last executing test programs: 11m47.034172269s ago: executing program 2 (id=643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="b287", 0x2}], 0x1}}], 0x2, 0x4c854) shutdown(r0, 0x1) 11m46.639262315s ago: executing program 2 (id=648): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 11m46.401242643s ago: executing program 2 (id=651): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) pipe2(0x0, 0x0) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r1, 0xfffffffffffffc01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) tee(0xffffffffffffffff, r1, 0x60000000000, 0x1000000000000000) 11m46.183426002s ago: executing program 2 (id=654): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0x2710976e35b8bc97, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x720, 0x538, 0x0, 0x2a8, 0x538, 0x0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) 11m45.213987069s ago: executing program 2 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r0) 11m43.856269029s ago: executing program 2 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x88100, 0x0, 0x0, 0x0, 0x0, 0x0) 11m28.772979873s ago: executing program 32 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x88100, 0x0, 0x0, 0x0, 0x0, 0x0) 9m21.789280087s ago: executing program 1 (id=1518): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x8000000000000005, 0xffffffffffffffff, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2, 0xa72e, 0xfff, 0x800000000, 0xb, 0x0, 0x0, 0xa73, 0x3, 0x7, 0x9, 0x1, 0xfffffffc, 0x0, 0x3, 0x1, 0x11e6, 0x5}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{0x0, 0x24}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 9m21.469182698s ago: executing program 1 (id=1521): ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES16], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 9m21.177969293s ago: executing program 1 (id=1525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chmod(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000006c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x0, 0x0) r6 = accept4$inet6(r4, &(0x7f0000000440), &(0x7f0000000480)=0x1c, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000004c0)={'nr0\x00', {0x2, 0x4e21, @loopback}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x3401}, {r3, 0x2aa}, {r5, 0x1011}, {r3, 0x20}], 0x5, 0x4ca) 9m18.898414156s ago: executing program 1 (id=1529): creat(&(0x7f00000002c0)='./file0\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000880)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000bc0)='./file0\x00') 9m18.452375278s ago: executing program 1 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d9008000000fd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e80006558", 0x9}, {&(0x7f0000000080)="f24bff20", 0x4}], 0x3) 9m18.162425149s ago: executing program 1 (id=1537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 9m2.111018518s ago: executing program 33 (id=1537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 4m51.217598285s ago: executing program 4 (id=2545): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 4m51.043549517s ago: executing program 4 (id=2549): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000340), &(0x7f0000000400)=""/94}, 0x20) 4m50.085720039s ago: executing program 4 (id=2554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x4}}, 0x10, 0x0}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m49.820844153s ago: executing program 4 (id=2560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4m48.716758546s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/149, 0x95}], 0x1) 4m47.400781975s ago: executing program 4 (id=2579): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) 4m39.404244316s ago: executing program 5 (id=2626): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4008040) 4m36.976774422s ago: executing program 5 (id=2638): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(r0, 0x400, 0x2) 4m35.958949429s ago: executing program 5 (id=2642): r0 = socket(0x1e, 0x805, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='inet_sk_error_report\x00', r0}, 0x18) syz_socket_connect_nvme_tcp() 4m35.889521486s ago: executing program 5 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4m35.688052252s ago: executing program 5 (id=2646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000640)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa020c2, 0x0) 4m35.318211794s ago: executing program 5 (id=2649): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mprotect(&(0x7f00006b6000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000be1000/0x3000)=nil, 0x3000, 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4m31.388335807s ago: executing program 34 (id=2579): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) 4m20.153839773s ago: executing program 35 (id=2649): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mprotect(&(0x7f00006b6000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000be1000/0x3000)=nil, 0x3000, 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 14.391957389s ago: executing program 3 (id=4499): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) nanosleep(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x18) socket$packet(0x11, 0x2, 0x300) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 12.970993657s ago: executing program 3 (id=4505): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1000000000000, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x44044) 12.594507143s ago: executing program 3 (id=4509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfd}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0xffffffff, 0x9, 0xfffffffffffffffc], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.578589457s ago: executing program 0 (id=4510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002440)="11", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 11.719787106s ago: executing program 3 (id=4514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0xf7, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES32, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x208, &(0x7f0000000700)="$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") capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) unshare(0x20000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800e3ffe7ff00007b01000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@grpid}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") sendmsg$key(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 11.537004083s ago: executing program 0 (id=4518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0104000000000000000012000000180001801400020076657468305f746f5f626f6e64"], 0x2c}}, 0x0) 11.43196702s ago: executing program 6 (id=4519): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1000000000000, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x44044) 9.625168048s ago: executing program 3 (id=4521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001000000000000", @ANYRES32, @ANYBLOB="fdffff00000000cad83ccbb3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", 0x0, 0x9, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040ff00009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000100)='9', 0x20000101}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.50378293s ago: executing program 6 (id=4522): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xe}, {0x5, 0xfff1}}}, 0x24}}, 0x4000000) 9.406480246s ago: executing program 0 (id=4525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 9.207708368s ago: executing program 6 (id=4526): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.992033458s ago: executing program 6 (id=4527): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000000)={0x3, 0x100, 0xfffffffd, 0x8001, 0xdca, 0x155}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000001c0)={0x1, 0x3, 0xd, 0xc7, 0x8, 0x6}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x4, {0x4, 0x0, "a6ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 8.151510091s ago: executing program 8 (id=4529): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) lseek(r1, 0x4, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@resuid}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0xffffffffffffffff, &(0x7f0000000340)) 7.94381623s ago: executing program 0 (id=4530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.736085624s ago: executing program 0 (id=4532): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x81) 5.25154178s ago: executing program 8 (id=4534): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) 5.187948759s ago: executing program 3 (id=4535): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) fchdir(0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 4.6200336s ago: executing program 6 (id=4537): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.035110929s ago: executing program 0 (id=4538): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x3000046, &(0x7f0000001a80)={[{@delalloc}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@test_dummy_encryption}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xa24}}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.75257327s ago: executing program 8 (id=4539): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x2, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x0, [{}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.591778953s ago: executing program 6 (id=4540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000540000/0x1000)=nil, 0x1000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x1, &(0x7f0000000240)) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.745033813s ago: executing program 7 (id=4541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002440)="11", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.610987691s ago: executing program 7 (id=4542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.48795653s ago: executing program 8 (id=4543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 1.441122293s ago: executing program 7 (id=4544): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000580)="5ca7bb", 0x3, 0x4008094, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) 1.355495697s ago: executing program 8 (id=4545): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff22) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000100)) 1.227859529s ago: executing program 7 (id=4546): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1000000000000, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x44044) 1.189084901s ago: executing program 7 (id=4547): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000000)={0x3, 0x100, 0xfffffffd, 0x8001, 0xdca, 0x155}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000001c0)={0x1, 0x3, 0xd, 0xc7, 0x8, 0x6}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x4, {0x4, 0x0, "a6ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 334.10383ms ago: executing program 7 (id=4548): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x2, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ftruncate(r0, 0x2007ffb) 0s ago: executing program 8 (id=4549): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 748.793165][ T29] audit: type=1326 audit(1738872460.954:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.6.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 749.001050][ T29] audit: type=1326 audit(1738872460.954:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.6.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 749.339426][ T29] audit: type=1326 audit(1738872460.954:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.6.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 749.534183][T11522] Bluetooth: hci0: command 0x0c1a tx timeout [ 749.541950][T14777] syzkaller0: entered promiscuous mode [ 749.551036][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 749.570000][T14777] syzkaller0: entered allmulticast mode [ 749.611627][T11522] Bluetooth: hci5: command 0x0c1a tx timeout [ 749.617708][T11522] Bluetooth: hci3: command 0x0c1a tx timeout [ 749.657050][T14780] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 750.190421][T14789] netlink: 'syz.6.3161': attribute type 10 has an invalid length. [ 750.399634][T14789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3161'. [ 751.204661][T14814] netlink: 'syz.6.3172': attribute type 7 has an invalid length. [ 751.620972][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 751.627884][T11522] Bluetooth: hci0: command 0x0c1a tx timeout [ 751.694278][T11522] Bluetooth: hci5: command 0x0c1a tx timeout [ 751.700890][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 752.625919][T14831] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.633513][T14831] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.673577][T14838] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3180'. [ 752.795031][T14837] loop3: detected capacity change from 0 to 8192 [ 752.996890][T14831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.037409][T14831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.261599][T14831] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.286083][T14831] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.310879][T14831] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.319845][T14831] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.554955][T14844] loop6: detected capacity change from 0 to 128 [ 753.636304][T14847] loop8: detected capacity change from 0 to 512 [ 753.650056][T14847] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.3185: casefold flag without casefold feature [ 753.681325][T14847] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3185: couldn't read orphan inode 15 (err -117) [ 753.732588][T14847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.733163][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3186'. [ 753.770303][ T1153] kworker/u8:8: attempt to access beyond end of device [ 753.770303][ T1153] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 753.925873][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.847552][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 754.847590][ T29] audit: type=1326 audit(1738872467.794:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 754.973346][ T29] audit: type=1326 audit(1738872467.844:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 754.999913][ T29] audit: type=1326 audit(1738872467.924:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.078620][ T29] audit: type=1326 audit(1738872467.924:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.167753][T14873] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3195'. [ 755.168148][ T29] audit: type=1326 audit(1738872467.924:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.269949][ T29] audit: type=1326 audit(1738872467.944:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.377811][ T29] audit: type=1326 audit(1738872467.944:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.494350][ T29] audit: type=1326 audit(1738872467.944:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.513379][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3199'. [ 755.580385][ T29] audit: type=1326 audit(1738872467.944:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 755.631665][ T29] audit: type=1326 audit(1738872467.944:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 756.929389][T14910] loop8: detected capacity change from 0 to 128 [ 756.977385][T14910] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.000493][T14910] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 757.280268][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3215'. [ 757.629237][T14910] Invalid ELF header magic: != ELF [ 758.731016][T13621] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 758.849991][T14944] netlink: 'syz.6.3223': attribute type 10 has an invalid length. [ 758.879711][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3223'. [ 758.991563][T14951] futex_wake_op: syz.0.3227 tries to shift op by 32; fix this program [ 759.395850][T14957] IPVS: length: 174 != 1776 [ 760.659598][T14965] syzkaller0: entered promiscuous mode [ 760.673736][T14968] loop6: detected capacity change from 0 to 512 [ 760.680959][T14965] syzkaller0: entered allmulticast mode [ 760.839344][T14968] EXT4-fs: Ignoring removed i_version option [ 760.851102][T14968] EXT4-fs: Ignoring removed mblk_io_submit option [ 760.857729][T14968] ext4: Unknown parameter 'seclabel' [ 761.085338][T14981] loop6: detected capacity change from 0 to 128 [ 761.129504][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 761.129522][ T29] audit: type=1326 audit(1738872474.084:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 761.131750][ T29] audit: type=1326 audit(1738872474.084:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 761.132137][ T29] audit: type=1326 audit(1738872474.084:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 761.156602][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3239'. [ 761.247911][ T29] audit: type=1326 audit(1738872474.124:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 761.247968][ T29] audit: type=1326 audit(1738872474.124:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 761.248013][ T29] audit: type=1800 audit(1738872474.124:2611): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3238" name="bus" dev="loop6" ino=135 res=0 errno=0 [ 761.248058][ T29] audit: type=1800 audit(1738872474.124:2612): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3238" name="bus" dev="loop6" ino=135 res=0 errno=0 [ 761.611206][ T6259] kworker/u8:9: attempt to access beyond end of device [ 761.611206][ T6259] loop6: rw=1, sector=153, nr_sectors = 888 limit=128 [ 761.782108][T14995] loop8: detected capacity change from 0 to 512 [ 761.854653][T14995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.919007][T14995] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.017689][T15003] netlink: 'syz.6.3245': attribute type 7 has an invalid length. [ 762.037146][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 762.038078][T14995] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 762.068656][T14995] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 28 [ 762.104186][T14995] EXT4-fs (loop8): This should not happen!! Data will be lost [ 762.104186][T14995] [ 762.116450][T14995] EXT4-fs (loop8): Total free blocks count 0 [ 762.128052][T14995] EXT4-fs (loop8): Free/Dirty block details [ 762.134321][T14995] EXT4-fs (loop8): free_blocks=39626 [ 762.139736][T14995] EXT4-fs (loop8): dirty_blocks=17 [ 762.145435][T14995] EXT4-fs (loop8): Block reservation details [ 762.151817][T14995] EXT4-fs (loop8): i_reserved_data_blocks=17 [ 762.262200][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.474818][T15008] futex_wake_op: syz.8.3247 tries to shift op by 32; fix this program [ 762.857582][T15010] IPVS: length: 174 != 1776 [ 763.874880][T15010] loop8: detected capacity change from 0 to 40427 [ 763.904663][T15010] F2FS-fs (loop8): invalid crc value [ 763.944179][T15010] F2FS-fs (loop8): Found nat_bits in checkpoint [ 764.040853][T15010] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 767.218046][T15026] netlink: 'syz.7.3253': attribute type 21 has an invalid length. [ 767.233122][T15026] netlink: 'syz.7.3253': attribute type 20 has an invalid length. [ 767.261364][T15026] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.417921][ T29] audit: type=1326 audit(1738872480.364:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.6.3256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x0 [ 767.788138][T15050] loop7: detected capacity change from 0 to 512 [ 767.834909][T15050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.864414][T15050] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.565439][T13507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.853741][T15083] siw: device registration error -23 [ 769.023825][ T29] audit: type=1326 audit(1738872481.974:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15094 comm="syz.8.3281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x0 [ 771.251031][T15141] xt_connbytes: Forcing CT accounting to be enabled [ 771.384604][T15141] Cannot find set identified by id 0 to match [ 771.436788][ T29] audit: type=1326 audit(1738872484.384:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.0.3305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x0 [ 773.138139][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 773.565014][ T29] audit: type=1326 audit(1738872486.494:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15198 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 773.637340][ T29] audit: type=1326 audit(1738872486.494:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15198 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 773.707109][T15207] futex_wake_op: syz.8.3332 tries to shift op by 32; fix this program [ 773.707318][ T29] audit: type=1326 audit(1738872486.494:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15198 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 773.739125][ T29] audit: type=1326 audit(1738872486.494:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15198 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 773.997639][ T29] audit: type=1326 audit(1738872486.644:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.7.3330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x0 [ 774.166734][T15215] IPVS: length: 174 != 1776 [ 775.193436][ T29] audit: type=1326 audit(1738872488.124:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.3.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 775.217101][T15215] loop8: detected capacity change from 0 to 40427 [ 775.248817][ T29] audit: type=1326 audit(1738872488.124:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.3.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 775.271875][T15215] F2FS-fs (loop8): invalid crc value [ 775.278935][ T29] audit: type=1326 audit(1738872488.144:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.3.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 775.311023][T15215] F2FS-fs (loop8): Found nat_bits in checkpoint [ 775.323440][ T29] audit: type=1326 audit(1738872488.144:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.3.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 775.361689][T15215] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 775.396557][ T29] audit: type=1326 audit(1738872488.174:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.3.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 776.035111][T15245] loop3: detected capacity change from 0 to 512 [ 776.086896][T15245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.112518][T15245] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 776.195719][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.459567][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3354'. [ 776.484841][T15260] loop8: detected capacity change from 0 to 4096 [ 776.536141][T15260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.598030][T15267] futex_wake_op: syz.0.3357 tries to shift op by 32; fix this program [ 776.667159][T15269] bridge_slave_0: left allmulticast mode [ 776.673039][T15269] bridge_slave_0: left promiscuous mode [ 776.679120][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.878213][T15269] bridge_slave_1: left allmulticast mode [ 776.905388][T15269] bridge_slave_1: left promiscuous mode [ 777.013968][T15272] IPVS: length: 174 != 1776 [ 777.737795][T15269] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.867977][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.892916][T15269] bond0: (slave bond_slave_0): Releasing backup interface [ 777.954522][T15269] bond0: (slave bond_slave_1): Releasing backup interface [ 778.002962][T15275] loop6: detected capacity change from 0 to 512 [ 778.048110][T15276] netlink: 'syz.3.3360': attribute type 10 has an invalid length. [ 778.088376][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3360'. [ 778.120553][T15275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.149442][T15275] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 778.167671][T15269] team0: Port device team_slave_0 removed [ 778.183053][T15269] team0: Port device team_slave_1 removed [ 778.208659][T15269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.231828][T15269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.285194][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.457915][T15276] team0: Port device geneve0 added [ 778.923930][T15304] loop3: detected capacity change from 0 to 512 [ 778.938894][T15304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.951921][T15304] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.060988][T15307] loop8: detected capacity change from 0 to 128 [ 779.116896][T15307] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.147662][T15312] futex_wake_op: syz.0.3375 tries to shift op by 32; fix this program [ 779.163200][T15307] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 779.315519][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.344542][T13621] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.412733][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 779.412771][ T29] audit: type=1804 audit(1738872492.204:2643): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3373" name="/newroot/124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop8" ino=12 res=1 errno=0 [ 779.462769][ T29] audit: type=1800 audit(1738872492.204:2644): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3373" name="bus" dev="loop8" ino=12 res=0 errno=0 [ 779.603146][T15316] IPVS: length: 174 != 1776 [ 780.451274][T15318] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3377'. [ 780.503398][T15318] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3377'. [ 780.587911][ T29] audit: type=1326 audit(1738872493.534:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.7.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 780.742568][ T29] audit: type=1326 audit(1738872493.534:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.7.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 780.798230][ T29] audit: type=1326 audit(1738872493.564:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.7.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 780.833546][ T29] audit: type=1326 audit(1738872493.564:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.7.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 780.882511][T15318] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3377'. [ 780.898648][T15318] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3377'. [ 780.916446][ T29] audit: type=1326 audit(1738872493.564:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.7.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 781.187473][T15334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3383'. [ 781.424430][T15344] loop8: detected capacity change from 0 to 128 [ 781.459784][T15344] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.478650][T15344] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 781.691007][ T29] audit: type=1804 audit(1738872494.634:2650): pid=15344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3387" name="/newroot/126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop8" ino=12 res=1 errno=0 [ 781.802654][T13621] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.854178][ T29] audit: type=1800 audit(1738872494.634:2651): pid=15344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3387" name="bus" dev="loop8" ino=12 res=0 errno=0 [ 782.233934][T15360] futex_wake_op: syz.6.3393 tries to shift op by 32; fix this program [ 782.389335][T15367] loop8: detected capacity change from 0 to 512 [ 782.407774][T15367] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 782.476005][T15367] EXT4-fs error (device loop8): ext4_quota_enable:7101: comm syz.8.3396: inode #167772160: comm syz.8.3396: iget: illegal inode # [ 782.491529][T15367] EXT4-fs error (device loop8): ext4_quota_enable:7104: comm syz.8.3396: Bad quota inode: 167772160, type: 2 [ 782.512841][T15367] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=167772160). Please run e2fsck to fix. [ 782.529728][T15367] EXT4-fs (loop8): mount failed [ 782.644827][T15373] IPVS: length: 174 != 1776 [ 783.644949][T15373] loop6: detected capacity change from 0 to 40427 [ 783.655966][T15373] F2FS-fs (loop6): invalid crc value [ 783.709854][T15373] F2FS-fs (loop6): Found nat_bits in checkpoint [ 783.767554][T15373] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 784.609322][T15410] wg2: entered promiscuous mode [ 784.620694][T15410] wg2: entered allmulticast mode [ 784.677485][ T29] audit: type=1326 audit(1738872497.624:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 784.762197][ T29] audit: type=1326 audit(1738872497.624:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 784.784954][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3414'. [ 784.785135][ T29] audit: type=1326 audit(1738872497.624:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 784.824554][ T29] audit: type=1326 audit(1738872497.654:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa6fb83da7 code=0x7ffc0000 [ 784.833118][T15417] loop8: detected capacity change from 0 to 512 [ 784.863602][ T29] audit: type=1326 audit(1738872497.654:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa6fb28fb9 code=0x7ffc0000 [ 784.894275][ T29] audit: type=1326 audit(1738872497.654:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 784.931006][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3418'. [ 784.956072][ T29] audit: type=1326 audit(1738872497.654:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 785.033464][ T29] audit: type=1326 audit(1738872497.654:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa6fb83da7 code=0x7ffc0000 [ 785.056007][T15417] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 785.086876][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3407'. [ 785.094311][T15417] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 785.142598][ T29] audit: type=1326 audit(1738872497.654:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15414 comm="syz.3.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa6fb28fb9 code=0x7ffc0000 [ 785.184464][T15417] EXT4-fs (loop8): mount failed [ 785.686164][T15450] loop3: detected capacity change from 0 to 128 [ 785.749805][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3430'. [ 785.764883][T15450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 785.800925][T15450] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 785.946395][T13995] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.981178][T15459] wg2: entered promiscuous mode [ 786.007018][T15459] wg2: entered allmulticast mode [ 786.148848][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'. [ 787.413244][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3442'. [ 787.843893][T15501] netlink: 'syz.7.3448': attribute type 10 has an invalid length. [ 787.861257][T15501] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3448'. [ 787.893318][T15501] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.916986][T15501] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.954853][T15501] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.964657][T15501] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.997244][T15501] team0: Port device geneve0 added [ 788.301204][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3454'. [ 788.376676][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3455'. [ 789.604890][T15540] random: crng reseeded on system resumption [ 789.705884][T15535] netlink: 'syz.3.3462': attribute type 10 has an invalid length. [ 789.731356][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3462'. [ 790.938215][T15548] vlan0: entered promiscuous mode [ 790.972669][T15548] bond0: entered promiscuous mode [ 790.992515][T15548] bond_slave_0: entered promiscuous mode [ 790.998515][T15548] bond_slave_1: entered promiscuous mode [ 791.013774][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3468'. [ 791.031461][T15548] bond0: left promiscuous mode [ 791.042992][T15548] bond_slave_0: left promiscuous mode [ 791.053293][T15548] bond_slave_1: left promiscuous mode [ 791.585090][T15570] netlink: 'syz.6.3476': attribute type 10 has an invalid length. [ 791.593190][T15570] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3476'. [ 791.856758][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3481'. [ 792.049039][T15588] loop8: detected capacity change from 0 to 764 [ 792.094216][T15588] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 792.483030][T15608] netlink: 'syz.8.3490': attribute type 10 has an invalid length. [ 792.513222][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3490'. [ 793.454842][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 793.578580][T15623] loop3: detected capacity change from 0 to 512 [ 793.643725][T15623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.697436][T15623] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 793.913600][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.012522][T15642] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3504'. [ 794.939469][T15676] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3518'. [ 795.105767][T15683] 9pnet: p9_errstr2errno: server reported unknown error [ 795.792821][T15715] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3535'. [ 796.504532][T15736] loop3: detected capacity change from 0 to 8192 [ 796.726127][T15748] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3550'. [ 797.912829][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 797.912848][ T29] audit: type=1326 audit(1738872510.864:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.012370][ T29] audit: type=1326 audit(1738872510.864:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.106587][T15776] netlink: 'syz.8.3560': attribute type 10 has an invalid length. [ 798.134484][ T29] audit: type=1326 audit(1738872510.864:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.181710][T15776] veth0_macvtap: left promiscuous mode [ 798.191269][ T29] audit: type=1326 audit(1738872510.864:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.229304][T15776] veth0_macvtap: entered promiscuous mode [ 798.266478][T15776] team0: Device macvtap0 failed to register rx_handler [ 798.301345][ T29] audit: type=1326 audit(1738872510.874:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.358500][T15776] veth0_macvtap: left promiscuous mode [ 798.368313][ T29] audit: type=1326 audit(1738872510.874:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.417252][T15787] loop6: detected capacity change from 0 to 1024 [ 798.424572][ T29] audit: type=1326 audit(1738872510.884:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.457512][T15787] EXT4-fs: Ignoring removed nobh option [ 798.463787][T15787] EXT4-fs: Ignoring removed bh option [ 798.475900][ T29] audit: type=1326 audit(1738872510.904:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.480852][T15788] dccp_close: ABORT with 2 bytes unread [ 798.502268][ T29] audit: type=1326 audit(1738872510.904:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.557457][ T29] audit: type=1326 audit(1738872510.904:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 798.593739][T15787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.628471][T15794] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 798.667424][T15794] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 798.676212][T15794] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 798.861237][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.487014][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3578'. [ 799.596385][T15821] macvtap1: entered promiscuous mode [ 799.620862][T15821] erspan0: entered promiscuous mode [ 799.635856][T15821] macvtap1: entered allmulticast mode [ 799.653562][T15821] erspan0: entered allmulticast mode [ 800.415270][T15849] loop8: detected capacity change from 0 to 512 [ 800.597835][T15856] No such timeout policy "syz0" [ 801.175589][T15849] EXT4-fs: inline encryption not supported [ 801.270117][T15861] syz_tun: entered allmulticast mode [ 801.287354][T15861] syz_tun: left allmulticast mode [ 801.394014][T15849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.472280][T15849] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.506019][T15849] EXT4-fs error (device loop8): ext4_do_update_inode:5142: inode #2: comm syz.8.3593: corrupted inode contents [ 801.543099][T15849] EXT4-fs error (device loop8): ext4_dirty_inode:6030: inode #2: comm syz.8.3593: mark_inode_dirty error [ 801.596685][T15849] EXT4-fs error (device loop8): ext4_do_update_inode:5142: inode #2: comm syz.8.3593: corrupted inode contents [ 801.673182][T15872] EXT4-fs error (device loop8): ext4_do_update_inode:5142: inode #2: comm syz.8.3593: corrupted inode contents [ 801.716051][T15872] EXT4-fs error (device loop8): ext4_dirty_inode:6030: inode #2: comm syz.8.3593: mark_inode_dirty error [ 801.743746][T15872] EXT4-fs error (device loop8): ext4_do_update_inode:5142: inode #2: comm syz.8.3593: corrupted inode contents [ 801.757041][T15878] lo speed is unknown, defaulting to 1000 [ 801.787308][T15872] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3593: mark_inode_dirty error [ 801.844865][T15872] EXT4-fs error (device loop8): ext4_do_update_inode:5142: inode #2: comm syz.8.3593: corrupted inode contents [ 801.871032][T15872] EXT4-fs error (device loop8): ext4_dirty_inode:6030: inode #2: comm syz.8.3593: mark_inode_dirty error [ 801.959074][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.321339][T15894] loop6: detected capacity change from 0 to 1024 [ 802.359841][T15894] EXT4-fs: Ignoring removed nobh option [ 802.375040][T15894] EXT4-fs: Ignoring removed bh option [ 802.420111][T15878] lo speed is unknown, defaulting to 1000 [ 802.513514][T15894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.743329][T15903] No such timeout policy "syz0" [ 803.434355][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3612'. [ 803.442690][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.594408][T15915] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 803.755343][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3614'. [ 803.851433][T15922] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3618'. [ 804.503277][T15938] loop8: detected capacity change from 0 to 1024 [ 804.670782][T15946] No such timeout policy "syz0" [ 804.735725][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 805.293669][T15938] EXT4-fs: Ignoring removed nobh option [ 805.299290][T15938] EXT4-fs: Ignoring removed bh option [ 805.350153][T15938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.516541][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.014459][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3638'. [ 806.030930][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3639'. [ 806.278792][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3643'. [ 806.995777][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3654'. [ 807.048666][T16017] loop3: detected capacity change from 0 to 1024 [ 807.068366][T16018] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3656'. [ 807.101019][T16017] EXT4-fs: Ignoring removed nobh option [ 807.106662][T16017] EXT4-fs: Ignoring removed bh option [ 807.179983][T16017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.377059][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.802095][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3668'. [ 808.836437][T16054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3669'. [ 809.057334][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.067712][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.380257][T16069] netlink: 'syz.6.3679': attribute type 4 has an invalid length. [ 810.551737][T16080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3684'. [ 810.986049][T16098] loop8: detected capacity change from 0 to 512 [ 811.012207][T16098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.047367][T16098] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.179800][T16107] loop6: detected capacity change from 0 to 512 [ 811.195064][T16107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.207966][T16107] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 811.278193][ T5938] IPVS: starting estimator thread 0... [ 811.442175][T16112] IPVS: using max 28 ests per chain, 67200 per kthread [ 811.458724][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.473319][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 811.674235][T16123] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3699'. [ 811.913848][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.577346][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3710'. [ 813.116225][T16165] No such timeout policy "syz0" [ 814.213158][T16177] netlink: 'syz.7.3719': attribute type 10 has an invalid length. [ 814.237249][T16177] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3719'. [ 814.256766][T16175] netlink: 'syz.6.3720': attribute type 4 has an invalid length. [ 814.276001][T16177] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.291237][T16175] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3720'. [ 814.312627][T16177] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.331878][T16177] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.367551][T16177] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.427352][T16175] : renamed from bond0 [ 814.618732][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3723'. [ 815.350557][T16200] No such timeout policy "syz0" [ 816.255986][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 816.331880][T16210] 9pnet_fd: Insufficient options for proto=fd [ 816.461045][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 817.227808][T16242] Timeout policy `syz0' can only be used by L3 protocol number 64507 [ 818.166626][T16249] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 818.215880][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 818.228553][T16249] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 818.259698][T16249] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 818.421268][T16261] 9pnet_fd: Insufficient options for proto=fd [ 818.661807][T16272] futex_wake_op: syz.7.3757 tries to shift op by 32; fix this program [ 819.020793][T16280] IPVS: length: 174 != 1776 [ 819.986297][T16267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.168163][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3760'. [ 820.468148][T16267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.528422][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3765'. [ 820.562691][ T8] IPVS: starting estimator thread 0... [ 820.672341][T16294] IPVS: using max 26 ests per chain, 62400 per kthread [ 820.682646][T16267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.941686][T16267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.207580][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 821.207596][ T29] audit: type=1326 audit(1738872534.154:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.286966][T16267] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.289337][ T29] audit: type=1326 audit(1738872534.194:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.412900][T16267] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.418672][ T29] audit: type=1326 audit(1738872534.204:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.503429][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 821.514674][T16267] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.520433][ T29] audit: type=1326 audit(1738872534.204:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.576847][T16320] wg2: entered promiscuous mode [ 821.589231][T16320] wg2: entered allmulticast mode [ 821.624333][T16267] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.631428][ T29] audit: type=1326 audit(1738872534.204:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.730681][ T29] audit: type=1326 audit(1738872534.204:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.758369][T16320] loop6: detected capacity change from 0 to 512 [ 821.808690][ T29] audit: type=1326 audit(1738872534.204:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.890146][T16320] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 821.907356][ T29] audit: type=1326 audit(1738872534.204:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 821.910341][T16320] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 821.943591][ T29] audit: type=1326 audit(1738872534.204:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 822.074599][T16320] EXT4-fs (loop6): mount failed [ 822.400207][T16354] loop6: detected capacity change from 0 to 512 [ 822.448600][T16354] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 822.494038][T16354] EXT4-fs error (device loop6): ext4_quota_enable:7101: comm syz.6.3785: inode #167772160: comm syz.6.3785: iget: illegal inode # [ 822.543619][T16354] EXT4-fs error (device loop6): ext4_quota_enable:7104: comm syz.6.3785: Bad quota inode: 167772160, type: 2 [ 822.631666][T16354] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=167772160). Please run e2fsck to fix. [ 822.687130][T16354] EXT4-fs (loop6): mount failed [ 823.025951][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3797'. [ 823.433434][T16398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3804'. [ 823.503126][T16405] loop3: detected capacity change from 0 to 512 [ 823.536636][T16405] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 823.631832][T16405] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.3807: inode #167772160: comm syz.3.3807: iget: illegal inode # [ 823.666180][T16414] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3810'. [ 823.754520][T16405] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.3807: Bad quota inode: 167772160, type: 2 [ 823.793882][T16405] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=167772160). Please run e2fsck to fix. [ 823.844701][T16405] EXT4-fs (loop3): mount failed [ 824.342195][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3822'. [ 824.726935][T16459] loop8: detected capacity change from 0 to 128 [ 824.776577][T16459] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.805628][T16459] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 825.011101][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3830'. [ 825.083605][T13621] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.105099][T16473] loop6: detected capacity change from 0 to 512 [ 825.133595][T16475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3833'. [ 825.199220][T16473] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 825.309236][T16473] EXT4-fs (loop6): mount failed [ 825.341832][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3836'. [ 825.925400][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 826.042402][T16505] loop3: detected capacity change from 0 to 128 [ 826.109977][T16505] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 826.176290][T16505] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 826.339020][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 826.339038][ T29] audit: type=1804 audit(1738872539.284:2889): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3844" name="/newroot/185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 res=1 errno=0 [ 826.477173][T13995] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 826.515467][ T29] audit: type=1800 audit(1738872539.344:2890): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3844" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 826.681774][T16518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3847'. [ 827.170461][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3851'. [ 827.592998][T16530] loop3: detected capacity change from 0 to 512 [ 827.665836][T16530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.699072][T16530] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 827.781387][ T29] audit: type=1800 audit(1738872540.714:2891): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3853" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 827.903858][ T29] audit: type=1800 audit(1738872540.714:2892): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3853" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 827.937220][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.015492][ T29] audit: type=1326 audit(1738872540.964:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 828.080333][ T29] audit: type=1326 audit(1738872540.964:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 828.133697][ T29] audit: type=1326 audit(1738872540.964:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 828.251764][ T29] audit: type=1326 audit(1738872540.964:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 828.315565][ T29] audit: type=1326 audit(1738872540.964:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 828.387702][T16549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3859'. [ 828.602054][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3863'. [ 828.910397][T16562] loop3: detected capacity change from 0 to 512 [ 828.968125][T16562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.031192][T16562] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 829.588605][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.631248][T16575] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3871'. [ 829.880856][T16581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3872'. [ 830.101763][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3876'. [ 830.546354][T16594] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 831.172864][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3886'. [ 831.185203][T16606] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3884'. [ 831.441319][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3889'. [ 831.720502][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3893'. [ 831.757414][T16629] netlink: 'syz.0.3894': attribute type 13 has an invalid length. [ 831.808689][T16628] loop8: detected capacity change from 0 to 512 [ 831.883469][T16628] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 831.911195][T16628] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 831.973059][T16629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.999966][T16628] EXT4-fs (loop8): mount failed [ 832.154616][ T29] audit: type=1326 audit(1738872545.104:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.271205][ T29] audit: type=1326 audit(1738872545.104:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.340667][ T29] audit: type=1326 audit(1738872545.104:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.446461][ T29] audit: type=1326 audit(1738872545.104:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.490862][ T29] audit: type=1326 audit(1738872545.104:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.517237][ T29] audit: type=1326 audit(1738872545.104:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.545267][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3899'. [ 832.559949][ T29] audit: type=1326 audit(1738872545.104:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.623829][ T29] audit: type=1326 audit(1738872545.104:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.710500][ T29] audit: type=1326 audit(1738872545.104:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 832.966607][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3904'. [ 833.317521][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3908'. [ 833.330193][T16669] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in; [ 833.330193][T16669] program syz.8.3910 not setting count and/or reply_len properly [ 833.369043][T16668] loop3: detected capacity change from 0 to 512 [ 833.446355][T16672] loop8: detected capacity change from 0 to 2048 [ 833.487795][T16668] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 833.562028][T16668] EXT4-fs (loop3): mount failed [ 833.599497][T16672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.846530][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.176442][T16707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3920'. [ 835.201533][T16709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3921'. [ 835.990025][T16729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3930'. [ 836.178058][T16735] loop8: detected capacity change from 0 to 128 [ 836.321630][T16735] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 836.386582][T16735] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 836.647042][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3935'. [ 836.693235][T13621] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.839691][T16749] netlink: 'syz.7.3937': attribute type 13 has an invalid length. [ 836.864872][T16749] gretap0: refused to change device tx_queue_len [ 836.882080][T16749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 837.213901][T16760] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3943'. [ 837.261117][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3944'. [ 837.362630][T16764] loop8: detected capacity change from 0 to 512 [ 837.377670][T16764] EXT4-fs: Ignoring removed nobh option [ 837.391514][T16764] EXT4-fs: Ignoring removed mblk_io_submit option [ 837.416465][T16764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.714891][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.937084][T16508] Set syz1 is full, maxelem 65536 reached [ 837.995999][T16779] siw: device registration error -23 [ 838.104373][T16783] loop6: detected capacity change from 0 to 256 [ 838.123927][T16783] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 838.593027][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3957'. [ 838.852504][T16797] loop8: detected capacity change from 0 to 256 [ 838.964933][T16797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 838.998324][T16797] FAT-fs (loop8): Filesystem has been set read-only [ 839.012791][T16797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 839.043432][T16797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 839.135022][T16802] netlink: 'syz.7.3961': attribute type 10 has an invalid length. [ 839.162961][T16802] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3961'. [ 839.440996][T16809] wg2: entered promiscuous mode [ 839.456145][T16809] wg2: entered allmulticast mode [ 839.624081][T16811] tipc: Started in network mode [ 839.639326][T16811] tipc: Node identity ac1414aa, cluster identity 4711 [ 839.674539][T16811] tipc: Enabled bearer , priority 10 [ 839.691114][T16817] tipc: Disabling bearer [ 840.038061][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3969'. [ 840.285621][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 840.285639][ T29] audit: type=1326 audit(1738872553.234:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.8.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 840.380856][ T29] audit: type=1326 audit(1738872553.264:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.8.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 840.444178][ T29] audit: type=1326 audit(1738872553.264:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.8.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 840.527482][ T29] audit: type=1326 audit(1738872553.264:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.8.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 840.576527][T16837] netlink: 'syz.8.3974': attribute type 10 has an invalid length. [ 840.610956][T16837] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3974'. [ 840.646077][ T29] audit: type=1326 audit(1738872553.264:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.8.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 840.728139][ T29] audit: type=1326 audit(1738872553.474:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 840.782293][ T29] audit: type=1326 audit(1738872553.474:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 840.842478][ T29] audit: type=1326 audit(1738872553.514:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 840.930767][ T29] audit: type=1326 audit(1738872553.514:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 841.018876][ T29] audit: type=1326 audit(1738872553.514:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 841.392620][T16830] lo speed is unknown, defaulting to 1000 [ 841.667601][T16864] loop6: detected capacity change from 0 to 512 [ 841.705305][T16864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.720755][T16864] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.407466][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.746819][T16894] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.154034][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.162041][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.172323][T16912] loop8: detected capacity change from 0 to 256 [ 843.207419][T16912] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 843.226173][T16912] FAT-fs (loop8): Filesystem has been set read-only [ 843.248100][T16912] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 843.294208][T16907] wg2: left promiscuous mode [ 843.299188][T16912] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 843.309984][T16907] wg2: left allmulticast mode [ 843.417364][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.443231][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.665700][T16907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.675191][T16907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.684270][T16907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.703002][T16907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.827209][T16914] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4006'. [ 845.927909][T16971] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4032'. [ 847.132237][T16991] syzkaller0: entered promiscuous mode [ 847.174032][T16991] syzkaller0: entered allmulticast mode [ 847.218306][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 847.218325][ T29] audit: type=1326 audit(1738872560.164:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 847.290454][ T29] audit: type=1326 audit(1738872560.164:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 847.300932][T16999] Process accounting resumed [ 847.367944][ T29] audit: type=1326 audit(1738872560.194:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 847.490810][ T29] audit: type=1326 audit(1738872560.204:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 847.560787][ T29] audit: type=1326 audit(1738872560.204:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 847.650767][ T29] audit: type=1326 audit(1738872560.214:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 848.625196][ T29] audit: type=1326 audit(1738872560.214:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 848.647849][ T29] audit: type=1326 audit(1738872560.214:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 849.094697][T17010] lo speed is unknown, defaulting to 1000 [ 849.261604][T17008] Cannot find del_set index 0 as target [ 849.633524][ T29] audit: type=1326 audit(1738872560.224:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 849.656142][ T29] audit: type=1326 audit(1738872560.224:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.7.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 850.557886][T17021] loop8: detected capacity change from 0 to 512 [ 850.618097][T17021] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4050: bg 0: block 248: padding at end of block bitmap is not set [ 850.681411][T17021] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4050: Failed to acquire dquot type 1 [ 850.709605][T17026] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4052'. [ 850.719652][T17021] EXT4-fs (loop8): 1 truncate cleaned up [ 850.727295][T17021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.758167][T17021] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.196108][T17038] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4055'. [ 851.278399][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.398414][T17042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4059'. [ 851.442776][T17042] siw: device registration error -23 [ 851.445405][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4061'. [ 851.561289][T17049] netlink: 'syz.8.4057': attribute type 10 has an invalid length. [ 851.583843][T17049] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4057'. [ 852.133103][ T5887] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 852.301325][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 852.337083][ T5887] usb 7-1: config 0 has an invalid interface number: 198 but max is 0 [ 852.355838][ T5887] usb 7-1: config 0 has no interface number 0 [ 852.443000][ T5887] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=28.b2 [ 852.454045][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.476430][ T5887] usb 7-1: Product: syz [ 852.518345][ T5887] usb 7-1: Manufacturer: syz [ 852.526936][ T5887] usb 7-1: SerialNumber: syz [ 852.641616][ T5887] usb 7-1: config 0 descriptor?? [ 852.915308][ T5887] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 852.961159][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 853.016591][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.031295][T17075] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4072'. [ 853.044551][ T5887] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 853.081062][ T5887] usb 7-1: media controller created [ 854.144159][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.182104][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 854.188518][ T5887] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 854.254596][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input5 [ 854.266180][T11446] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 854.332743][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 854.364092][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 854.406174][ T5887] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 854.463232][T11446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 854.476680][ T5887] usb 7-1: USB disconnect, device number 15 [ 854.484041][T11446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.520244][T11446] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 854.558298][T11446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.602060][T11446] usb 1-1: config 0 descriptor?? [ 854.693228][T17093] loop6: detected capacity change from 0 to 256 [ 854.760586][ T5887] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 854.774367][T17093] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 854.789244][T17093] FAT-fs (loop6): Filesystem has been set read-only [ 854.799150][T17093] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 854.819101][T17093] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 855.240795][T11446] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 855.266770][T11446] usb 1-1: USB disconnect, device number 3 [ 856.293902][T17104] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4084'. [ 856.447952][T17109] bridge_slave_0: left allmulticast mode [ 856.454005][T17109] bridge_slave_0: left promiscuous mode [ 856.460114][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.477945][T17109] bridge_slave_1: left allmulticast mode [ 856.483909][T17109] bridge_slave_1: left promiscuous mode [ 856.501175][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.581124][T17109] : (slave bond_slave_0): Releasing backup interface [ 856.620054][T17109] : (slave bond_slave_1): Releasing backup interface [ 856.677977][T17109] team0: Port device team_slave_0 removed [ 856.726153][T17109] team0: Port device team_slave_1 removed [ 856.756185][T17109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.789644][T17109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.838864][T17109] team0: Port device geneve0 removed [ 857.658437][T17112] team0: Mode changed to "loadbalance" [ 857.727117][T17126] wg2: entered promiscuous mode [ 857.743585][T17126] wg2: entered allmulticast mode [ 857.833777][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4091'. [ 857.941875][T17134] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4095'. [ 858.078487][T17136] unsupported nla_type 52263 [ 858.361006][T11446] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 858.370326][T17153] syzkaller0: entered promiscuous mode [ 858.380499][T17153] syzkaller0: entered allmulticast mode [ 858.543887][T11446] usb 1-1: Using ep0 maxpacket: 32 [ 858.564314][T11446] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 858.572848][T11446] usb 1-1: config 0 has no interface number 0 [ 858.579251][T11446] usb 1-1: config 0 interface 12 has no altsetting 0 [ 858.589435][T11446] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 858.609150][T11446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.619273][T11446] usb 1-1: Product: syz [ 858.625110][T11446] usb 1-1: Manufacturer: syz [ 858.629955][T11446] usb 1-1: SerialNumber: syz [ 858.637517][T11446] usb 1-1: config 0 descriptor?? [ 858.669678][T17164] loop6: detected capacity change from 0 to 512 [ 858.686550][T17164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.699611][T17164] ext4 filesystem being mounted at /533/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 858.929989][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.078698][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4110'. [ 859.290500][T17172] netlink: 'syz.7.4111': attribute type 10 has an invalid length. [ 859.309918][T17172] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4111'. [ 860.234002][T17180] loop6: detected capacity change from 0 to 256 [ 860.256170][T17180] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 860.270669][T17180] FAT-fs (loop6): Filesystem has been set read-only [ 860.283689][T17180] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 860.311417][T17180] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 860.540251][T17189] loop3: detected capacity change from 0 to 1024 [ 860.551035][T17189] EXT4-fs: Ignoring removed orlov option [ 860.557361][T17189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 860.658955][T17189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.955052][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4121'. [ 861.627776][T11446] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 861.650971][T11446] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 861.679759][T11446] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 861.719741][T11446] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 861.754429][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.789224][T11446] usb 1-1: USB disconnect, device number 4 [ 861.911228][T17206] netlink: 'syz.6.4124': attribute type 10 has an invalid length. [ 861.928066][T17206] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4124'. [ 861.947924][T17206] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.957656][T17206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.966778][T17206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.976398][T17206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.995488][T17206] team0: Port device geneve0 added [ 864.190345][T17232] loop8: detected capacity change from 0 to 256 [ 864.261536][T17236] loop6: detected capacity change from 0 to 1024 [ 864.273347][T17236] EXT4-fs: Ignoring removed orlov option [ 864.280419][T17236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 864.325277][T17236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.362172][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4135'. [ 864.528178][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.333303][T17286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4146'. [ 867.711411][ T5916] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 867.851578][T17307] netlink: 'syz.3.4159': attribute type 10 has an invalid length. [ 867.871076][T17307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4159'. [ 867.901554][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 867.908848][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.923726][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.940713][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 867.989747][ T5916] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 868.013219][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.039771][ T5916] usb 7-1: config 0 descriptor?? [ 868.225273][T17316] loop8: detected capacity change from 0 to 1024 [ 868.233079][T17316] EXT4-fs: Ignoring removed orlov option [ 868.238872][T17316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 868.278526][T17316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.337429][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.543843][ T5916] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input6 [ 868.559823][T17328] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4169'. [ 868.648129][ T5916] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input7 [ 868.737360][ T5916] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 868.766543][ T5916] usb 7-1: USB disconnect, device number 16 [ 869.183171][T17347] netlink: 'syz.8.4176': attribute type 10 has an invalid length. [ 869.212774][T17347] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4176'. [ 869.455818][T17353] loop8: detected capacity change from 0 to 512 [ 869.511513][T17353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.527504][T17353] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 869.629514][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 869.629531][ T29] audit: type=1326 audit(1738872582.574:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 869.760167][ T29] audit: type=1326 audit(1738872582.574:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 869.771084][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4184'. [ 869.823495][ T29] audit: type=1326 audit(1738872582.634:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 869.863550][ T29] audit: type=1326 audit(1738872582.634:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 869.887413][ T29] audit: type=1326 audit(1738872582.634:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 869.976359][ T29] audit: type=1326 audit(1738872582.634:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 870.054341][ T29] audit: type=1326 audit(1738872582.634:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 870.106663][ T29] audit: type=1326 audit(1738872582.634:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 870.142503][ T29] audit: type=1326 audit(1738872582.644:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 870.168768][ T29] audit: type=1326 audit(1738872582.644:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 870.323039][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.499401][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.506325][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.680121][T17362] lo speed is unknown, defaulting to 1000 [ 870.890529][T17393] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4196'. [ 871.828920][T17408] loop6: detected capacity change from 0 to 1024 [ 871.847080][T17408] EXT4-fs: Ignoring removed orlov option [ 871.867942][T17408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.919673][T17408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.176112][T10291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.648613][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4205'. [ 873.685803][T17428] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4207'. [ 873.803858][T17378] lo speed is unknown, defaulting to 1000 [ 874.722563][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 874.722580][ T29] audit: type=1326 audit(1738872587.664:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 874.911749][T17464] veth0_vlan: entered allmulticast mode [ 874.919423][T17464] ÿÿÿÿÿÿ: renamed from vlan1 [ 875.311481][ T5888] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 875.492858][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 875.504389][ T5888] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 875.518541][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.549980][ T5888] usb 1-1: config 0 descriptor?? [ 875.564319][T17468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 875.575613][T17471] netlink: 'syz.6.4228': attribute type 10 has an invalid length. [ 875.593823][T17471] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4228'. [ 875.626303][T17471] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.635979][T17471] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.650266][T17471] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.676859][ T29] audit: type=1326 audit(1738872588.624:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 875.710780][T17471] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.752655][ T29] audit: type=1326 audit(1738872588.624:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 875.815052][ T29] audit: type=1326 audit(1738872588.654:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 875.858531][ T29] audit: type=1326 audit(1738872588.654:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 875.883649][ T29] audit: type=1326 audit(1738872588.654:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 875.957004][ T29] audit: type=1326 audit(1738872588.654:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 876.013632][ T29] audit: type=1326 audit(1738872588.654:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 876.020299][ T5888] smartjoyplus 0003:0B43:0003.0005: unknown main item tag 0x0 [ 876.062089][ T29] audit: type=1326 audit(1738872588.654:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 876.094148][ T29] audit: type=1326 audit(1738872588.654:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.7.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 876.135249][ T5888] smartjoyplus 0003:0B43:0003.0005: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.0-1/input0 [ 876.173017][ T5888] smartjoyplus 0003:0B43:0003.0005: no output reports found [ 876.222508][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.268413][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.286128][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.296924][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.306172][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4233'. [ 876.309309][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.326581][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.387115][T17474] lo speed is unknown, defaulting to 1000 [ 876.403947][ T5839] usb 1-1: USB disconnect, device number 5 [ 877.471082][T17490] netlink: 'syz.7.4236': attribute type 10 has an invalid length. [ 877.482911][T17489] syzkaller0: entered promiscuous mode [ 877.498632][T17489] syzkaller0: entered allmulticast mode [ 877.601347][T17490] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 879.249531][T17513] lo speed is unknown, defaulting to 1000 [ 881.144725][T17535] syzkaller0: entered promiscuous mode [ 881.150244][T17535] syzkaller0: entered allmulticast mode [ 881.259713][T17538] loop3: detected capacity change from 0 to 1024 [ 881.307391][T17538] EXT4-fs: Ignoring removed orlov option [ 881.325518][T17538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 881.418757][T17538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.832420][T13995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.740862][T17566] syzkaller0: entered promiscuous mode [ 882.746386][T17566] syzkaller0: entered allmulticast mode [ 882.927013][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 882.927032][ T29] audit: type=1326 audit(1738872595.874:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 882.992861][ T29] audit: type=1326 audit(1738872595.874:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.110244][ T29] audit: type=1326 audit(1738872595.904:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.191373][ T29] audit: type=1326 audit(1738872595.904:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.277571][ T29] audit: type=1326 audit(1738872595.904:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.330743][ T29] audit: type=1326 audit(1738872595.924:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.397508][ T29] audit: type=1326 audit(1738872595.924:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.465565][ T29] audit: type=1326 audit(1738872595.924:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.564809][ T29] audit: type=1326 audit(1738872595.934:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.665048][ T29] audit: type=1326 audit(1738872595.934:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.6.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04a38cde9 code=0x7ffc0000 [ 883.828435][T17569] lo speed is unknown, defaulting to 1000 [ 884.000468][T17580] syzkaller0: entered promiscuous mode [ 884.006338][T17580] syzkaller0: entered allmulticast mode [ 884.080914][ T5839] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 884.495119][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 884.510798][ T5839] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 884.529926][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.552058][ T5839] usb 4-1: config 0 descriptor?? [ 884.610493][T17578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 885.120423][ T5839] smartjoyplus 0003:0B43:0003.0006: unknown main item tag 0x0 [ 885.167603][ T5839] smartjoyplus 0003:0B43:0003.0006: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 885.179537][ T5839] smartjoyplus 0003:0B43:0003.0006: no output reports found [ 885.385702][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.443658][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.464982][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.642516][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.732447][ T9] usb 4-1: USB disconnect, device number 5 [ 886.095622][T17502] Set syz1 is full, maxelem 65536 reached [ 886.745879][T17595] 9pnet_fd: Insufficient options for proto=fd [ 888.785075][T17599] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4280'. [ 888.910984][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4284'. [ 889.485830][T17615] lo speed is unknown, defaulting to 1000 [ 889.513971][T17627] 9pnet_fd: Insufficient options for proto=fd [ 889.701940][T11446] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 889.967111][T11446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 889.983060][T11446] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 889.992881][T11446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.032460][T11446] usb 4-1: config 0 descriptor?? [ 890.041361][T17625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 890.509025][T11446] smartjoyplus 0003:0B43:0003.0007: unknown main item tag 0x0 [ 890.535839][T11446] smartjoyplus 0003:0B43:0003.0007: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 890.559280][T11446] smartjoyplus 0003:0B43:0003.0007: no output reports found [ 890.722508][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.746515][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.769455][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.781058][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.853954][ T5888] usb 4-1: USB disconnect, device number 6 [ 895.022517][T17651] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4297'. [ 895.158981][T17635] lo speed is unknown, defaulting to 1000 [ 895.227981][T17641] siw: device registration error -23 [ 895.431327][T17664] 9pnet_fd: Insufficient options for proto=fd [ 896.672085][T17686] siw: device registration error -23 [ 896.796570][T17690] 9pnet_fd: Insufficient options for proto=fd [ 898.559482][T17682] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4309'. [ 899.473734][T17726] 9pnet_fd: Insufficient options for proto=fd [ 900.060964][T17743] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4333'. [ 900.182778][T17745] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4334'. [ 900.345107][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4335'. [ 900.409371][T17747] loop8: detected capacity change from 0 to 512 [ 900.436545][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 900.436561][ T29] audit: type=1326 audit(1738872613.384:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.501128][ T29] audit: type=1326 audit(1738872613.384:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.530928][ T29] audit: type=1326 audit(1738872613.414:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.554650][ T29] audit: type=1326 audit(1738872613.414:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.577957][ T29] audit: type=1326 audit(1738872613.424:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.601681][ T29] audit: type=1326 audit(1738872613.424:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.627831][T17747] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 900.638596][T17747] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 900.654093][ T29] audit: type=1326 audit(1738872613.424:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.678093][T17747] EXT4-fs (loop8): mount failed [ 900.697518][ T29] audit: type=1326 audit(1738872613.424:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.751534][T17756] pim6reg1: entered promiscuous mode [ 900.757041][T17756] pim6reg1: entered allmulticast mode [ 900.786263][ T29] audit: type=1326 audit(1738872613.424:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.7.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e92b8cde9 code=0x7ffc0000 [ 900.874249][T17759] 9pnet_fd: Insufficient options for proto=fd [ 901.147681][T17735] lo speed is unknown, defaulting to 1000 [ 901.642176][T17752] lo speed is unknown, defaulting to 1000 [ 902.245920][T17772] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4345'. [ 902.649582][T17776] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4347'. [ 902.948817][T17782] loop6: detected capacity change from 0 to 512 [ 902.985861][T17784] 9pnet_fd: Insufficient options for proto=fd [ 903.039135][T17782] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 903.089862][T17782] EXT4-fs (loop6): mount failed [ 903.159496][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4349'. [ 906.654059][T17803] pim6reg1: entered promiscuous mode [ 906.659409][T17803] pim6reg1: entered allmulticast mode [ 906.874664][T17807] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4359'. [ 906.931178][T17809] 9pnet_fd: Insufficient options for proto=fd [ 907.265395][T17823] 9pnet_fd: Insufficient options for proto=fd [ 908.020792][T17854] 9pnet_fd: Insufficient options for proto=fd [ 908.646015][T17883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4392'. [ 908.850187][T17889] 9pnet_fd: Insufficient options for proto=fd [ 909.071151][T17898] netlink: 'syz.7.4398': attribute type 10 has an invalid length. [ 909.093113][T17898] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4398'. [ 910.424206][T17929] 9pnet_fd: Insufficient options for proto=fd [ 910.450004][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 910.473506][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 910.482966][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 910.508106][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 910.518728][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 910.527275][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 912.574203][ T5844] Bluetooth: hci1: command tx timeout [ 914.628082][T17980] veth0_vlan: left promiscuous mode [ 914.639718][T17980] veth0_vlan: entered allmulticast mode [ 914.646189][T17980] veth0_vlan: entered promiscuous mode [ 914.662695][ T5844] Bluetooth: hci1: command tx timeout [ 915.248320][T17930] lo speed is unknown, defaulting to 1000 [ 915.627623][T18009] siw: device registration error -23 [ 916.184742][T17930] chnl_net:caif_netlink_parms(): no params data found [ 916.226793][T18003] loop8: detected capacity change from 0 to 40427 [ 916.262558][T18003] F2FS-fs (loop8): heap/no_heap options were deprecated [ 916.310119][T18003] F2FS-fs (loop8): invalid crc value [ 916.334767][T18003] F2FS-fs (loop8): Found nat_bits in checkpoint [ 916.486357][T18003] F2FS-fs (loop8): Start checkpoint disabled! [ 916.623723][T18003] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 916.642224][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 916.642242][ T29] audit: type=1326 audit(1738872629.594:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.722316][ T29] audit: type=1326 audit(1738872629.644:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.748505][ T29] audit: type=1326 audit(1738872629.664:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.751978][ T5844] Bluetooth: hci1: command tx timeout [ 916.843279][ T29] audit: type=1326 audit(1738872629.664:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.870690][ T29] audit: type=1326 audit(1738872629.664:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.919109][ T29] audit: type=1326 audit(1738872629.694:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.950698][ T29] audit: type=1326 audit(1738872629.694:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 916.986203][ T29] audit: type=1326 audit(1738872629.694:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 917.033873][ T29] audit: type=1326 audit(1738872629.694:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 917.112873][ T29] audit: type=1326 audit(1738872629.694:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.3.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 917.502072][T17930] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.736353][T17930] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.774042][T17930] bridge_slave_0: entered allmulticast mode [ 917.811083][T17930] bridge_slave_0: entered promiscuous mode [ 917.868288][T17930] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.896061][T17930] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.006833][ T1107] kworker/u8:7: attempt to access beyond end of device [ 918.006833][ T1107] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 918.027257][ T1107] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 918.043774][ T1107] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 918.181307][T17930] bridge_slave_1: entered allmulticast mode [ 918.189251][T17930] bridge_slave_1: entered promiscuous mode [ 918.837755][ T5844] Bluetooth: hci1: command tx timeout [ 918.933492][T17930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.977293][T17930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.305353][T17930] team0: Port device team_slave_0 added [ 919.343017][T17930] team0: Port device team_slave_1 added [ 921.342421][T17930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.370077][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.458498][T17930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.602317][T17930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.623622][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.714100][T17930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.948493][T17930] hsr_slave_0: entered promiscuous mode [ 921.966742][T17930] hsr_slave_1: entered promiscuous mode [ 921.982899][T17930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.008579][T17930] Cannot create hsr debugfs directory [ 922.379620][T18092] loop3: detected capacity change from 0 to 512 [ 922.396072][T18092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 922.788422][T18092] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.4473: corrupted in-inode xattr: invalid ea_ino [ 922.852994][T18099] siw: device registration error -23 [ 922.901132][T18092] EXT4-fs (loop3): Remounting filesystem read-only [ 923.241304][T18092] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.304886][T18102] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 925.467863][T13995] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 925.761059][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 925.761075][ T29] audit: type=1326 audit(1738872638.704:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 925.823805][ T29] audit: type=1326 audit(1738872638.704:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.042562][ T29] audit: type=1326 audit(1738872638.754:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.092311][ T29] audit: type=1326 audit(1738872638.754:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.115600][ T29] audit: type=1326 audit(1738872638.774:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.156373][ T29] audit: type=1326 audit(1738872638.774:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.548867][ T29] audit: type=1326 audit(1738872638.774:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.571700][ T29] audit: type=1326 audit(1738872638.824:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.579866][T17930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 926.594238][ T29] audit: type=1326 audit(1738872638.824:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.594290][ T29] audit: type=1326 audit(1738872638.824:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18117 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6fb8cde9 code=0x7ffc0000 [ 926.845254][T17930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 926.872812][T17930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 927.053293][T18137] loop8: detected capacity change from 0 to 1024 [ 927.139092][T18137] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 927.228126][T17930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 927.362671][T18137] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4488: Invalid block bitmap block 0 in block_group 0 [ 927.444366][T18137] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4488: Failed to acquire dquot type 0 [ 927.472246][T18137] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.4488: Freeing blocks not in datazone - block = 0, count = 4096 [ 927.524199][T18137] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4488: Invalid inode bitmap blk 0 in block_group 0 [ 927.541337][T18137] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 927.556055][T18137] EXT4-fs (loop8): 1 orphan inode deleted [ 927.574067][T18137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.853301][ T35] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 929.305370][T17930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.386763][T17930] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.442515][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.449730][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.508824][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.516109][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.869750][T17930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.074087][T18126] lo speed is unknown, defaulting to 1000 [ 930.080234][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.132132][T18130] siw: device registration error -23 [ 930.806047][T17930] veth0_vlan: entered promiscuous mode [ 930.856294][T17930] veth1_vlan: entered promiscuous mode [ 931.048855][T17930] veth0_macvtap: entered promiscuous mode [ 931.066356][T17930] veth1_macvtap: entered promiscuous mode [ 931.125193][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.136336][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.150986][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.171219][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.181177][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.195493][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.220755][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.231452][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.247580][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.260578][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.271684][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.282167][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.295290][T17930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.332092][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.347577][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.357832][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.365587][T18173] loop3: detected capacity change from 0 to 128 [ 931.368328][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.385147][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.396979][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.408340][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.424047][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.435795][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.450422][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.460851][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.471468][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.492940][T17930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.525147][T17930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.541675][T17930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.561073][T17930] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.569816][T17930] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.758131][T18178] syz.3.4499: attempt to access beyond end of device [ 931.758131][T18178] loop3: rw=2049, sector=145, nr_sectors = 240 limit=128 [ 931.798147][T18173] syz.3.4499: attempt to access beyond end of device [ 931.798147][T18173] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 931.935714][T18180] siw: device registration error -23 [ 932.004267][T18173] syz.3.4499: attempt to access beyond end of device [ 932.004267][T18173] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 932.013410][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.027059][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.357920][T18173] syz.3.4499: attempt to access beyond end of device [ 932.357920][T18173] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 932.465815][ T6259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.509584][ T6259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.705133][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.770705][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.809348][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 932.809364][ T29] audit: type=1326 audit(1738872645.754:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 932.921912][ T29] audit: type=1326 audit(1738872645.754:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 932.978313][ T29] audit: type=1326 audit(1738872645.814:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.014838][ T29] audit: type=1326 audit(1738872645.814:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.038401][ T29] audit: type=1326 audit(1738872645.814:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.077510][ T29] audit: type=1326 audit(1738872645.814:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.096055][T18195] devpts: called with bogus options [ 933.118190][ T29] audit: type=1326 audit(1738872645.814:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.148126][ T29] audit: type=1326 audit(1738872645.814:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.209865][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4406'. [ 933.215488][ T29] audit: type=1326 audit(1738872645.814:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.247795][ T29] audit: type=1326 audit(1738872645.814:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbbb8cde9 code=0x7ffc0000 [ 933.354729][T18204] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 935.227610][T18227] loop3: detected capacity change from 0 to 16 [ 935.346352][T18227] erofs (device loop3): negative i_size @ nid 36 [ 935.473706][T18227] loop3: detected capacity change from 0 to 1024 [ 936.112828][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4522'. [ 937.611773][T11384] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 937.807905][T11384] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 937.847578][T11384] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 938.325019][T18262] loop8: detected capacity change from 0 to 1024 [ 938.464180][T18262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 938.625971][T18262] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.638727][T11384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.666192][T11384] usb 7-1: config 0 descriptor?? [ 938.677747][T18250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 939.142538][T11384] smartjoyplus 0003:0B43:0003.0008: unknown main item tag 0x0 [ 940.065879][T11384] smartjoyplus 0003:0B43:0003.0008: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.6-1/input0 [ 940.079181][T11384] smartjoyplus 0003:0B43:0003.0008: no output reports found [ 940.089979][T11384] usb 7-1: USB disconnect, device number 17 [ 940.226710][T13621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.494054][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 941.494071][ T29] audit: type=1326 audit(1738872654.444:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 941.763017][ T29] audit: type=1326 audit(1738872654.574:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 941.786660][ T29] audit: type=1326 audit(1738872654.574:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 941.812068][ T29] audit: type=1326 audit(1738872654.574:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 941.860703][ T29] audit: type=1326 audit(1738872654.574:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 942.012046][T18288] fuse: Unknown parameter '' [ 942.131132][ T29] audit: type=1326 audit(1738872654.574:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 942.721003][ T29] audit: type=1326 audit(1738872654.574:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 942.780728][ T29] audit: type=1326 audit(1738872654.574:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 942.855638][ T29] audit: type=1326 audit(1738872654.574:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 943.013228][ T29] audit: type=1326 audit(1738872654.574:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18280 comm="syz.8.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95da78cde9 code=0x7ffc0000 [ 943.819444][ T6441] Bluetooth: hci4: Frame reassembly failed (-84) [ 945.394042][T18298] lo speed is unknown, defaulting to 1000 [ 945.538436][T18317] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 945.551066][T18317] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 945.559501][T18317] CPU: 0 UID: 0 PID: 18317 Comm: syz.7.4548 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 945.569756][T18317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 945.579827][T18317] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 945.585742][T18317] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 945.605354][T18317] RSP: 0018:ffffc9000b26f958 EFLAGS: 00010206 [ 945.611419][T18317] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 945.619381][T18317] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88803ce3aa90 [ 945.627368][T18317] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 945.635331][T18317] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88803ce3aa80 [ 945.643295][T18317] R13: ffff88803ce3aaa0 R14: 1ffff11003e578d0 R15: ffff88801f2bc680 [ 945.651262][T18317] FS: 00007f7e93ab66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 945.660184][T18317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.666757][T18317] CR2: 0000200000001000 CR3: 00000000620ce000 CR4: 00000000003526f0 [ 945.674720][T18317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 945.682686][T18317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 945.690655][T18317] Call Trace: [ 945.693927][T18317] [ 945.696862][T18317] ? __die_body+0x5f/0xb0 [ 945.701193][T18317] ? die_addr+0xb0/0xe0 [ 945.705370][T18317] ? exc_general_protection+0x3dd/0x5d0 [ 945.710923][T18317] ? asm_exc_general_protection+0x26/0x30 [ 945.716642][T18317] ? clone_private_mount+0x184/0x3e0 [ 945.721922][T18317] ? clone_private_mount+0x83/0x3e0 [ 945.727107][T18317] ? _raw_spin_unlock+0x28/0x50 [ 945.731949][T18317] ovl_fill_super+0xe4c/0x3560 [ 945.736707][T18317] ? shrinker_register+0x118/0x230 [ 945.741824][T18317] ? __pfx_lock_release+0x10/0x10 [ 945.746850][T18317] ? __pfx_ovl_fill_super+0x10/0x10 [ 945.752060][T18317] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 945.757881][T18317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 945.763861][T18317] ? sget_fc+0x909/0x9c0 [ 945.768103][T18317] ? __pfx_set_anon_super_fc+0x10/0x10 [ 945.773555][T18317] ? __pfx_ovl_fill_super+0x10/0x10 [ 945.778767][T18317] get_tree_nodev+0xb7/0x140 [ 945.783357][T18317] vfs_get_tree+0x90/0x2b0 [ 945.787801][T18317] do_new_mount+0x2be/0xb40 [ 945.792302][T18317] ? __pfx_do_new_mount+0x10/0x10 [ 945.797326][T18317] __se_sys_mount+0x2d6/0x3c0 [ 945.802006][T18317] ? __pfx___se_sys_mount+0x10/0x10 [ 945.807197][T18317] ? do_syscall_64+0x100/0x230 [ 945.811966][T18317] ? __x64_sys_mount+0x20/0xc0 [ 945.816724][T18317] do_syscall_64+0xf3/0x230 [ 945.821224][T18317] ? clear_bhb_loop+0x35/0x90 [ 945.825896][T18317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.831784][T18317] RIP: 0033:0x7f7e92b8cde9 [ 945.836191][T18317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.855801][T18317] RSP: 002b:00007f7e93ab6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 945.864220][T18317] RAX: ffffffffffffffda RBX: 00007f7e92da5fa0 RCX: 00007f7e92b8cde9 [ 945.872184][T18317] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 945.880145][T18317] RBP: 00007f7e92c0e2a0 R08: 0000200000000500 R09: 0000000000000000 [ 945.888627][T18317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.896595][T18317] R13: 0000000000000000 R14: 00007f7e92da5fa0 R15: 00007ffebd3e6bb8 [ 945.904569][T18317] [ 945.907576][T18317] Modules linked in: [ 945.913646][T18317] ---[ end trace 0000000000000000 ]--- [ 945.932296][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 945.934713][T18274] lo speed is unknown, defaulting to 1000 [ 945.939282][T18317] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 945.951092][T18317] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 945.970953][T18317] RSP: 0018:ffffc9000b26f958 EFLAGS: 00010206 [ 945.977146][T18317] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 945.986774][T18317] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88803ce3aa90 [ 945.995076][T18317] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 946.003279][T18317] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88803ce3aa80 [ 946.011937][T18317] R13: ffff88803ce3aaa0 R14: 1ffff11003e578d0 R15: ffff88801f2bc680 [ 946.020041][T18317] FS: 00007f7e93ab66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 946.029153][T18317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.035961][T18317] CR2: 00007f7e93a95d58 CR3: 00000000620ce000 CR4: 00000000003526f0 [ 946.044181][T18317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 946.052389][T18317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 946.060462][T18317] Kernel panic - not syncing: Fatal exception [ 946.066779][T18317] Kernel Offset: disabled [ 946.071091][T18317] Rebooting in 86400 seconds..