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 12.599488ms ago: executing program 3 (id=2994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 0s ago: executing program 4 (id=2995): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) kernel console output (not intermixed with test programs): tdevsim1: renamed from eth1 [ 1257.777710][ T6962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.795753][T15187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1257.819782][T15187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1257.843006][ T9384] Bluetooth: hci1: command tx timeout [ 1257.976944][T15187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.092156][ T6962] team0: left allmulticast mode [ 1258.098627][ T6962] team0: left promiscuous mode [ 1258.104703][ T6962] bridge0: port 1(team0) entered disabled state [ 1258.116529][ T6962] bridge_slave_1: left allmulticast mode [ 1258.122203][ T6962] bridge_slave_1: left promiscuous mode [ 1258.128495][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.139651][ T6962] bridge_slave_0: left allmulticast mode [ 1258.146112][ T6962] bridge_slave_0: left promiscuous mode [ 1258.151808][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.171119][ T6962] bridge_slave_1: left allmulticast mode [ 1258.178290][ T6962] bridge_slave_1: left promiscuous mode [ 1258.185003][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.199862][ T6962] bridge_slave_0: left allmulticast mode [ 1258.205675][ T6962] bridge_slave_0: left promiscuous mode [ 1258.211362][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.222982][ T6962] team0: left allmulticast mode [ 1258.227864][ T6962] team_slave_0: left allmulticast mode [ 1258.239540][ T6962] team_slave_1: left allmulticast mode [ 1258.246734][ T6962] team0: left promiscuous mode [ 1258.251566][ T6962] team_slave_0: left promiscuous mode [ 1258.257430][ T6962] team_slave_1: left promiscuous mode [ 1258.263540][ T6962] bridge0: port 3(team0) entered disabled state [ 1258.271718][ T6962] bridge_slave_1: left allmulticast mode [ 1258.279260][ T6962] bridge_slave_1: left promiscuous mode [ 1258.285553][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.298174][ T6962] bridge_slave_0: left allmulticast mode [ 1258.304474][ T6962] bridge_slave_0: left promiscuous mode [ 1258.310309][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.722994][ T9384] Bluetooth: hci3: command tx timeout [ 1258.899523][ T6962] bond0 (unregistering): Released all slaves [ 1259.349031][ T6962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.362080][ T6962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.374350][ T6962] bond0 (unregistering): Released all slaves [ 1259.963815][ T6962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.974606][ T6962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.988664][ T6962] bond0 (unregistering): Released all slaves [ 1260.430910][ T6962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.441924][ T6962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.454058][ T6962] bond0 (unregistering): Released all slaves [ 1260.476873][T15187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.566896][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.574110][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.699629][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.707308][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.804648][ T9384] Bluetooth: hci3: command tx timeout [ 1261.280839][T15220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1261.316242][T15220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1261.454856][T15220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1261.475998][T15220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1261.745056][T15187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.190762][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.285346][ T6962] hsr_slave_0: left promiscuous mode [ 1262.291287][ T6962] hsr_slave_1: left promiscuous mode [ 1262.303757][ T6962] hsr_slave_0: left promiscuous mode [ 1262.309698][ T6962] hsr_slave_1: left promiscuous mode [ 1262.317762][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.326238][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.335428][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.343022][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.359823][ T6962] hsr_slave_0: left promiscuous mode [ 1262.366046][ T6962] hsr_slave_1: left promiscuous mode [ 1262.371946][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.379619][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.387920][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.395480][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.411678][ T6962] hsr_slave_0: left promiscuous mode [ 1262.417773][ T6962] hsr_slave_1: left promiscuous mode [ 1262.424381][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.431816][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.439840][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.447404][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.508255][ T6962] veth1_macvtap: left promiscuous mode [ 1262.514372][ T6962] veth0_macvtap: left promiscuous mode [ 1262.520111][ T6962] veth1_vlan: left promiscuous mode [ 1262.525796][ T6962] veth0_vlan: left promiscuous mode [ 1262.532294][ T6962] veth1_macvtap: left promiscuous mode [ 1262.538284][ T6962] veth0_macvtap: left promiscuous mode [ 1262.544157][ T6962] veth1_vlan: left promiscuous mode [ 1262.549500][ T6962] veth0_vlan: left promiscuous mode [ 1262.557233][ T6962] veth1_macvtap: left promiscuous mode [ 1262.562980][ T6962] veth0_macvtap: left promiscuous mode [ 1262.569009][ T6962] veth1_vlan: left promiscuous mode [ 1262.574972][ T6962] veth0_vlan: left promiscuous mode [ 1262.581368][ T6962] veth1_macvtap: left promiscuous mode [ 1262.587099][ T6962] veth0_macvtap: left promiscuous mode [ 1262.593042][ T6962] veth1_vlan: left promiscuous mode [ 1262.599885][ T6962] veth0_vlan: left promiscuous mode [ 1264.694816][ T6962] team0 (unregistering): Port device team_slave_1 removed [ 1264.760120][ T6962] team0 (unregistering): Port device team_slave_0 removed [ 1266.021044][ T6962] team0 (unregistering): Port device team_slave_1 removed [ 1266.087547][ T6962] team0 (unregistering): Port device team_slave_0 removed [ 1267.213472][ T6962] team0 (unregistering): Port device team_slave_1 removed [ 1267.269438][ T6962] team0 (unregistering): Port device team_slave_0 removed [ 1267.900239][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.941516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.948748][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.958588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.965811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.059843][T15285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1268.089779][T15285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1268.216340][T15285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1268.228600][T15285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1268.300180][T15187] veth0_vlan: entered promiscuous mode [ 1268.334154][T15187] veth1_vlan: entered promiscuous mode [ 1268.661892][T15187] veth0_macvtap: entered promiscuous mode [ 1268.712061][T15187] veth1_macvtap: entered promiscuous mode [ 1268.810520][T15187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.880526][T15187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.929455][ T6135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.042296][ T6135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.055354][ T6135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.106783][ T6135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.266844][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.411991][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.477699][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.491775][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.499005][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.521639][T15272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1269.561748][T15272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1269.582240][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.589398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.606542][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.621425][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.623835][T15272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1269.662196][T15272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1269.765703][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.779811][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.996284][T15220] veth0_vlan: entered promiscuous mode [ 1270.041633][T15285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.260670][T15220] veth1_vlan: entered promiscuous mode [ 1270.285228][T15417] batadv1: entered promiscuous mode [ 1270.292110][T15417] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1270.520160][T15324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1270.547438][T15324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1270.611506][T15324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.651589][T15324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.739105][T15272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.751242][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.761814][T15220] veth0_macvtap: entered promiscuous mode [ 1270.778863][T15220] veth1_macvtap: entered promiscuous mode [ 1270.815574][T15272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.834566][T15220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.857089][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.864697][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.889556][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.896743][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.910327][T15220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.938859][ T6135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.948299][ T6964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.968297][ T6964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.977520][ T6964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.037676][T15285] veth0_vlan: entered promiscuous mode [ 1271.088545][T15285] veth1_vlan: entered promiscuous mode [ 1271.174857][T15285] veth0_macvtap: entered promiscuous mode [ 1271.200022][T15285] veth1_macvtap: entered promiscuous mode [ 1271.229355][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.262278][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.291772][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.308236][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.332907][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.342139][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.455534][T15272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.618778][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.638498][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.726570][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.739259][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.784011][T15441] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2050'. [ 1271.800937][T15441] ksmbd: Unknown IPC event: 4, ignore. [ 1271.836601][ T6962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.868701][ T6962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.089424][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.115099][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.345800][T15272] veth0_vlan: entered promiscuous mode [ 1272.420980][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.437893][T15272] veth1_vlan: entered promiscuous mode [ 1272.551395][T15324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.604945][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.612200][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.650833][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 1272.721516][T15272] veth0_macvtap: entered promiscuous mode [ 1272.756297][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.763618][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.820461][T15272] veth1_macvtap: entered promiscuous mode [ 1272.990159][T15272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.284026][T15272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.301289][T15471] tipc: Started in network mode [ 1273.308703][T15471] tipc: Node identity 96293968ad6d, cluster identity 4711 [ 1273.322673][T15471] tipc: Enabled bearer , priority 0 [ 1273.365616][T15469] tipc: Resetting bearer [ 1274.027051][T15507] loop2: detected capacity change from 0 to 512 [ 1274.066512][T15507] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1274.120053][T15507] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1274.171039][T15507] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1274.184482][T15507] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.2065: Failed to acquire dquot type 1 [ 1274.202136][T15507] EXT4-fs (loop2): 1 truncate cleaned up [ 1274.211972][T15507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.362550][ T5952] tipc: Node number set to 994326888 [ 1274.363511][T15285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.131141][T15469] tipc: Disabling bearer [ 1277.151027][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.170738][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 1277.285034][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.311464][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.379668][ T5986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.766396][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.799384][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.019901][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.031060][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.204082][T15324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.390200][T15324] veth0_vlan: entered promiscuous mode [ 1278.474650][T15324] veth1_vlan: entered promiscuous mode [ 1278.724988][T15573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.807736][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2077'. [ 1278.830945][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 1279.079063][T15573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.216790][T15324] veth0_macvtap: entered promiscuous mode [ 1279.308868][T15600] loop5: detected capacity change from 0 to 1024 [ 1279.358414][T15600] EXT4-fs: inline encryption not supported [ 1279.383608][T15602] loop2: detected capacity change from 0 to 1024 [ 1279.401244][T15602] EXT4-fs: Ignoring removed orlov option [ 1279.410281][T15573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.495596][T15600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.524240][T15324] veth1_macvtap: entered promiscuous mode [ 1279.566977][T15602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.661058][ T30] audit: type=1800 audit(1757467528.471:682): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2081" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1279.680697][T15324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.762615][ T30] audit: type=1804 audit(1757467528.491:683): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2081" name="/newroot/14/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 1279.799078][T15187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.961637][T15573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.079179][T15324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.141322][ T6014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.214759][ T6014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.250436][ T6014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.277310][T15285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.294458][ T6135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.611497][ T5986] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.837170][ T5986] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.869932][ T5986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.948907][T15645] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2092'. [ 1280.976194][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.989618][T15645] ksmbd: Unknown IPC event: 0, ignore. [ 1281.030283][T15649] loop6: detected capacity change from 0 to 1024 [ 1281.040895][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.083662][T15649] EXT4-fs: inline encryption not supported [ 1281.092861][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.190664][T15649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.211868][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.292269][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.304969][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2096'. [ 1281.317487][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 1281.329355][T15657] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 1281.404710][T15657] bridge0: port 3(team0) entered blocking state [ 1281.429501][T15657] bridge0: port 3(team0) entered disabled state [ 1281.443246][T15657] team0: entered allmulticast mode [ 1281.459025][T15657] team_slave_0: entered allmulticast mode [ 1281.470937][T15657] team_slave_1: entered allmulticast mode [ 1281.483989][T15272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.587761][T15657] team0: entered promiscuous mode [ 1281.608421][T15657] team_slave_0: entered promiscuous mode [ 1281.668861][T15657] team_slave_1: entered promiscuous mode [ 1281.698811][T15657] bridge0: port 3(team0) entered blocking state [ 1281.705298][T15657] bridge0: port 3(team0) entered forwarding state [ 1282.783967][T15694] loop2: detected capacity change from 0 to 1024 [ 1282.816384][T15694] EXT4-fs: inline encryption not supported [ 1282.961151][T15694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.429093][T15285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.443533][T15710] 9pnet_fd: Insufficient options for proto=fd [ 1283.709459][T15717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2114'. [ 1283.720774][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 1283.751641][T15717] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 1284.306163][ T30] audit: type=1326 audit(1757467533.091:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.328641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.442247][ T30] audit: type=1326 audit(1757467533.091:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.464947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.558041][ T30] audit: type=1326 audit(1757467533.101:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.580515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.682437][ T30] audit: type=1326 audit(1757467533.101:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.775121][ T30] audit: type=1326 audit(1757467533.111:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.797846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.820028][T15736] loop3: detected capacity change from 0 to 512 [ 1284.897157][ T30] audit: type=1326 audit(1757467533.111:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.927355][T15736] EXT4-fs (loop3): too many log groups per flexible block group [ 1284.961814][ T30] audit: type=1326 audit(1757467533.111:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1284.994209][T15736] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 1285.001239][T15736] EXT4-fs (loop3): mount failed [ 1285.061450][ T30] audit: type=1326 audit(1757467533.151:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.182489][ T30] audit: type=1326 audit(1757467533.151:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.333643][ T30] audit: type=1326 audit(1757467533.151:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.444516][ T30] audit: type=1326 audit(1757467533.151:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.552855][ T30] audit: type=1326 audit(1757467533.161:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.609378][ T30] audit: type=1326 audit(1757467533.161:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1285.711562][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2126'. [ 1285.792588][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2126'. [ 1285.816062][T15761] netlink: 'syz.6.2126': attribute type 10 has an invalid length. [ 1285.934317][T15761] bridge0: port 3(team0) entered blocking state [ 1285.962804][T15761] bridge0: port 3(team0) entered disabled state [ 1285.969307][T15761] team0: entered allmulticast mode [ 1286.033968][T15761] team_slave_0: entered allmulticast mode [ 1286.078659][T15761] team_slave_1: entered allmulticast mode [ 1286.123825][T15761] team0: entered promiscuous mode [ 1286.192670][T15761] team_slave_0: entered promiscuous mode [ 1286.201056][T15761] team_slave_1: entered promiscuous mode [ 1286.219799][T15761] bridge0: port 3(team0) entered blocking state [ 1286.226319][T15761] bridge0: port 3(team0) entered forwarding state [ 1286.519077][T15774] loop5: detected capacity change from 0 to 2048 [ 1286.562609][T15784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 1286.653781][T15397] loop5: p1 < > p4 [ 1286.676610][T15397] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1286.764024][T15774] loop5: p1 < > p4 [ 1286.808827][T15774] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1287.420128][T15397] udevd[15397]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1287.446645][T15613] udevd[15613]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1287.494412][T15812] loop6: detected capacity change from 0 to 1024 [ 1287.514946][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 1287.537813][T15812] EXT4-fs: Ignoring removed bh option [ 1287.559593][T15812] EXT4-fs: inline encryption not supported [ 1287.560189][T15815] udevd[15815]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1287.661721][T15812] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1287.774590][T15812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1287.803504][T15815] udevd[15815]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1287.862779][T15812] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2143: lblock 2 mapped to illegal pblock 2 (length 1) [ 1287.954569][T15812] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2143: lblock 0 mapped to illegal pblock 48 (length 1) [ 1288.023896][T15812] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.2143: Failed to acquire dquot type 0 [ 1288.077191][T15812] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1288.119441][T15812] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2143: mark_inode_dirty error [ 1288.135735][T15812] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1288.172606][T15812] EXT4-fs (loop6): 1 orphan inode deleted [ 1288.193961][ T5986] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1288.230142][T15812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.276682][ T5986] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 1288.409818][T15812] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2143: lblock 0 mapped to illegal pblock 48 (length 1) [ 1288.637599][T15844] syzkaller0: entered promiscuous mode [ 1288.671617][T15844] syzkaller0: entered allmulticast mode [ 1288.782071][T15272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.388209][T15864] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 1289.423550][T15864] netlink: 'syz.0.2159': attribute type 4 has an invalid length. [ 1289.463275][T15864] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1289.496634][T15872] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 1289.524739][T15872] netlink: 'syz.0.2159': attribute type 4 has an invalid length. [ 1289.570045][T15872] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1290.859628][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1290.859650][ T30] audit: type=1326 audit(1757467539.671:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1290.979321][ T30] audit: type=1326 audit(1757467539.681:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.082444][ T30] audit: type=1326 audit(1757467539.681:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.196986][ T30] audit: type=1326 audit(1757467539.681:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.220193][T15898] loop2: detected capacity change from 0 to 1024 [ 1291.258358][T15898] EXT4-fs: Ignoring removed bh option [ 1291.307549][T15898] EXT4-fs: inline encryption not supported [ 1291.332230][ T30] audit: type=1326 audit(1757467539.681:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.395286][T15898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1291.472503][ T30] audit: type=1326 audit(1757467539.681:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.484677][T15898] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1291.494883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.561758][ T30] audit: type=1326 audit(1757467539.681:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.584549][ T30] audit: type=1326 audit(1757467539.681:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.607118][ T30] audit: type=1326 audit(1757467539.681:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.607409][T15898] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2166: lblock 2 mapped to illegal pblock 2 (length 1) [ 1291.629454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.629538][ T30] audit: type=1326 audit(1757467539.681:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.2.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec8d8eba9 code=0x7ffc0000 [ 1291.714991][T15898] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2166: lblock 0 mapped to illegal pblock 48 (length 1) [ 1291.754259][T15898] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.2166: Failed to acquire dquot type 0 [ 1291.808834][T15898] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1291.858366][T15898] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2166: mark_inode_dirty error [ 1291.899146][T15898] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1291.921271][T15898] EXT4-fs (loop2): 1 orphan inode deleted [ 1291.937954][T15898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.950484][ T50] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1291.952823][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:3: Failed to release dquot type 0 [ 1292.216885][T15898] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2166: lblock 0 mapped to illegal pblock 48 (length 1) [ 1292.373061][T15285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.508009][T15924] loop6: detected capacity change from 0 to 1764 [ 1292.700939][T15930] 9pnet_fd: Insufficient options for proto=fd [ 1292.788714][ T8447] IPVS: starting estimator thread 0... [ 1292.933152][T15933] IPVS: using max 25 ests per chain, 60000 per kthread [ 1293.391092][T15945] program GPL is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1293.413905][T15945] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1293.968013][T15958] loop2: detected capacity change from 0 to 1764 [ 1294.237944][T15962] hub 9-0:1.0: USB hub found [ 1294.245645][T15962] hub 9-0:1.0: 1 port detected [ 1296.465838][T15975] IPVS: Error connecting to the multicast addr [ 1297.699216][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.140767][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.498858][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.073415][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.095378][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1299.108173][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1299.117818][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1299.145282][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1299.161726][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1299.411742][ T9384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1299.435758][ T9384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1299.453103][ T9384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1299.473266][ T9384] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1299.489162][ T9384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1300.262102][ T50] team0: left allmulticast mode [ 1300.286574][ T50] team_slave_0: left allmulticast mode [ 1300.328643][ T50] team_slave_1: left allmulticast mode [ 1300.342657][ T50] team0: left promiscuous mode [ 1300.356120][ T50] team_slave_0: left promiscuous mode [ 1300.371998][ T50] team_slave_1: left promiscuous mode [ 1300.398105][ T50] bridge0: port 3(team0) entered disabled state [ 1300.411927][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.418490][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.467928][ T50] bridge_slave_1: left allmulticast mode [ 1300.482550][ T50] bridge_slave_1: left promiscuous mode [ 1300.496410][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.529744][ T50] bridge_slave_0: left allmulticast mode [ 1300.592647][ T50] bridge_slave_0: left promiscuous mode [ 1300.610288][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.044619][T16044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2219'. [ 1301.202640][ T9384] Bluetooth: hci0: command tx timeout [ 1301.604655][ T9384] Bluetooth: hci1: command tx timeout [ 1302.429310][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.450816][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.461723][ T50] bond0 (unregistering): Released all slaves [ 1303.283855][ T9384] Bluetooth: hci0: command tx timeout [ 1303.631073][ T50] hsr_slave_0: left promiscuous mode [ 1303.654435][ T50] hsr_slave_1: left promiscuous mode [ 1303.675578][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.683564][ T9384] Bluetooth: hci1: command tx timeout [ 1303.707892][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.718195][T16129] loop5: detected capacity change from 0 to 256 [ 1303.731964][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.748842][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.827240][T16132] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2244'. [ 1303.862834][T16132] ksmbd: Unknown IPC event: 4, ignore. [ 1303.882387][ T50] veth1_macvtap: left promiscuous mode [ 1303.891341][ T50] veth0_macvtap: left promiscuous mode [ 1303.911918][ T50] veth1_vlan: left promiscuous mode [ 1303.926046][T16129] gtp: attempt to access beyond end of device [ 1303.926046][T16129] loop5: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 1303.957604][ T50] veth0_vlan: left promiscuous mode [ 1304.000569][T16134] syz.5.2243: attempt to access beyond end of device [ 1304.000569][T16134] loop5: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 1304.335114][T16144] netlink: 'syz.5.2246': attribute type 10 has an invalid length. [ 1304.375021][T16146] 9pnet_fd: Insufficient options for proto=fd [ 1305.362584][ T9384] Bluetooth: hci0: command tx timeout [ 1305.373497][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1305.558505][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1305.763701][ T9384] Bluetooth: hci1: command tx timeout [ 1306.738123][T16116] syzkaller1: entered promiscuous mode [ 1306.753800][T16116] syzkaller1: entered allmulticast mode [ 1306.781439][T16014] chnl_net:caif_netlink_parms(): no params data found [ 1306.839618][T16144] bridge0: port 3(team0) entered blocking state [ 1306.846453][T16144] bridge0: port 3(team0) entered disabled state [ 1306.853767][T16144] team0: entered allmulticast mode [ 1306.859036][T16144] team_slave_0: entered allmulticast mode [ 1306.865379][T16144] team_slave_1: entered allmulticast mode [ 1306.884612][T16144] team0: entered promiscuous mode [ 1306.889707][T16144] team_slave_0: entered promiscuous mode [ 1306.900987][T16144] team_slave_1: entered promiscuous mode [ 1306.911334][T16144] bridge0: port 3(team0) entered blocking state [ 1306.917831][T16144] bridge0: port 3(team0) entered forwarding state [ 1307.217097][T16021] chnl_net:caif_netlink_parms(): no params data found [ 1307.269329][ T5231] udevd[5231]: worker [15815] terminated by signal 33 (Unknown signal 33) [ 1307.288402][ T5231] udevd[5231]: worker [15815] failed while handling '/devices/virtual/block/loop3' [ 1307.463177][ T9384] Bluetooth: hci0: command tx timeout [ 1307.842524][ T9384] Bluetooth: hci1: command tx timeout [ 1307.951434][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1307.997017][T16233] loop3: detected capacity change from 0 to 1024 [ 1308.010810][T16233] EXT4-fs: Ignoring removed bh option [ 1308.016750][T16233] EXT4-fs: inline encryption not supported [ 1308.018517][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.031719][T16014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.047122][T16233] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1308.065945][T16014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.074082][T16014] bridge_slave_0: entered allmulticast mode [ 1308.082105][T16233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1308.092931][T16014] bridge_slave_0: entered promiscuous mode [ 1308.119744][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.165933][T16233] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2265: lblock 2 mapped to illegal pblock 2 (length 1) [ 1308.180795][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.204464][T16014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.204493][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.217643][T16014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.228257][T16233] __quota_error: 8 callbacks suppressed [ 1308.228276][T16233] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1308.228760][T16014] bridge_slave_1: entered allmulticast mode [ 1308.251446][T16014] bridge_slave_1: entered promiscuous mode [ 1308.261819][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.273361][T16233] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2265: lblock 0 mapped to illegal pblock 48 (length 1) [ 1308.297670][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.328127][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.337624][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.346062][T16233] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1308.360775][T16233] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.2265: Failed to acquire dquot type 0 [ 1308.379897][T16021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.387579][T13389] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 1308.395646][T16021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.417008][T16233] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1308.422903][T16021] bridge_slave_0: entered allmulticast mode [ 1308.451460][T13389] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1308.457187][T16233] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2265: mark_inode_dirty error [ 1308.476837][ T30] audit: type=1326 audit(1757467557.291:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.503030][T16021] bridge_slave_0: entered promiscuous mode [ 1308.542555][ T30] audit: type=1326 audit(1757467557.321:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.566038][T16233] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1308.588845][T16014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.590223][T16233] EXT4-fs (loop3): 1 orphan inode deleted [ 1308.607355][ T6136] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1308.634472][ T30] audit: type=1326 audit(1757467557.331:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.672683][T16021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.682253][ T6136] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1308.684835][T16233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.703397][T16021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.703624][T16021] bridge_slave_1: entered allmulticast mode [ 1308.726851][ T6136] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:13: Failed to release dquot type 0 [ 1308.738879][ T30] audit: type=1326 audit(1757467557.331:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.766311][T16021] bridge_slave_1: entered promiscuous mode [ 1308.778272][ T30] audit: type=1326 audit(1757467557.331:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.803818][ T30] audit: type=1326 audit(1757467557.331:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.823257][T16242] fido_id[16242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1308.879163][ T30] audit: type=1326 audit(1757467557.331:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.5.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1308.908672][T16014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.930963][T16233] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2265: lblock 0 mapped to illegal pblock 48 (length 1) [ 1309.021562][T16250] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 1309.045527][T15324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.162085][T16021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.229105][T16021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.292013][T16014] team0: Port device team_slave_0 added [ 1309.370436][T16021] team0: Port device team_slave_0 added [ 1309.405872][T16014] team0: Port device team_slave_1 added [ 1309.502271][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.545584][T16021] team0: Port device team_slave_1 added [ 1309.711119][T16271] loop5: detected capacity change from 0 to 512 [ 1309.740363][T16271] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1309.799291][T16271] EXT4-fs (loop5): 1 truncate cleaned up [ 1309.832264][T16271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.932017][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.964021][T16014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.977667][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.987480][T15187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.021007][T16014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.045679][T16021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.057674][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.124498][T16021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.222328][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.248298][T16014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.262653][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.320328][T16014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.343451][T16021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.350548][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.379507][T16021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.422275][T16285] loop5: detected capacity change from 0 to 256 [ 1310.488390][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.582486][T16285] syz.5.2283: attempt to access beyond end of device [ 1310.582486][T16285] loop5: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 1310.868184][T16021] hsr_slave_0: entered promiscuous mode [ 1310.899718][T16021] hsr_slave_1: entered promiscuous mode [ 1310.923652][T16021] debugfs: 'hsr0' already exists in 'hsr' [ 1310.943080][T16021] Cannot create hsr debugfs directory [ 1310.975899][T16014] hsr_slave_0: entered promiscuous mode [ 1311.023024][T16014] hsr_slave_1: entered promiscuous mode [ 1311.029531][T16014] debugfs: 'hsr0' already exists in 'hsr' [ 1311.053285][T16014] Cannot create hsr debugfs directory [ 1311.766482][ T50] team0: left allmulticast mode [ 1311.771499][ T50] team_slave_0: left allmulticast mode [ 1311.798307][ T50] team_slave_1: left allmulticast mode [ 1311.810585][ T50] team0: left promiscuous mode [ 1311.819169][ T50] team_slave_0: left promiscuous mode [ 1311.842812][ T50] team_slave_1: left promiscuous mode [ 1311.848665][ T50] bridge0: port 3(team0) entered disabled state [ 1311.890279][ T50] bridge_slave_1: left allmulticast mode [ 1311.898025][T16323] 9pnet_fd: Insufficient options for proto=fd [ 1311.905281][ T50] bridge_slave_1: left promiscuous mode [ 1311.916343][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.944554][ T50] bridge_slave_0: left allmulticast mode [ 1311.956816][ T50] bridge_slave_0: left promiscuous mode [ 1311.963769][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.011845][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.027516][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.047387][T16355] loop5: detected capacity change from 0 to 512 [ 1313.049360][ T50] bond0 (unregistering): Released all slaves [ 1313.057217][T16355] EXT4-fs: Ignoring removed nobh option [ 1313.183977][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2307: corrupted inode contents [ 1313.226300][T16355] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2307: mark_inode_dirty error [ 1313.259891][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2307: corrupted inode contents [ 1313.291635][T16355] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2307: mark_inode_dirty error [ 1313.338872][T16355] __quota_error: 40 callbacks suppressed [ 1313.338893][T16355] Quota error (device loop5): write_blk: dquota write failed [ 1313.353177][T16355] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1313.363377][T16355] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.2307: Failed to acquire dquot type 0 [ 1313.394193][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2307: corrupted inode contents [ 1313.412518][T16355] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2307: mark_inode_dirty error [ 1313.426160][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2307: corrupted inode contents [ 1313.438750][T16355] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2307: mark_inode_dirty error [ 1313.456989][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2307: corrupted inode contents [ 1313.478269][T16355] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1313.487761][T16355] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2307: corrupted inode contents [ 1313.501967][T16355] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2307: mark_inode_dirty error [ 1313.515369][T16355] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1313.531048][T16355] EXT4-fs (loop5): 1 truncate cleaned up [ 1313.564786][T16355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.609949][T16355] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.663805][T16355] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.677978][T16360] 9pnet_fd: Insufficient options for proto=fd [ 1314.034488][ T30] audit: type=1326 audit(1757467562.851:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.077883][ T30] audit: type=1326 audit(1757467562.881:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.110243][ T30] audit: type=1326 audit(1757467562.881:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.129621][T16368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2312'. [ 1314.138777][ T30] audit: type=1326 audit(1757467562.881:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.190582][ T30] audit: type=1326 audit(1757467562.881:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.213641][ T50] hsr_slave_0: left promiscuous mode [ 1314.229674][ T50] hsr_slave_1: left promiscuous mode [ 1314.229702][ T30] audit: type=1326 audit(1757467562.881:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.244579][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.258044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.268414][ T30] audit: type=1326 audit(1757467562.881:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.294995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.307619][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.309336][ T30] audit: type=1326 audit(1757467562.881:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1314.349497][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.358986][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.405042][ T50] veth1_macvtap: left promiscuous mode [ 1314.416590][ T50] veth0_macvtap: left promiscuous mode [ 1314.423583][ T50] veth1_vlan: left promiscuous mode [ 1314.430668][ T50] veth0_vlan: left promiscuous mode [ 1315.709792][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1316.114630][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1316.218875][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1317.247560][T16397] 9pnet_fd: Insufficient options for proto=fd [ 1317.628517][T16014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1317.689555][T16014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1317.723972][T16404] loop3: detected capacity change from 0 to 4096 [ 1317.724308][T16014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1317.819043][T16404] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1317.840285][T16014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1317.883691][T16404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.053928][T15324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.429879][T16014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.490456][T16416] loop3: detected capacity change from 0 to 2048 [ 1318.551386][T16014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.554862][T15396] Alternate GPT is invalid, using primary GPT. [ 1318.574596][T15396] loop3: p2 p3 p7 [ 1318.610463][T16021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1318.636929][T16021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1318.662020][T16416] Alternate GPT is invalid, using primary GPT. [ 1318.664176][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.675599][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.687093][T16416] loop3: p2 p3 p7 [ 1318.747276][T16021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1318.806309][T16021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1318.881628][T15397] udevd[15397]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1318.886637][T15613] udevd[15613]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1318.920054][T15396] udevd[15396]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1318.950499][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.957765][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.007001][T15396] udevd[15396]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1319.028798][T15613] udevd[15613]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1319.040336][T15397] udevd[15397]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1319.314378][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1319.314400][ T30] audit: type=1326 audit(1757467568.131:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.343261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.368797][ T30] audit: type=1326 audit(1757467568.131:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.391284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.436935][ T30] audit: type=1326 audit(1757467568.171:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.459405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.498994][ T30] audit: type=1326 audit(1757467568.171:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.567682][ T30] audit: type=1326 audit(1757467568.171:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.590489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.634071][ T30] audit: type=1326 audit(1757467568.171:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.664311][ T30] audit: type=1326 audit(1757467568.171:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.681451][T16021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.688859][T16448] 9pnet_fd: Insufficient options for proto=fd [ 1319.771724][T16021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.788130][ T30] audit: type=1326 audit(1757467568.171:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.810415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.843603][ T30] audit: type=1326 audit(1757467568.231:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.846580][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.866583][ T30] audit: type=1326 audit(1757467568.231:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.0.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1319.873322][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.895697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.994895][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.002290][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.176557][T16014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.867244][T16021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.416340][T16014] veth0_vlan: entered promiscuous mode [ 1321.542155][T16014] veth1_vlan: entered promiscuous mode [ 1321.964440][T16014] veth0_macvtap: entered promiscuous mode [ 1322.050590][T16014] veth1_macvtap: entered promiscuous mode [ 1322.229376][T16014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.280397][T16014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.373894][ T6135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.396503][ T6135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.417069][ T6135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.456507][ T6135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.560951][T16021] veth0_vlan: entered promiscuous mode [ 1322.718550][T16021] veth1_vlan: entered promiscuous mode [ 1322.770894][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.804915][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.907889][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.919116][T16021] veth0_macvtap: entered promiscuous mode [ 1322.931364][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.960184][T16021] veth1_macvtap: entered promiscuous mode [ 1323.049035][T16021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.064460][T16530] netlink: 'syz.3.2359': attribute type 1 has an invalid length. [ 1323.146157][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1323.325334][T16530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1323.396647][T16021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.843882][T16550] capability: warning: `syz.0.2367' uses 32-bit capabilities (legacy support in use) [ 1324.096376][T16534] bond1 (unregistering): Released all slaves [ 1324.204645][ T6964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.227450][ T6964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.236295][ T6964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.256081][ T6964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.673181][T16565] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 1325.265235][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1325.265256][ T30] audit: type=1326 audit(2000000004.470:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.502988][ T30] audit: type=1326 audit(2000000004.490:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.531393][ T30] audit: type=1326 audit(2000000004.490:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.555121][ T30] audit: type=1326 audit(2000000004.490:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.579378][ T30] audit: type=1326 audit(2000000004.490:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.592534][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.603650][ T30] audit: type=1326 audit(2000000004.500:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.632804][ T30] audit: type=1326 audit(2000000004.500:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.681724][ T30] audit: type=1326 audit(2000000004.500:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.710432][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.802451][ T30] audit: type=1326 audit(2000000004.500:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1325.854570][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.877117][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.991291][ T30] audit: type=1326 audit(2000000006.180:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16614 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1327.715617][T16635] mmap: syz.3.2397 (16635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1327.739345][T16637] 9pnet_fd: Insufficient options for proto=fd [ 1328.476519][T16658] netlink: 'syz.5.2409': attribute type 1 has an invalid length. [ 1328.502244][T16658] netlink: 'syz.5.2409': attribute type 4 has an invalid length. [ 1328.517734][T16658] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2409'. [ 1328.931016][T16670] pimreg: entered allmulticast mode [ 1328.957726][T16671] pimreg: left allmulticast mode [ 1329.506434][T16689] loop5: detected capacity change from 0 to 1024 [ 1329.553896][T16689] EXT4-fs: Ignoring removed oldalloc option [ 1329.572095][T16693] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 1329.609184][T16689] EXT4-fs: Ignoring removed nobh option [ 1329.651469][T16693] netlink: 'syz.3.2423': attribute type 4 has an invalid length. [ 1329.662734][T16689] ext4: Invalid uid '0x00000000ffffffff' [ 1329.682646][T16693] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2423'. [ 1330.011185][T16677] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1330.421225][T16711] loop7: detected capacity change from 0 to 2048 [ 1330.517969][T16711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.635285][T16014] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1330.728708][T16014] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1330.792762][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2438'. [ 1330.920609][T16014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.145078][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1331.145098][ T30] audit: type=1326 audit(2000000010.340:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.173692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.224961][ T30] audit: type=1326 audit(2000000010.350:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.258908][ T30] audit: type=1326 audit(2000000010.350:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.329153][ T30] audit: type=1326 audit(2000000010.350:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.393622][ T30] audit: type=1326 audit(2000000010.350:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.430138][ T30] audit: type=1326 audit(2000000010.350:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.505936][ T30] audit: type=1326 audit(2000000010.350:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.576196][ T30] audit: type=1326 audit(2000000010.350:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.650209][ T30] audit: type=1326 audit(2000000010.390:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.738096][T16753] netlink: 'syz.7.2449': attribute type 1 has an invalid length. [ 1331.777767][T16753] netlink: 'syz.7.2449': attribute type 4 has an invalid length. [ 1331.780630][ T30] audit: type=1326 audit(2000000010.390:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1331.819551][T16753] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1331.853239][T16758] netlink: 'syz.7.2449': attribute type 1 has an invalid length. [ 1331.871382][T16758] netlink: 'syz.7.2449': attribute type 4 has an invalid length. [ 1331.891480][T16758] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1334.096403][T16830] loop5: detected capacity change from 0 to 512 [ 1334.146851][T16830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1334.236843][T16835] loop7: detected capacity change from 0 to 256 [ 1334.265408][T16830] EXT4-fs (loop5): 1 truncate cleaned up [ 1334.335272][T16830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.363935][T16838] netlink: 'syz.0.2485': attribute type 21 has an invalid length. [ 1334.389402][T16838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2485'. [ 1334.464515][T16835] FAT-fs (loop7): Directory bread(block 64) failed [ 1334.486773][T16835] FAT-fs (loop7): Directory bread(block 65) failed [ 1334.507162][T16835] FAT-fs (loop7): Directory bread(block 66) failed [ 1334.532141][T16835] FAT-fs (loop7): Directory bread(block 67) failed [ 1334.568444][T15187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.058441][T16835] FAT-fs (loop7): Directory bread(block 68) failed [ 1335.066489][T16835] FAT-fs (loop7): Directory bread(block 69) failed [ 1335.082078][T16835] FAT-fs (loop7): Directory bread(block 70) failed [ 1335.114484][T16835] FAT-fs (loop7): Directory bread(block 71) failed [ 1335.139726][T16835] FAT-fs (loop7): Directory bread(block 72) failed [ 1335.173575][T16835] FAT-fs (loop7): Directory bread(block 73) failed [ 1335.846007][T16863] IPv6: Can't replace route, no match found [ 1336.729930][T16888] loop5: detected capacity change from 0 to 256 [ 1336.798900][T16888] syz.5.2502: attempt to access beyond end of device [ 1336.798900][T16888] loop5: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 1336.988348][T16897] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1337.011797][T16897] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1337.060710][T16897] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1337.414249][T16911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2512'. [ 1337.437057][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 1337.473452][T16909] syzkaller0: entered promiscuous mode [ 1337.485161][T16909] syzkaller0: entered allmulticast mode [ 1337.493219][T16915] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 1337.507980][T16915] bridge0: port 3(team0) entered blocking state [ 1337.520209][T16915] bridge0: port 3(team0) entered disabled state [ 1337.530496][T16915] team0: entered allmulticast mode [ 1337.538563][T16915] team_slave_0: entered allmulticast mode [ 1337.545849][T16915] team_slave_1: entered allmulticast mode [ 1337.557597][T16915] team0: entered promiscuous mode [ 1337.562947][T16915] team_slave_0: entered promiscuous mode [ 1337.569319][T16915] team_slave_1: entered promiscuous mode [ 1337.576323][T16915] bridge0: port 3(team0) entered blocking state [ 1337.582819][T16915] bridge0: port 3(team0) entered forwarding state [ 1337.985462][T16930] loop4: detected capacity change from 0 to 512 [ 1338.022935][T16930] EXT4-fs: Ignoring removed mblk_io_submit option [ 1338.077762][T16930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1338.168342][T16930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 1338.168499][T16930] System zones: 1-12 [ 1338.172224][T16930] EXT4-fs (loop4): 1 truncate cleaned up [ 1338.174303][T16930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.283730][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1338.283750][ T30] audit: type=1804 audit(2000000530.493:883): pid=16930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2519" name="/newroot/27/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 1339.198338][T16936] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 1339.239686][T16021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.206194][T16936] team0: Port device dummy0 added [ 1343.279303][T17002] loop7: detected capacity change from 0 to 128 [ 1344.355080][T17026] netlink: 'syz.5.2554': attribute type 1 has an invalid length. [ 1344.363572][T17026] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1344.394716][T17026] netlink: 'syz.5.2554': attribute type 1 has an invalid length. [ 1344.429499][T17026] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1344.882736][T17043] lo speed is unknown, defaulting to 1000 [ 1344.911405][T17043] lo speed is unknown, defaulting to 1000 [ 1344.949984][T17043] lo speed is unknown, defaulting to 1000 [ 1345.023873][T17043] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1345.129400][T17043] lo speed is unknown, defaulting to 1000 [ 1345.151308][T17043] lo speed is unknown, defaulting to 1000 [ 1345.173387][T17043] lo speed is unknown, defaulting to 1000 [ 1345.195146][T17043] lo speed is unknown, defaulting to 1000 [ 1345.208162][T17043] lo speed is unknown, defaulting to 1000 [ 1345.546644][T17056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.852622][T17056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.025654][T17066] syzkaller1: entered promiscuous mode [ 1346.038357][T17066] syzkaller1: entered allmulticast mode [ 1346.067195][T17056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.253285][T17080] random: crng reseeded on system resumption [ 1346.380493][ T30] audit: type=1326 audit(2000000538.583:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.422965][ T30] audit: type=1326 audit(2000000538.623:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.474217][ T30] audit: type=1326 audit(2000000538.623:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.530816][ T30] audit: type=1326 audit(2000000538.623:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.604697][ T30] audit: type=1326 audit(2000000538.623:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.673666][ T30] audit: type=1326 audit(2000000538.623:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.732344][ T30] audit: type=1326 audit(2000000538.623:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.793848][ T30] audit: type=1326 audit(2000000538.623:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.892029][ T30] audit: type=1326 audit(2000000538.623:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1346.959869][ T30] audit: type=1326 audit(2000000538.623:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1347.325289][T17056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.815013][T13389] hid_parser_main: 8 callbacks suppressed [ 1347.815039][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1347.911397][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1347.931240][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1347.948956][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1347.970049][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1347.993700][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1348.016812][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1348.039855][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1348.049519][ T6964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.071394][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1348.089257][T13389] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 1348.115438][T13389] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1348.162104][ T6964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.247850][ T6962] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.355383][ T6964] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.373054][T17107] fido_id[17107]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1348.575492][T17116] IPv6: Can't replace route, no match found [ 1349.043741][T17130] pimreg: entered allmulticast mode [ 1349.121460][T17130] pimreg: left allmulticast mode [ 1349.247981][T17126] netlink: 'syz.7.2595': attribute type 21 has an invalid length. [ 1349.363693][T17126] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2595'. [ 1349.542884][T17126] netlink: 'syz.7.2595': attribute type 5 has an invalid length. [ 1349.634807][T17126] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2595'. [ 1349.709362][T17152] 9pnet_fd: Insufficient options for proto=fd [ 1350.252194][ T5952] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1350.683234][T17171] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 1350.739693][T17171] netlink: 'syz.0.2614': attribute type 4 has an invalid length. [ 1350.781765][T17173] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 1350.799032][T17171] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1350.808663][T17173] netlink: 'syz.0.2614': attribute type 4 has an invalid length. [ 1350.851345][T17173] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1350.872220][T17176] 9pnet_fd: Insufficient options for proto=fd [ 1351.017832][T17181] 9pnet_fd: Insufficient options for proto=fd [ 1351.212005][T17186] siw: device registration error -23 [ 1351.235881][T17189] loop4: detected capacity change from 0 to 128 [ 1351.713689][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1351.713711][ T30] audit: type=1326 audit(2000000543.924:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1351.791177][ T30] audit: type=1326 audit(2000000543.954:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1351.856533][ T30] audit: type=1326 audit(2000000543.954:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1351.966294][ T30] audit: type=1326 audit(2000000543.954:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.070167][ T30] audit: type=1326 audit(2000000543.954:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.157173][ T30] audit: type=1326 audit(2000000543.954:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.183429][T17213] siw: device registration error -23 [ 1352.248349][ T30] audit: type=1326 audit(2000000543.954:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.330482][ T30] audit: type=1326 audit(2000000543.954:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.446321][ T30] audit: type=1326 audit(2000000543.954:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.563372][ T30] audit: type=1326 audit(2000000543.954:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e238eba9 code=0x7ffc0000 [ 1352.778957][T17225] loop4: detected capacity change from 0 to 1764 [ 1353.422642][T17237] 9pnet_fd: Insufficient options for proto=fd [ 1353.443894][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'. [ 1353.458315][T17236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2636'. [ 1353.817046][T17240] loop5: detected capacity change from 0 to 256 [ 1353.988759][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2644'. [ 1354.001606][T17240] FAT-fs (loop5): Directory bread(block 64) failed [ 1354.024708][T17240] FAT-fs (loop5): Directory bread(block 65) failed [ 1354.042284][T17240] FAT-fs (loop5): Directory bread(block 66) failed [ 1354.086132][T17240] FAT-fs (loop5): Directory bread(block 67) failed [ 1354.128816][T17240] FAT-fs (loop5): Directory bread(block 68) failed [ 1354.136978][T17240] FAT-fs (loop5): Directory bread(block 69) failed [ 1354.148605][T17240] FAT-fs (loop5): Directory bread(block 70) failed [ 1354.173530][T17240] FAT-fs (loop5): Directory bread(block 71) failed [ 1354.199005][T17240] FAT-fs (loop5): Directory bread(block 72) failed [ 1354.217737][T17240] FAT-fs (loop5): Directory bread(block 73) failed [ 1354.389132][T17257] loop4: detected capacity change from 0 to 1024 [ 1354.539801][T17257] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1354.620148][T17257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1354.688581][T17257] JBD2: no valid journal superblock found [ 1354.715432][T17257] EXT4-fs (loop4): Could not load journal inode [ 1355.475666][T17280] loop7: detected capacity change from 0 to 1024 [ 1355.566131][T17280] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.2656: Failed to acquire dquot type 0 [ 1355.679729][T17280] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1355.720986][T17280] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2656: corrupted inode contents [ 1355.767812][T17280] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.2656: mark_inode_dirty error [ 1355.888283][T17280] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2656: corrupted inode contents [ 1355.992400][T17291] GUP no longer grows the stack in syz.5.2661 (17291): 200000004000-200000005000 (200000002000) [ 1355.996828][T17280] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.2656: mark_inode_dirty error [ 1356.056395][T17280] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2656: corrupted inode contents [ 1356.105847][T17291] CPU: 0 UID: 0 PID: 17291 Comm: syz.5.2661 Not tainted syzkaller #0 PREEMPT(full) [ 1356.105878][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.105891][T17291] Call Trace: [ 1356.105901][T17291] [ 1356.105911][T17291] dump_stack_lvl+0x189/0x250 [ 1356.105947][T17291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1356.105972][T17291] ? __pfx__printk+0x10/0x10 [ 1356.105998][T17291] ? find_vma+0xe7/0x160 [ 1356.106039][T17291] __get_user_pages+0x24d0/0x2ce0 [ 1356.106091][T17291] ? mtree_load+0x101/0x6f0 [ 1356.106134][T17291] get_user_pages_remote+0x2f1/0xad0 [ 1356.106160][T17291] ? __pfx_mtree_load+0x10/0x10 [ 1356.106197][T17291] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1356.106224][T17291] ? __access_remote_vm+0x367/0x7d0 [ 1356.106257][T17291] __access_remote_vm+0x211/0x7d0 [ 1356.106295][T17291] ? __pfx___access_remote_vm+0x10/0x10 [ 1356.106336][T17291] ? alloc_pages_noprof+0xbe/0x190 [ 1356.106371][T17291] proc_pid_cmdline_read+0x430/0x810 [ 1356.106415][T17291] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1356.106450][T17291] ? rw_verify_area+0x2a6/0x4d0 [ 1356.106480][T17291] vfs_readv+0x5a7/0x850 [ 1356.106510][T17291] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1356.106545][T17291] ? __pfx_vfs_readv+0x10/0x10 [ 1356.106593][T17291] ? __fget_files+0x2a/0x420 [ 1356.106627][T17291] ? __fget_files+0x3a0/0x420 [ 1356.106653][T17291] ? __fget_files+0x2a/0x420 [ 1356.106691][T17291] __x64_sys_preadv+0x197/0x2a0 [ 1356.106723][T17291] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1356.106755][T17291] ? do_syscall_64+0xbe/0xfa0 [ 1356.106778][T17291] do_syscall_64+0xfa/0xfa0 [ 1356.106794][T17291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.106824][T17291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.106843][T17291] ? clear_bhb_loop+0x60/0xb0 [ 1356.106869][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.106888][T17291] RIP: 0033:0x7f599178eba9 [ 1356.106907][T17291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.106924][T17291] RSP: 002b:00007f5992657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1356.106948][T17291] RAX: ffffffffffffffda RBX: 00007f59919d6090 RCX: 00007f599178eba9 [ 1356.106963][T17291] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 1356.106977][T17291] RBP: 00007f5991811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1356.106989][T17291] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1356.107002][T17291] R13: 00007f59919d6128 R14: 00007f59919d6090 R15: 00007ffceb096938 [ 1356.107040][T17291] [ 1356.129106][T17280] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1356.429747][T17280] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2656: corrupted inode contents [ 1356.507064][T17280] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.2656: mark_inode_dirty error [ 1356.576723][T17280] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1356.699311][T17280] EXT4-fs (loop7): 1 truncate cleaned up [ 1356.707123][T17280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.839502][T17280] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1357.079990][T16014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.853593][T17334] lo speed is unknown, defaulting to 1000 [ 1358.062992][T17343] loop7: detected capacity change from 0 to 512 [ 1358.077774][T17343] EXT4-fs: Ignoring removed mblk_io_submit option [ 1358.109441][T17343] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1358.202054][T17343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 1358.265523][T17343] System zones: 1-12 [ 1358.272748][T17343] EXT4-fs (loop7): 1 truncate cleaned up [ 1358.343265][T17343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.441469][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1358.441489][ T30] audit: type=1804 audit(2000000550.654:978): pid=17343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2680" name="/newroot/60/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1358.690625][T17343] lo speed is unknown, defaulting to 1000 [ 1358.690880][T17357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2686'. [ 1358.762540][T17360] pimreg: entered allmulticast mode [ 1358.854641][T17360] pimreg: left allmulticast mode [ 1359.035710][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.047778][T17364] loop4: detected capacity change from 0 to 164 [ 1359.056810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.117183][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1359.138499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.188653][T16014] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.244104][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.286751][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1359.418228][T16014] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.437768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.530868][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.639407][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1359.705170][T16014] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1359.730136][T16014] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /60/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294965248, rec_len=65535, size=1024 fake=0 [ 1360.118797][T17396] IPv6: NLM_F_CREATE should be specified when creating new route [ 1360.949027][T17413] netlink: 'syz.3.2708': attribute type 7 has an invalid length. [ 1360.980199][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1361.045202][T16014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.375453][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.613568][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.725168][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.850191][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.937877][ T30] audit: type=1326 audit(2000000554.144:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.4.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1361.982889][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.030605][ T30] audit: type=1326 audit(2000000554.144:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.4.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1362.104328][ T30] audit: type=1326 audit(2000000554.144:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.4.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1362.199596][ T30] audit: type=1326 audit(2000000554.144:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.4.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1362.294275][ T30] audit: type=1326 audit(2000000554.144:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.4.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1362.735815][ T13] bridge_slave_1: left allmulticast mode [ 1362.742854][ T13] bridge_slave_1: left promiscuous mode [ 1362.748737][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.818613][ T13] bridge_slave_0: left allmulticast mode [ 1362.827388][ T13] bridge_slave_0: left promiscuous mode [ 1362.847875][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.878148][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1362.891046][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1362.900736][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1362.913887][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1362.921872][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1363.189024][ T5952] hid_parser_main: 9 callbacks suppressed [ 1363.189050][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.210784][ T30] audit: type=1326 audit(2000000555.414:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.0.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1363.249875][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.263706][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.274963][ T30] audit: type=1326 audit(2000000555.414:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.0.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1363.340533][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.343618][ T30] audit: type=1326 audit(2000000555.414:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.0.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1363.357460][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.370464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.398859][ T30] audit: type=1326 audit(2000000555.414:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.0.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1363.421395][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.428001][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.453782][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.461366][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.468790][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.479784][ T5952] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 1363.490200][ T5952] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1363.947833][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.961963][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.972469][ T13] bond0 (unregistering): Released all slaves [ 1363.996972][T17439] lo speed is unknown, defaulting to 1000 [ 1364.172990][T17445] lo speed is unknown, defaulting to 1000 [ 1364.236446][T17462] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2732'. [ 1364.905520][ T13] hsr_slave_0: left promiscuous mode [ 1364.915067][ T13] hsr_slave_1: left promiscuous mode [ 1364.926269][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.966152][ T5181] Bluetooth: hci0: command tx timeout [ 1364.979606][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.999440][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.010606][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.042844][ T13] veth1_macvtap: left promiscuous mode [ 1365.050028][ T13] veth0_macvtap: left promiscuous mode [ 1365.060448][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1365.060472][ T30] audit: type=1326 audit(2000000557.254:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.5.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1365.089060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.097116][ T13] veth1_vlan: left promiscuous mode [ 1365.102649][ T13] veth0_vlan: left promiscuous mode [ 1365.108830][ T30] audit: type=1326 audit(2000000557.254:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.5.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1365.132795][ T30] audit: type=1326 audit(2000000557.254:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.5.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599178eba9 code=0x7ffc0000 [ 1365.155414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.789166][ T30] audit: type=1326 audit(2000000557.994:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.0.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1365.844550][ T30] audit: type=1326 audit(2000000558.024:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.0.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1365.873856][ T30] audit: type=1326 audit(2000000558.024:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.0.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1365.904565][ T30] audit: type=1326 audit(2000000558.024:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.0.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1365.937006][ T30] audit: type=1326 audit(2000000558.024:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.0.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1366.365898][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1366.436690][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1367.044916][T17513] Bluetooth: hci0: command tx timeout [ 1367.719872][ T30] audit: type=1326 audit(2000000559.925:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17523 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1367.811232][ T30] audit: type=1326 audit(2000000559.925:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17523 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1367.895054][T17526] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2755'. [ 1367.987879][T17445] chnl_net:caif_netlink_parms(): no params data found [ 1368.268493][T17540] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1368.507556][T17445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.522908][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.539319][T17445] bridge_slave_0: entered allmulticast mode [ 1368.563795][T17445] bridge_slave_0: entered promiscuous mode [ 1368.580829][T17445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.594342][T17445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.607313][T17445] bridge_slave_1: entered allmulticast mode [ 1368.617616][T17445] bridge_slave_1: entered promiscuous mode [ 1368.632167][T17552] loop5: detected capacity change from 0 to 256 [ 1368.748991][T17552] FAT-fs (loop5): Directory bread(block 64) failed [ 1368.798373][T17552] FAT-fs (loop5): Directory bread(block 65) failed [ 1368.827673][T17552] FAT-fs (loop5): Directory bread(block 66) failed [ 1368.851828][T17552] FAT-fs (loop5): Directory bread(block 67) failed [ 1368.880379][T17552] FAT-fs (loop5): Directory bread(block 68) failed [ 1368.886998][T17552] FAT-fs (loop5): Directory bread(block 69) failed [ 1368.916290][T17445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.949502][T17552] FAT-fs (loop5): Directory bread(block 70) failed [ 1368.981069][T17552] FAT-fs (loop5): Directory bread(block 71) failed [ 1368.993112][T17445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.998013][T17552] FAT-fs (loop5): Directory bread(block 72) failed [ 1369.040748][T17513] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.046956][T17513] Bluetooth: hci2: command 0x0406 tx timeout [ 1369.058114][T17552] FAT-fs (loop5): Directory bread(block 73) failed [ 1369.121105][ T5181] Bluetooth: hci0: command tx timeout [ 1369.195389][T17445] team0: Port device team_slave_0 added [ 1369.205085][T17445] team0: Port device team_slave_1 added [ 1369.387249][T17445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.406476][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.519930][T17445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.548901][T17445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.556248][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.635582][T17578] loop4: detected capacity change from 0 to 2048 [ 1369.642318][T17445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.747176][T15397] Alternate GPT is invalid, using primary GPT. [ 1369.767530][T15397] loop4: p1 p2 p3 [ 1369.817215][T17578] Alternate GPT is invalid, using primary GPT. [ 1369.839868][T17578] loop4: p1 p2 p3 [ 1369.887712][T17445] hsr_slave_0: entered promiscuous mode [ 1369.921682][T17445] hsr_slave_1: entered promiscuous mode [ 1369.928344][T17445] debugfs: 'hsr0' already exists in 'hsr' [ 1369.940962][T17445] Cannot create hsr debugfs directory [ 1370.069813][T17594] loop4: detected capacity change from 0 to 256 [ 1370.125995][T15613] udevd[15613]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1370.126726][T15397] udevd[15397]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1370.166053][T17598] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 1370.175834][T15396] udevd[15396]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1370.196432][T17598] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2785'. [ 1370.231669][T17598] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 1370.246710][T17594] FAT-fs (loop4): Directory bread(block 64) failed [ 1370.251140][T17598] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2785'. [ 1370.272037][T17594] FAT-fs (loop4): Directory bread(block 65) failed [ 1370.278697][T17594] FAT-fs (loop4): Directory bread(block 66) failed [ 1370.310709][T17594] FAT-fs (loop4): Directory bread(block 67) failed [ 1370.317490][T17594] FAT-fs (loop4): Directory bread(block 68) failed [ 1370.332820][T17594] FAT-fs (loop4): Directory bread(block 69) failed [ 1370.370832][T17594] FAT-fs (loop4): Directory bread(block 70) failed [ 1370.377530][T17594] FAT-fs (loop4): Directory bread(block 71) failed [ 1370.415015][T17594] FAT-fs (loop4): Directory bread(block 72) failed [ 1370.432159][T15397] udevd[15397]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1370.433369][T17599] udevd[17599]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1370.443348][T15396] udevd[15396]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1370.460083][T17594] FAT-fs (loop4): Directory bread(block 73) failed [ 1370.732061][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1370.732080][ T30] audit: type=1326 audit(2000000562.945:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1370.857873][ T30] audit: type=1326 audit(2000000562.975:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1370.933242][ T30] audit: type=1326 audit(2000000562.985:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1371.022046][ T30] audit: type=1326 audit(2000000563.035:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1371.084011][ T30] audit: type=1326 audit(2000000563.035:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048598eba9 code=0x7ffc0000 [ 1371.204164][ T5181] Bluetooth: hci0: command tx timeout [ 1371.541463][ T5973] hid_parser_main: 8 callbacks suppressed [ 1371.541487][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.574097][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.590253][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.614465][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.618206][T17445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1371.632756][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.640710][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.668094][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.690861][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.692384][T17445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1371.704678][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.728940][T17445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1371.731413][ T5973] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 1371.740982][ T5952] kernel write not supported for file bpf-prog (pid: 5952 comm: kworker/1:6) [ 1371.767609][ T5973] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1371.778853][T17445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1372.064741][T17651] loop4: detected capacity change from 0 to 512 [ 1372.116808][T17445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.128636][T17651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.168932][T17651] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.215238][T17445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.262365][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.269605][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.358768][T17651] pim6reg: entered allmulticast mode [ 1372.409441][T17661] loop7: detected capacity change from 512 to 511 [ 1372.447165][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.454413][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.639428][T16021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.917282][T17674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 1373.296338][T17445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.436567][T17445] veth0_vlan: entered promiscuous mode [ 1373.478635][T17445] veth1_vlan: entered promiscuous mode [ 1373.554076][ T5952] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1373.596868][T17445] veth0_macvtap: entered promiscuous mode [ 1373.630252][T17445] veth1_macvtap: entered promiscuous mode [ 1373.704530][T17445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.807596][T17445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.832177][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.846829][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.859586][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.875257][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.100981][T17698] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1374.328334][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.349430][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.403245][T17700] loop4: detected capacity change from 0 to 1024 [ 1374.445510][T17700] EXT4-fs: Ignoring removed orlov option [ 1374.464348][T17700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1374.533255][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.567407][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.628774][T17700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.414480][T17722] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 1375.454569][T17722] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1375.490737][T17725] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.503912][T16021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.511163][T17727] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 1375.542223][T17727] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1375.680447][T17725] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.990772][T17725] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.019606][T17740] atomic_op ffff88802b34e198 conn xmit_atomic 0000000000000000 [ 1376.192353][T17725] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.500771][T17756] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2845'. [ 1376.523475][T17756] netlink: 'syz.5.2845': attribute type 10 has an invalid length. [ 1376.652634][ T6962] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.731675][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.832558][ T5986] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.893286][T17765] loop1: detected capacity change from 0 to 1024 [ 1376.957473][ T5986] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.961263][T17765] EXT4-fs: Ignoring removed oldalloc option [ 1376.989550][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2851'. [ 1377.040080][T17765] EXT4-fs: Ignoring removed nobh option [ 1377.045747][T17765] ext4: Invalid uid '0x00000000ffffffff' [ 1377.130800][T17773] loop5: detected capacity change from 0 to 1024 [ 1377.166977][T17773] EXT4-fs: Ignoring removed orlov option [ 1377.193759][T17773] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1377.219531][T17773] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1377.239734][T17773] EXT4-fs (loop5): invalid journal inode [ 1377.245761][T17773] EXT4-fs (loop5): can't get journal size [ 1377.260775][T17773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1377.406589][T17773] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 1377.406589][T17773] [ 1377.556563][T15187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.970218][T17838] atomic_op ffff88802815d998 conn xmit_atomic 0000000000000000 [ 1378.994874][ T8092] hid_parser_main: 26 callbacks suppressed [ 1378.994899][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.043693][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.065563][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.103265][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.165210][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.198298][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.233828][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.264885][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.291524][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 1379.317565][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.383590][ T8092] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 1379.449094][ T8092] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1379.655865][T17858] siw: device registration error -23 [ 1379.972453][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 1380.600675][T17893] siw: device registration error -23 [ 1381.706261][T17942] loop1: detected capacity change from 0 to 512 [ 1381.794736][T17942] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2923: iget: bad i_size value: 38620345925642 [ 1381.843044][T17945] loop5: detected capacity change from 0 to 160 [ 1381.886434][T17942] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2923: couldn't read orphan inode 15 (err -117) [ 1381.965056][T17951] atomic_op ffff88807c593998 conn xmit_atomic 0000000000000000 [ 1381.967679][T17942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.154778][T17445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.452064][T17963] siw: device registration error -23 [ 1382.958524][ T30] audit: type=1326 audit(2000000575.145:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.4.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1382.990485][ T30] audit: type=1326 audit(2000000575.145:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.4.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1383.014320][ T30] audit: type=1326 audit(2000000575.155:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.4.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1383.036849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.094193][ T30] audit: type=1326 audit(2000000575.155:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.4.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a78eba9 code=0x7ffc0000 [ 1383.116769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.207698][T17980] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2938'. [ 1383.308548][T17991] loop4: detected capacity change from 0 to 512 [ 1383.432298][T17991] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2941: iget: bad i_size value: 38620345925642 [ 1383.533480][T17991] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2941: couldn't read orphan inode 15 (err -117) [ 1383.571990][T17991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.822376][T16021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.149714][T18020] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2952'. [ 1384.278706][T18027] loop4: detected capacity change from 0 to 164 [ 1384.653919][T18036] loop1: detected capacity change from 0 to 1024 [ 1384.728147][T18036] EXT4-fs: Ignoring removed oldalloc option [ 1384.744918][T18040] loop5: detected capacity change from 0 to 512 [ 1384.791562][T18036] EXT4-fs: Ignoring removed nobh option [ 1384.824877][T18040] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2959: iget: bad i_size value: 38620345925642 [ 1384.884955][T18036] ext4: Invalid uid '0x00000000ffffffff' [ 1384.920908][T18040] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2959: couldn't read orphan inode 15 (err -117) [ 1384.974908][T18040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.173921][T17995] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1385.996503][T15187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.025819][T18066] syzkaller0: entered promiscuous mode [ 1386.054068][T18066] syzkaller0: entered allmulticast mode [ 1386.241264][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2974'. [ 1386.290909][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 1387.542726][T18096] loop1: detected capacity change from 0 to 512 [ 1387.553927][T18096] EXT4-fs: Ignoring removed mblk_io_submit option [ 1387.575385][T18096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1387.603184][T18096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 1387.625863][T18096] System zones: 1-12 [ 1387.633203][T18096] EXT4-fs (loop1): 1 truncate cleaned up [ 1387.644906][T18096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.691494][ T30] audit: type=1800 audit(2000000579.886:1045): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2979" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1387.845830][T17445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.102493][T18102] loop1: detected capacity change from 0 to 128 [ 1388.377287][ T13] kworker/u8:1: attempt to access beyond end of device [ 1388.377287][ T13] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1390.724744][T18124] tipc: Enabled bearer , priority 0 [ 1390.752728][T18124] syzkaller0: entered promiscuous mode [ 1390.766373][T18132] loop5: detected capacity change from 0 to 512 [ 1390.774530][T18124] syzkaller0: entered allmulticast mode [ 1390.788382][ T30] audit: type=1326 audit(2000000582.986:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.3.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1390.817279][ T30] audit: type=1326 audit(2000000582.986:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.3.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1390.842404][ T30] audit: type=1326 audit(2000000582.986:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.3.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1390.922895][ T30] audit: type=1326 audit(2000000582.986:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.3.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1390.932229][T18132] EXT4-fs warning (device loop5): ext4_xattr_inode_get:542: inode #11: comm syz.5.2993: ea_inode file size=0 entry size=6 [ 1390.946132][ T30] audit: type=1326 audit(2000000582.986:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.3.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c38eba9 code=0x7ffc0000 [ 1391.004829][T18132] ------------[ cut here ]------------ [ 1391.005453][T18137] tipc: Resetting bearer [ 1391.010779][T18132] EA inode 11 i_nlink=2 [ 1391.012495][T18132] WARNING: fs/ext4/xattr.c:1053 at ext4_xattr_inode_update_ref+0x534/0x5d0, CPU#1: syz.5.2993/18132 [ 1391.032412][T18132] Modules linked in: [ 1391.036832][T18132] CPU: 1 UID: 0 PID: 18132 Comm: syz.5.2993 Not tainted syzkaller #0 PREEMPT(full) [ 1391.046685][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1391.057188][T18132] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.064150][T18132] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1391.075097][T18142] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1391.084069][T18132] RSP: 0018:ffffc9000b1272a0 EFLAGS: 00010246 [ 1391.100906][T18132] RAX: 1788454e222d1800 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1391.108990][T18132] RDX: ffffc9001159e000 RSI: 00000000000595b6 RDI: 00000000000595b7 [ 1391.117003][T18132] RBP: ffffc9000b127390 R08: ffffffff8fc3c837 R09: 1ffffffff1f87906 [ 1391.125203][T18132] R10: dffffc0000000000 R11: fffffbfff1f87907 R12: ffff8880587682e0 [ 1391.133686][T18132] R13: 1ffff1100b0ed05c R14: 00000000ffffffff R15: 000000000000000b [ 1391.142031][T18132] FS: 00007f59926786c0(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 1391.151247][T18132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1391.158125][T18132] CR2: 0000200000000140 CR3: 00000000424e4000 CR4: 00000000003526f0 [ 1391.166698][T18132] Call Trace: [ 1391.170126][T18132] [ 1391.173098][T18132] ? ext4_xattr_inode_dec_ref_all+0x46e/0xda0 [ 1391.179269][T18132] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1391.185654][T18132] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1391.192195][T18132] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1391.198337][T18132] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1391.205068][T18132] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1391.210901][T18132] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1391.217443][T18132] ? __ext4_journal_get_write_access+0x272/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1391.223853][T18132] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1391.230657][T18132] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1391.236403][T18132] ? ext4_truncate+0xdd8/0x12e0 [ 1391.241647][T18132] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1391.247702][T18132] ext4_evict_inode+0xac9/0xee0 [ 1391.252688][T18132] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.258106][T18132] ? do_raw_spin_unlock+0x122/0x240 [ 1391.263676][T18132] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.269439][T18132] evict+0x501/0x9c0 [ 1391.273386][T18132] ? __pfx_evict+0x10/0x10 [ 1391.280368][T18132] ? do_raw_spin_unlock+0x122/0x240 [ 1391.285631][T18132] ? _raw_spin_unlock+0x28/0x50 [ 1391.292177][T18132] ? iput+0x6d8/0x9d0 [ 1391.296227][T18132] ext4_orphan_cleanup+0xc20/0x1460 [ 1391.302523][T18132] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1391.308308][T18132] ? ext4_register_li_request+0x640/0x720 [ 1391.314129][T18132] ? errseq_check_and_advance+0x66/0x120 [ 1391.319873][T18132] ext4_fill_super+0x57df/0x6090 [ 1391.324958][T18132] ? __pfx_ext4_fill_super+0x10/0x10 [ 1391.330363][T18132] ? set_blocksize+0x21e/0x500 [ 1391.335209][T18132] ? sb_set_blocksize+0x104/0x180 [ 1391.340616][T18132] ? setup_bdev_super+0x4c1/0x5b0 [ 1391.345696][T18132] get_tree_bdev_flags+0x40b/0x4d0 [ 1391.351153][T18132] ? __pfx_ext4_fill_super+0x10/0x10 [ 1391.356487][T18132] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1391.362521][T18132] vfs_get_tree+0x8f/0x2b0 [ 1391.366997][T18132] do_new_mount+0x302/0xa10 [ 1391.371825][T18132] ? apparmor_capable+0x137/0x1b0 [ 1391.377098][T18132] ? __pfx_do_new_mount+0x10/0x10 [ 1391.382391][T18132] ? ns_capable+0x8a/0xf0 [ 1391.386791][T18132] ? kmem_cache_free+0x19a/0x690 [ 1391.391860][T18132] __se_sys_mount+0x313/0x410 [ 1391.397359][T18132] ? __pfx___se_sys_mount+0x10/0x10 [ 1391.403295][T18132] ? do_syscall_64+0xbe/0xfa0 [ 1391.408006][T18132] ? __x64_sys_mount+0x20/0xc0 [ 1391.412867][T18132] do_syscall_64+0xfa/0xfa0 [ 1391.417491][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.422803][T18132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.428966][T18132] ? clear_bhb_loop+0x60/0xb0 [ 1391.433698][T18132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.439914][T18132] RIP: 0033:0x7f599179034a [ 1391.444775][T18132] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.464559][T18132] RSP: 002b:00007f5992677e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1391.473365][T18132] RAX: ffffffffffffffda RBX: 00007f5992677ef0 RCX: 00007f599179034a [ 1391.481922][T18132] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5992677eb0 [ 1391.489996][T18132] RBP: 0000200000000180 R08: 00007f5992677ef0 R09: 0000000000800700 [ 1391.498758][T18132] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1391.507398][T18132] R13: 00007f5992677eb0 R14: 0000000000000473 R15: 0000200000000680 [ 1391.515572][T18132] [ 1391.518626][T18132] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1391.526020][T18132] CPU: 1 UID: 0 PID: 18132 Comm: syz.5.2993 Not tainted syzkaller #0 PREEMPT(full) [ 1391.535423][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1391.545610][T18132] Call Trace: [ 1391.548908][T18132] [ 1391.551845][T18132] dump_stack_lvl+0x99/0x250 [ 1391.556449][T18132] ? __asan_memcpy+0x40/0x70 [ 1391.561363][T18132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.566696][T18132] ? __pfx__printk+0x10/0x10 [ 1391.571366][T18132] vpanic+0x237/0x6d0 [ 1391.575381][T18132] ? __pfx_vpanic+0x10/0x10 [ 1391.579891][T18132] ? is_bpf_text_address+0x292/0x2b0 [ 1391.585200][T18132] ? is_bpf_text_address+0x26/0x2b0 [ 1391.590431][T18132] panic+0xb9/0xc0 [ 1391.594169][T18132] ? __pfx_panic+0x10/0x10 [ 1391.598612][T18132] __warn+0x334/0x4c0 [ 1391.602598][T18132] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.608597][T18132] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.614595][T18132] report_bug+0x2be/0x4f0 [ 1391.618950][T18132] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.624947][T18132] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.630943][T18132] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 1391.636930][T18132] handle_bug+0x84/0x160 [ 1391.641182][T18132] exc_invalid_op+0x1a/0x50 [ 1391.645691][T18132] asm_exc_invalid_op+0x1a/0x20 [ 1391.650547][T18132] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1391.657151][T18132] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1391.676760][T18132] RSP: 0018:ffffc9000b1272a0 EFLAGS: 00010246 [ 1391.682835][T18132] RAX: 1788454e222d1800 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1391.690825][T18132] RDX: ffffc9001159e000 RSI: 00000000000595b6 RDI: 00000000000595b7 [ 1391.698801][T18132] RBP: ffffc9000b127390 R08: ffffffff8fc3c837 R09: 1ffffffff1f87906 [ 1391.706781][T18132] R10: dffffc0000000000 R11: fffffbfff1f87907 R12: ffff8880587682e0 [ 1391.714755][T18132] R13: 1ffff1100b0ed05c R14: 00000000ffffffff R15: 000000000000000b [ 1391.722758][T18132] ? ext4_xattr_inode_dec_ref_all+0x46e/0xda0 [ 1391.728837][T18132] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1391.735214][T18132] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1391.740765][T18132] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1391.746849][T18132] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1391.752915][T18132] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1391.758647][T18132] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1391.765163][T18132] ? __ext4_journal_get_write_access+0x272/0x570 [ 1391.771787][T18132] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1391.778497][T18132] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1391.783974][T18132] ? ext4_truncate+0xdd8/0x12e0 [ 1391.788843][T18132] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1391.794850][T18132] ext4_evict_inode+0xac9/0xee0 [ 1391.799719][T18132] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.805122][T18132] ? do_raw_spin_unlock+0x122/0x240 [ 1391.810331][T18132] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.815707][T18132] evict+0x501/0x9c0 [ 1391.819619][T18132] ? __pfx_evict+0x10/0x10 [ 1391.824038][T18132] ? do_raw_spin_unlock+0x122/0x240 [ 1391.829243][T18132] ? _raw_spin_unlock+0x28/0x50 [ 1391.834106][T18132] ? iput+0x6d8/0x9d0 [ 1391.838103][T18132] ext4_orphan_cleanup+0xc20/0x1460 [ 1391.843338][T18132] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1391.848980][T18132] ? ext4_register_li_request+0x640/0x720 [ 1391.854721][T18132] ? errseq_check_and_advance+0x66/0x120 [ 1391.860367][T18132] ext4_fill_super+0x57df/0x6090 [ 1391.865349][T18132] ? __pfx_ext4_fill_super+0x10/0x10 [ 1391.870653][T18132] ? set_blocksize+0x21e/0x500 [ 1391.875440][T18132] ? sb_set_blocksize+0x104/0x180 [ 1391.880486][T18132] ? setup_bdev_super+0x4c1/0x5b0 [ 1391.885521][T18132] get_tree_bdev_flags+0x40b/0x4d0 [ 1391.890639][T18132] ? __pfx_ext4_fill_super+0x10/0x10 [ 1391.895934][T18132] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1391.901583][T18132] vfs_get_tree+0x8f/0x2b0 [ 1391.906012][T18132] do_new_mount+0x302/0xa10 [ 1391.910523][T18132] ? apparmor_capable+0x137/0x1b0 [ 1391.915560][T18132] ? __pfx_do_new_mount+0x10/0x10 [ 1391.920594][T18132] ? ns_capable+0x8a/0xf0 [ 1391.924937][T18132] ? kmem_cache_free+0x19a/0x690 [ 1391.929890][T18132] __se_sys_mount+0x313/0x410 [ 1391.934579][T18132] ? __pfx___se_sys_mount+0x10/0x10 [ 1391.939788][T18132] ? do_syscall_64+0xbe/0xfa0 [ 1391.944471][T18132] ? __x64_sys_mount+0x20/0xc0 [ 1391.949260][T18132] do_syscall_64+0xfa/0xfa0 [ 1391.953798][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.959044][T18132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.965132][T18132] ? clear_bhb_loop+0x60/0xb0 [ 1391.969835][T18132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.975731][T18132] RIP: 0033:0x7f599179034a [ 1391.980164][T18132] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.999784][T18132] RSP: 002b:00007f5992677e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1392.008230][T18132] RAX: ffffffffffffffda RBX: 00007f5992677ef0 RCX: 00007f599179034a [ 1392.016208][T18132] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5992677eb0 [ 1392.024210][T18132] RBP: 0000200000000180 R08: 00007f5992677ef0 R09: 0000000000800700 [ 1392.032182][T18132] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1392.040154][T18132] R13: 00007f5992677eb0 R14: 0000000000000473 R15: 0000200000000680 [ 1392.048155][T18132] [ 1392.051459][T18132] Kernel Offset: disabled [ 1392.055775][T18132] Rebooting in 86400 seconds..