last executing test programs: 2m14.46488069s ago: executing program 3 (id=491): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) close_range(r0, r1, 0x0) 2m14.303153179s ago: executing program 3 (id=493): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000600)={"6fe79145e52c67213b7c941bd4c74f82", 0x0, 0x0, {0x9, 0x8}, {0x7c40, 0x200}, 0x3, [0x0, 0xfffffffffffffff8, 0x1, 0x9, 0xb4d, 0x101, 0x4, 0x7, 0xb, 0x9, 0xc0000000000000, 0x404000000000, 0x0, 0x80, 0x5, 0xffffffff00000001]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xc8, 0xbd, 0x80001000, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x7, 0x9, 0x20000009}}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r4, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ftruncate(0xffffffffffffffff, 0x51a9497) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x6, 0x8, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2m14.22969754s ago: executing program 3 (id=494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2m14.071269179s ago: executing program 3 (id=496): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r3, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), 0x0}, 0x20) 2m14.045970949s ago: executing program 3 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x0, 0xbf}) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000440)="f48b7005e17e69db502768b7ff7ff3d1b1d8bd26a454549fcdadfca9b61bf6c741a20d28a56ecb3fda7e34864db31267411103f0215ddff18e83e584bde8366c47e3b2df31527f74a5ce090078caf9eede", 0x51, 0xfffffffffffffffe) 2m13.002887718s ago: executing program 3 (id=500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m57.228796095s ago: executing program 32 (id=500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m48.422938593s ago: executing program 1 (id=675): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) 1m48.294926813s ago: executing program 1 (id=679): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@grpquota}, {@sysvgroups}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000001200)={0x9e4, "c3cc123424b20552f83c19334d0b35890675a9c5b46ad0d1373965e1ccff596c1869aacbf8808a186f5be809a23fb83bf8e183dac15020ebb61871f0055082000cc0f12c8b169a33ca2da68bc513e00b2c6e293ef2409b7f8d1acc0043f9d45f7207c51a2f9f00389ed61e7973daff69afaee6853a6d15073c590b834cda77c710fbc12870988f63415359c6282399daa820f7e505b0ea06c95d7a1fd2a64301dfb1001a8a01809079fc76760d1eb2fad9c9613159ab03095c69ea75054429775ed4fd94d192a106bcf45b5c4b78a6c890a472082635c0decf62d59c818375c8f839cf009b62e6473465c301ed5512631690eedae7e84f7bb76d26ce1ce65f88f54589dd3144aaa74ec1eeefc3b900898f464fd3e57a6b29c083fc03e57b43911072d2ab89c77f288d421ad5c521227507ee92b6dbea5e273a6b8d73cfa76739062b4fdbf858579a9f672c4dd322713b7ee5ebb4dd00a525d734422dd0803ccb293780e5fe816064c7897abce0d8cd9122fc42547ff88d64aa0ba4d8969da7bd05eac95c0e55d875cf9c777d95c56b6909d2fb1acfcaa3e7c31360db63e4c381c6332b6fb940d3f2600cab22bab5f6d2eed47cd354d552f970180de7143730a946f981ab1319a3a27f7e317b3011dbd977affff011c943f4facb7980aefdcec99b7fca92f36012ed57de63d883180fdc99a7eee9d21e68930e96973b6204ca99738dad539fca79d015423b07c40ae8a1e33a81d9afe04ef28a34fbb5f7b94db5f9406420dd71a4d8d5c8c8f40eca205fa49ded5f76bc76f4da906fa28dd76154b142fd937b8f9e30665596486e67fbe7849f8b29b634f4f9c17d6a2a27a6963407911a0f66e2539d62f067903906094241d3fd3450cf52989e2c6b47bb3a45e5fbccc73ad50910fcc0921447174fd89f9e88c48bac2f418f8e418d7dce17c5782afbfe873169fe6e146a9e25ef43f0f0eff0721daf55c0600c2c0cee1c8e1569d9b4eeab73550df0cf8e9281c114a0df572c7fbb182821dffb8a017d55a7d8ecd538d77089a02c85485491a2a348d776ea9265d043de66db4ad1fd357ec61aef8d9ac178eb53afe18f840ca45a15ffa463d5bf06ffa3d4d63a00b7414bee814776e0cf536c50e60ae7e691472d9d82dd5a6b488a559e50733baa644a7784931899739d88c15d03ab5a9d925df8a03a78e5a01de57bca0a559e8d23b32fcef0f02c0d7dbc6d61db42bbb06d2de32830267a5764ff8ad10c14215ff34d0b7c971ab5137f86fbcff7e0dab9023168deb04dd48d82a32433304b684d06e4ee7f88decbee64bde403cae0f7bb8e60a03f53445e16afdb88d78fd5a256976fa52b0f1a276fd6719e10ba87ea87e8edc7e92037651b086ea300b9b7fb7466291e69d1a6c921888e11f09ef07c73089643c111e2bed153a63b2c88f099a830f58667c99daa15011f1016d0c6e7f5f4b8eb759908c3096d154d3d4c1ffa9c6b21dc8abf459de480d220a34554546b7be75227c7f8f676d1e01cb044e1d560663f44fb671d5d24fd3ceb678ba7519e83e76287602cc0875d6fa72af01142f2d8f461c339ad0592f4bdb0f59b2098d994e7bd1870d32baee62c9dbb546677b76564e730dd2966de7742702eaae1dcea5301182bdb3bb7a373f54372c4d1704a5b9008ca326290d120fe33c26497a0fe96754bea670c7e56171bf2d8fd8b5e61e6b50736735ad5782615bedb74f1c50ae7d076af6e50ed24a42640f1a958b356cea4280ccf1b042d55dd78b4fd7a4910bc7d78f609702f8ead35bd52802d3109f1d6ae093a3bddbc598410399a9c5a38ce1f387757b98e1c32b174d076ddf2f4e3114601df73bcb2b5e06a5a2e1cad8c1d2d357d6916721da098fa428241df56e8d08f2a139d30cde65a8148368c35670209871b7251b0c3f5401a5143d5784fd401ae7c76eec6810048c2560c7f964f97320a61679d82c499f46084cbd5204f1ae0d63e5fe6b4fa01537c83c63b4d08fe9302690e3894af69cde0c0a2e58c4034ca85ab4474af552c3452461d1f6e03a8533043421702adb79cc83e180225c4b2c5433bda9319fc13857dce1bb83ccb8fc9de375ceeb13a77b0e7caef9650b857f24d0eca24646dab9ff637d28311b6873782d85aa4a987d17a11a90065c74ff4abfd01d5d45e934c9138873377e8c0699115014d98518c98e15b9f0f3df3f2a7744b47917f28648dd1c12f576065dbe2abfa6639458ec52159e024122a9113b63c9607233338faabb1899932feb5e7ed2c92a00dd16f837422870939cf35655c897151b91c66b2e20557eb182bca6d07bf7647853af734974e860f76061b027173bdc9a605810296ba97a6d820409c376d079e36565d85db1d03c1659c9cb348438f6a866c5d92eb54346c68f3830f289752e6d704fc0cc5d35f4258601147f80a176af048aaf66a6792645eb0dcbaac6fdeb30f06420028b041d135926fa23076fabc60c3cd297de8df91accb80a3ba6f1e284a81c8d762ee12bb0943ce6d469001b43aea76ca85043c7540a0635dc54095640e542a76ae3e69351391d8ce7670c8895c221077a256bcd090d447dac21e23ba987ea3cc8bcdc36a870bb7337f0ab8ca813d72e4a3990ddd9e5b3b4d912e339f7752c2e530680409c66408a6be9c35ccdbea8ec807845b21a6940703859500c80a4738996357d6cdc80a1fae7e4dc155ba41ecad1402a9b52c2393392fa7f026e01822229b91fc1ae8b777296cc6981a3b672344df5c663a4e9b039ebcd05f01bb373052d306a67841e1435711d614c8d49e85fc5587296bc1eeafa97a026b7f08730d43eacbeb5d397f00f79a82ad3e9ac3004354a534080d829b6e3533df09f4f57236f65ea98177380cb46e401a629df9d6f40cb53530da784676c077d444cb3d972d674e42547866651623087c70f827503efb2b0d84ee4f5d679854a825770e5d88288921ac66e18d9fcd102ceddefceb4f6c820595ee99c13f6a01e3126f2bc4435fb4420d4266ab30f88f2f0873d5e60e7669f03780af257138d49e83642c7726aa63236a5e9986af78d0dc914733acc66a24872e2e2de6015979b4fa9b49070d06f526bbdfbe374976c6ae145a1913cdd4242a2f189d9f6455ff67a5ecaaea986666669f09830160282d22181d22e912582af1bea30c4e4a17881e9902ccd31d4bdb979f72ddf0211c37cc12848a76a4fe8271c37d791b3864a220e494f748db6158679aa4a935e4b1c49d667651875e8b2bca1175fa48344bc026f2669a069bc76bf78d90ecbf3e81d8e2c48d75340294f9b2a1045420118501bc8b763a2879ef3dfd42175df18dde931009e84538da71071bce77e685480eeb38766fa7d34e3d7e3d0ed8bd0608cf6cb61dfce5f54a489b2a83aea6c371708ef43d5d9e4b944de09e03c9597e9be2005dfba675a4197d6633b43fa67449cd9b8a7510eb0038942d8f0f39e561650c114436380d2eaaa714d3c5171b0cc978a96525661dff4336d82df19420445d018bcb42907a73f21cc2880c34118786f528f62c6056bb4c6a2ff7bac9c3bbcc98d8ddd9dbef79e71ff4"}) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4968eabe00000000f800"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x28000600) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x26) fcntl$notify(r11, 0x402, 0x3f) socket$nl_rdma(0x10, 0x3, 0x14) 1m47.779137632s ago: executing program 1 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m47.478080312s ago: executing program 1 (id=694): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r1}}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x180000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000740)=0x499, 0x4) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48010) 1m45.967612659s ago: executing program 1 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 1m43.431886236s ago: executing program 1 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 1m43.300050796s ago: executing program 33 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 1m13.854813583s ago: executing program 4 (id=950): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf110000000000f4ffff1200000008000300", @ANYRES32, @ANYBLOB="040013000a00060008021100000100000600100080"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m12.219209722s ago: executing program 4 (id=956): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}}, 0x2000100) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x4e4b, &(0x7f000000a9c0)={0x0, 0x0, 0x20, 0x0, 0x97}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r8, 0x0) 1m11.08301176s ago: executing program 4 (id=961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}}, 0x0) 1m9.847069868s ago: executing program 4 (id=965): socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") truncate(&(0x7f0000000280)='./file1\x00', 0x3f00) 1m9.492490688s ago: executing program 4 (id=967): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x8917, 0x0) 1m6.947075874s ago: executing program 4 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1e, 0x0, &(0x7f0000004780)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='netlink_extack\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='kfree\x00', r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x3, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9a9ad30}}}, 0x88) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x10) 51.899389673s ago: executing program 34 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1e, 0x0, &(0x7f0000004780)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='netlink_extack\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='kfree\x00', r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x3, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9a9ad30}}}, 0x88) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x10) 15.328564991s ago: executing program 0 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xb8, 0x5002004a, 0xb, 0x0, 0xea02, 0x150, 0x3c8, 0x3c8, 0x150, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x29}, {0x28, '\x00', 0x4}}}}, 0x248) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7e, 0x8000, 0x4000, 0x1, 0x70000000, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2, 0x9, 0x3, @void, @value, @void, @value}, 0x50) r6 = gettid() r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080), 0x2) tkill(r6, 0x12) tkill(0x0, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'vlan0\x00', 0x4}, 0x18) 13.666590619s ago: executing program 0 (id=1311): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 12.511138127s ago: executing program 0 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 11.977397836s ago: executing program 0 (id=1321): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) 11.853388446s ago: executing program 0 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 10.926517545s ago: executing program 0 (id=1329): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 8.002925881s ago: executing program 7 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 7.905794051s ago: executing program 7 (id=1344): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}}, 0x2000100) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4e4b, &(0x7f000000a9c0)={0x0, 0x0, 0x20, 0x0, 0x97}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r8, 0x0) 5.573381458s ago: executing program 6 (id=1348): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r0}}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 5.568681807s ago: executing program 7 (id=1349): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, r5) tgkill(r5, r5, 0x12) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001780)={@mcast2}, &(0x7f00000017c0)=0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x4, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xcad, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x6, 0x30, 0x2000000}}]}}]}, 0x45c}}, 0x0) 4.841745706s ago: executing program 6 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) 4.814743076s ago: executing program 2 (id=1355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 4.632683566s ago: executing program 6 (id=1357): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x20, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r0, 0x0}]) 4.617444456s ago: executing program 2 (id=1358): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000340)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nojournal_checksum}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.088162402s ago: executing program 5 (id=1360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}}, 0x2000100) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4e4b, &(0x7f000000a9c0)={0x0, 0x0, 0x20, 0x0, 0x97}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r8, 0x0) 2.080824282s ago: executing program 2 (id=1361): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf110000000000f4ffff1200000008000300", @ANYRES32, @ANYBLOB="040013000a00060008021100000100000600100080"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.070132412s ago: executing program 6 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8, @ANYBLOB="13b228a542cbaa78651b7f60940a12412b892f9fdbaa10268feb31018cf9140af3958a9b57e7d98717376d4c4e6724f160bbb943d232e65e66bc544d0a579ab726ec99fb2b00b62ae2040795576db422b60a"], 0x1, 0x2fb, &(0x7f0000000380)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) 1.847170362s ago: executing program 7 (id=1363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) 1.664656062s ago: executing program 5 (id=1364): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000002200)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_register(r0, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x3, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 1.597991202s ago: executing program 6 (id=1365): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}}, 0x2000100) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r7, 0x0) 1.535148471s ago: executing program 7 (id=1366): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r0}}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.534926522s ago: executing program 5 (id=1367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 1.265968871s ago: executing program 5 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000002) 1.165206421s ago: executing program 6 (id=1369): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in=@local}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xfffffd18) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x29, 0x16002c, 0xffc, 0x4, 0x40002, 0xfffffffd, 0x7, 0x0, 0x0, 0x3}) close(r4) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) unshare(0x20000400) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.164670481s ago: executing program 2 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) flistxattr(r1, 0x0, 0x0) 1.095014191s ago: executing program 2 (id=1371): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000340)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nojournal_checksum}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 918.611541ms ago: executing program 5 (id=1372): syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) 889.904791ms ago: executing program 5 (id=1373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='signal_generate\x00', r2, 0x0, 0x1}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) 56.68644ms ago: executing program 2 (id=1374): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0xa0028000}) 0s ago: executing program 7 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8, @ANYBLOB="13b228a542cbaa78651b7f60940a12412b892f9fdbaa10268feb31018cf9140af3958a9b57e7d98717376d4c4e6724f160bbb943d232e65e66bc544d0a579ab726ec99fb2b00b62ae2040795576db422b60a"], 0x1, 0x2fb, &(0x7f0000000380)="$eJzs3E1PE1scx/F/HyhtCZTFzb25JoYT3ehmAtW10hhIjE0kSI0PickAU206tmSmwdQY0ZVb44twQViyI1HeABt3unFj4oKNiQtZGMd0OkNpGUCgpQjfT0LmMOf8OmcOA/lPQ2f9zuvHxbyt5fWKhONKQiIiGyKDEhZfyNuG3XZMtnohF/u+fzx76+69G5lsdmxSqfHM1KW0Umpg6N2TZwlv2EqvrA0+WP+W/rL279r/67+mHhVsVbBVqVxRupouf67o06ahZgt2UVNqwjR021CFkm1Y9f5yvT9vlufmqkovzfYn5yzDtpVeqqqiUVWVsqpYVRV5qBdKStM01Z8U7CW3ODmpZw4YnmnzZNAhlpXRIyKS2NaTW+zKhAAAQFe11v9hUe2s/5fOrVb6bi8PePX/Siyo/r/8qf5aTfV/XEQC63//+IH1v76/+n97RXS6HKr+x/EwFNu2K9Ro1jqtjJ70fn9dL+8vDbsN6n8AAAAAAAAAAAAAAAAAAAAAAP4GG46Tchwn5W/9r14RiYuI/31ANCIiV7swZbTRIX7+OAEaH9yLDoiYr+Zz87n61huwKiKmGDIsKfnpXg+eWtv/5JGqGZT35oKXX5jPRdyeTF4Kbn5EUj3Smnec8evZsRFV15zvkeTWfFpS8k9wPh2Yj8mF81vymqTkw4yUxZRZdx6N/PMRpa7dzLbkE+44AAAAAABOAk1tCrx/17Sd+uv5zfvr1vcHIo376+HA+/OonIl299wBAAAAADgt7OrTom6ahrVLIyF7jzl4I9qhV/bP8E9T/v8y7DDmq/c84c4sgn/wpq64t3PPeL+I7GdZQvtYlh0aYTlIaqh2NuqwK+a/bVRbtKAxMjHaoWs1oNG08v+9efujfYe4suxfAe2ffGT3C6DnaP76AAAAADhKjaLf3zPa3QkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKHcVj0rp9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBx8TsAAP//A3v+lA==") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) kernel console output (not intermixed with test programs): s than device minimum [ 121.763332][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.770653][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.777492][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.784496][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.791235][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.798212][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.805286][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.812035][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.819085][ T5575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.814579][ T5588] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.897505][ T5591] loop3: detected capacity change from 0 to 512 [ 122.941065][ T5591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.959744][ T5592] loop1: detected capacity change from 0 to 2048 [ 122.989280][ T5591] EXT4-fs (loop3): 1 truncate cleaned up [ 122.990825][ T5591] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 123.014474][ T5596] loop0: detected capacity change from 0 to 512 [ 123.130026][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 123.158448][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 123.158462][ T26] audit: type=1326 audit(123.100:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 123.179079][ T5592] capability: warning: `syz.1.430' uses deprecated v2 capabilities in a way that may be insecure [ 123.182027][ T26] audit: type=1326 audit(123.120:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 123.206408][ T26] audit: type=1326 audit(123.120:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 123.211729][ T26] audit: type=1326 audit(123.120:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 123.943915][ T5596] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.973118][ T5596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.432: bg 0: block 248: padding at end of block bitmap is not set [ 123.988433][ T5596] Quota error (device loop0): write_blk: dquota write failed [ 123.990766][ T5596] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.995708][ T26] audit: type=1326 audit(123.130:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 124.042262][ T5596] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.432: Failed to acquire dquot type 1 [ 124.045384][ T26] audit: type=1326 audit(123.140:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 124.050666][ T26] audit: type=1326 audit(123.140:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 124.059647][ T26] audit: type=1326 audit(123.890:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 124.103966][ T5596] EXT4-fs (loop0): 1 truncate cleaned up [ 124.115308][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.150236][ T5605] loop2: detected capacity change from 0 to 256 [ 124.177845][ T5596] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.209813][ T5605] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.261562][ T5596] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 124.269406][ T5625] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.432: Failed to acquire dquot type 1 [ 124.568187][ T5639] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 124.639063][ T5641] loop0: detected capacity change from 0 to 2048 [ 124.697640][ T5645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.449'. [ 124.736327][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.748061][ T5649] syz.1.450 uses obsolete (PF_INET,SOCK_PACKET) [ 124.948946][ T5655] loop2: detected capacity change from 0 to 1024 [ 125.011084][ T5660] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 125.035997][ T5655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.310685][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 125.471256][ T5678] loop2: detected capacity change from 0 to 512 [ 125.553334][ T5678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 125.555642][ T5678] System zones: 1-12 [ 125.558227][ T5678] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.460: Directory hole found for htree index block 0 [ 125.572484][ T5686] tmpfs: Unknown parameter 'mp' [ 125.574888][ T5678] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 125.577030][ T5678] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.460: Directory hole found for htree index block 0 [ 125.588759][ T5678] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 125.591235][ T5678] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,nodiscard,usrjquota=",,errors=continue. Quota mode: writeback. [ 125.609812][ T5687] loop1: detected capacity change from 0 to 1024 [ 125.690841][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 125.717522][ T5678] EXT4-fs (loop2): re-mounted. Opts: usrjquota=,journal_ioprio=0x0000000000000002,stripe=0x00000000000000f8,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 125.826024][ T5696] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 125.828283][ T5696] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.467'. [ 125.992157][ T5702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.118849][ T5702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.217414][ T5702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.358648][ T5722] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.360916][ T5722] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 126.391388][ T5702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.520651][ T5702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.527548][ T5702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.544404][ T5702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.551751][ T5702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.729776][ T5734] loop2: detected capacity change from 0 to 512 [ 126.767151][ T5734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.767624][ T5737] netlink: 100 bytes leftover after parsing attributes in process `syz.1.483'. [ 126.801875][ T5734] EXT4-fs (loop2): 1 truncate cleaned up [ 126.803499][ T5734] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 127.188217][ T5745] rdma_op 00000000a3ad81de conn xmit_rdma 0000000000000000 [ 129.185344][ T5781] xt_hashlimit: size too large, truncated to 1048576 [ 129.264989][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 129.628057][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 129.628070][ T26] audit: type=1326 audit(129.570:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 129.640168][ T26] audit: type=1326 audit(129.580:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 129.666050][ T26] audit: type=1326 audit(129.580:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 129.690757][ T26] audit: type=1326 audit(129.580:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 129.707961][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.714511][ T5802] team0: Port device bond0 added [ 129.717336][ T26] audit: type=1326 audit(129.580:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 129.737481][ T5805] bridge0: port 3(team0) entered blocking state [ 129.743116][ T5805] bridge0: port 3(team0) entered disabled state [ 129.763175][ T5805] device team0 entered promiscuous mode [ 129.764525][ T5805] device team_slave_0 entered promiscuous mode [ 129.766843][ T5805] device bond0 entered promiscuous mode [ 129.768166][ T5805] device bond_slave_0 entered promiscuous mode [ 129.842563][ T5805] device bond_slave_1 entered promiscuous mode [ 129.845487][ T5805] bridge0: port 3(team0) entered blocking state [ 129.847321][ T5805] bridge0: port 3(team0) entered forwarding state [ 130.177908][ T5815] loop2: detected capacity change from 0 to 128 [ 130.460276][ T5823] loop1: detected capacity change from 0 to 2048 [ 130.508654][ T4044] Alternate GPT is invalid, using primary GPT. [ 130.511641][ T4044] loop1: p1 p2 p3 [ 130.547101][ T5830] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.567957][ T5823] Alternate GPT is invalid, using primary GPT. [ 130.569777][ T5823] loop1: p1 p2 p3 [ 130.622743][ T5834] loop2: detected capacity change from 0 to 512 [ 130.660661][ T3644] Alternate GPT is invalid, using primary GPT. [ 130.662705][ T3644] loop1: p1 p2 p3 [ 130.678702][ T5834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.725485][ T5834] EXT4-fs (loop2): 1 truncate cleaned up [ 130.726974][ T5834] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 131.013610][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.044985][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 131.045528][ T4044] udevd[4044]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 131.093354][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.095110][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.888825][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.914880][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 131.938083][ T4044] udevd[4044]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 132.090267][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 132.121439][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 132.161594][ T4044] udevd[4044]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 133.029740][ T5870] tipc: Can't bind to reserved service type 1 [ 133.069376][ T5870] loop2: detected capacity change from 0 to 1024 [ 133.311513][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'. [ 134.024224][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.115838][ T5870] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.119462][ T5870] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 134.150131][ T5870] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.150131][ T5870] [ 134.160956][ T26] audit: type=1326 audit(134.100:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 134.166792][ T26] audit: type=1326 audit(134.100:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 134.187125][ T5870] EXT4-fs (loop2): Total free blocks count 0 [ 134.188669][ T5870] EXT4-fs (loop2): Free/Dirty block details [ 134.197576][ T26] audit: type=1326 audit(134.100:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 134.205551][ T5870] EXT4-fs (loop2): free_blocks=4293918720 [ 134.207053][ T5870] EXT4-fs (loop2): dirty_blocks=128 [ 134.214916][ T5870] EXT4-fs (loop2): Block reservation details [ 134.216549][ T5870] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 134.240325][ T5894] loop1: detected capacity change from 0 to 128 [ 134.288543][ T5892] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 59 with error 28 [ 134.320613][ T5892] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.320613][ T5892] [ 134.439510][ T5894] attempt to access beyond end of device [ 134.439510][ T5894] loop1: rw=2049, want=1041, limit=128 [ 134.579965][ T5894] attempt to access beyond end of device [ 134.579965][ T5894] loop1: rw=524288, want=369, limit=128 [ 134.609683][ T5894] attempt to access beyond end of device [ 134.609683][ T5894] loop1: rw=0, want=153, limit=128 [ 134.619972][ T5894] attempt to access beyond end of device [ 134.619972][ T5894] loop1: rw=0, want=153, limit=128 [ 134.628396][ T5894] attempt to access beyond end of device [ 134.628396][ T5894] loop1: rw=0, want=153, limit=128 [ 134.653829][ T5902] loop2: detected capacity change from 0 to 512 [ 134.792424][ T5902] EXT4-fs (loop2): Ignoring removed orlov option [ 134.807711][ T5902] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 134.810683][ T5902] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.830978][ T5902] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.548: bg 0: block 248: padding at end of block bitmap is not set [ 134.858262][ T5902] Quota error (device loop2): write_blk: dquota write failed [ 134.868217][ T5902] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.885434][ T5902] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.548: Failed to acquire dquot type 1 [ 134.950171][ T5902] EXT4-fs (loop2): 1 truncate cleaned up [ 134.960560][ T5902] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,dioread_nolock,grpjquota=,grpjquota=,orlov,discard,grpid,barrier,,errors=continue. Quota mode: writeback. [ 135.298163][ T26] audit: type=1326 audit(135.240:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.306232][ T26] audit: type=1326 audit(135.250:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.321911][ T26] audit: type=1326 audit(135.250:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.342436][ T26] audit: type=1326 audit(135.250:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.360227][ T26] audit: type=1326 audit(135.250:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.376980][ T26] audit: type=1326 audit(135.250:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.394868][ T26] audit: type=1326 audit(135.250:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 135.411291][ T26] audit: type=1326 audit(135.250:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 136.540823][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 136.883560][ T5953] loop0: detected capacity change from 0 to 512 [ 137.011213][ T5953] EXT4-fs (loop0): Ignoring removed bh option [ 137.032502][ T5953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.084139][ T5953] EXT4-fs (loop0): 1 truncate cleaned up [ 137.085663][ T5953] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bh,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,auto_da_alloc,quota,. Quota mode: writeback. [ 138.405504][ T5977] lo speed is unknown, defaulting to 1000 [ 140.313203][ T5985] lo speed is unknown, defaulting to 1000 [ 141.458159][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 141.460726][ T6006] batman_adv: batadv0: Removing interface: dummy0 [ 141.488419][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.499610][ T6010] loop2: detected capacity change from 0 to 512 [ 141.506205][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 141.506219][ T26] audit: type=1326 audit(141.450:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 141.516090][ T26] audit: type=1326 audit(141.460:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 141.518527][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.540278][ T26] audit: type=1326 audit(141.460:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 141.556663][ T26] audit: type=1326 audit(141.460:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 141.567958][ T26] audit: type=1326 audit(141.460:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 141.659680][ T6010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.737495][ T6010] EXT4-fs (loop2): 1 truncate cleaned up [ 141.739062][ T6010] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 142.173802][ T6019] lo speed is unknown, defaulting to 1000 [ 142.643665][ T6023] IPv6: Can't replace route, no match found [ 142.646460][ T6016] lo speed is unknown, defaulting to 1000 [ 142.819522][ T26] audit: type=1326 audit(142.760:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 142.862426][ T26] audit: type=1326 audit(142.800:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 142.897852][ T6034] loop0: detected capacity change from 0 to 2048 [ 142.938370][ T26] audit: type=1326 audit(142.880:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 142.945604][ T26] audit: type=1326 audit(142.880:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 142.980384][ T26] audit: type=1326 audit(142.880:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 143.026178][ T6034] EXT4-fs (loop0): Ignoring removed orlov option [ 143.751743][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,grpjquota=,,errors=continue. Quota mode: none. [ 143.895053][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 143.938612][ T6057] loop1: detected capacity change from 0 to 1024 [ 143.981751][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 144.205427][ T6057] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 144.210959][ T6057] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 144.230143][ T6057] JBD2: no valid journal superblock found [ 144.858341][ T6057] EXT4-fs (loop1): error loading journal [ 145.027310][ T6065] lo speed is unknown, defaulting to 1000 [ 145.896427][ T6091] lo speed is unknown, defaulting to 1000 [ 146.267960][ T6070] lo speed is unknown, defaulting to 1000 [ 146.364523][ T6099] loop2: detected capacity change from 0 to 2048 [ 146.518221][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 146.669185][ T6070] chnl_net:caif_netlink_parms(): no params data found [ 146.700154][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 146.829328][ T6121] 9pnet: Insufficient options for proto=fd [ 147.489125][ T25] Bluetooth: hci5: command 0x0409 tx timeout [ 147.738419][ T6137] loop0: detected capacity change from 0 to 1024 [ 147.773806][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.779677][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.782879][ T6070] device bridge_slave_0 entered promiscuous mode [ 147.794292][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 147.799111][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.813553][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.816820][ T6070] device bridge_slave_1 entered promiscuous mode [ 147.879852][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 147.977925][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.147233][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.181927][ T6070] team0: Port device team_slave_0 added [ 148.194432][ T6070] team0: Port device team_slave_1 added [ 148.858679][ T6155] loop1: detected capacity change from 0 to 512 [ 148.913274][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.917709][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.959409][ T6158] loop2: detected capacity change from 0 to 512 [ 148.969375][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.996811][ T6155] __quota_error: 18 callbacks suppressed [ 148.996829][ T6155] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 149.000766][ T6155] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 149.009467][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.011186][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.016688][ T6155] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.640: Failed to acquire dquot type 1 [ 149.017794][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.026007][ T6155] EXT4-fs (loop1): 1 truncate cleaned up [ 149.027661][ T6160] tipc: Started in network mode [ 149.028925][ T6160] tipc: Node identity ac14140f, cluster identity 4711 [ 149.030684][ T6160] tipc: New replicast peer: 10.1.1.2 [ 149.032174][ T6160] tipc: Enabled bearer , priority 10 [ 149.040487][ T6155] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.086381][ T6158] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,lazytime,minixdf,barrier,,errors=continue. Quota mode: writeback. [ 149.204334][ T6070] device hsr_slave_0 entered promiscuous mode [ 149.301718][ T6170] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.305172][ T6070] device hsr_slave_1 entered promiscuous mode [ 149.754097][ T6070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.756013][ T6070] Cannot create hsr debugfs directory [ 149.760149][ T6173] lo speed is unknown, defaulting to 1000 [ 150.034371][ T4252] tipc: Node number set to 2886997007 [ 150.189343][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 150.399630][ T6187] loop1: detected capacity change from 0 to 512 [ 150.555236][ T6070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.559027][ T6187] FAT-fs (loop1): Unrecognized mount option "errerrors=remount-rs" or missing value [ 150.624615][ T6070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.772472][ T6070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.793431][ T4082] Bluetooth: hci5: command 0x041b tx timeout [ 150.811665][ T6193] loop1: detected capacity change from 0 to 256 [ 150.814924][ T6070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.054574][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 152.083719][ T6205] netlink: 'syz.0.658': attribute type 3 has an invalid length. [ 152.085852][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 152.150606][ T6207] loop2: detected capacity change from 0 to 256 [ 152.187212][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'. [ 152.214922][ T6207] FAT-fs (loop2): Unrecognized mount option "shortnamd=lower" or missing value [ 152.217670][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.295293][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.298313][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.342187][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.362748][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.365390][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.390833][ T6217] loop0: detected capacity change from 0 to 256 [ 152.408090][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.410114][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.451263][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.454265][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.471756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.488472][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.490233][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.509551][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.543801][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.547365][ T6217] FAT-fs (loop0): Directory bread(block 64) failed [ 152.548963][ T6217] FAT-fs (loop0): Directory bread(block 65) failed [ 152.550593][ T6217] FAT-fs (loop0): Directory bread(block 66) failed [ 152.552193][ T6217] FAT-fs (loop0): Directory bread(block 67) failed [ 152.571714][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.580082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.591846][ T6217] FAT-fs (loop0): Directory bread(block 68) failed [ 152.627729][ T6217] FAT-fs (loop0): Directory bread(block 69) failed [ 152.630867][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.643684][ T6217] FAT-fs (loop0): Directory bread(block 70) failed [ 152.645393][ T6217] FAT-fs (loop0): Directory bread(block 71) failed [ 152.646987][ T6217] FAT-fs (loop0): Directory bread(block 72) failed [ 152.649596][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.666665][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.676635][ T6217] FAT-fs (loop0): Directory bread(block 73) failed [ 152.708122][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.733933][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.144666][ T25] Bluetooth: hci5: command 0x040f tx timeout [ 153.184322][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.195418][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.258407][ T6217] attempt to access beyond end of device [ 153.258407][ T6217] loop0: rw=524288, want=1820, limit=256 [ 153.277393][ T6217] attempt to access beyond end of device [ 153.277393][ T6217] loop0: rw=0, want=1808, limit=256 [ 153.342271][ T6225] lo speed is unknown, defaulting to 1000 [ 153.614720][ T6239] loop0: detected capacity change from 0 to 256 [ 153.628755][ T6243] IPv6: Can't replace route, no match found [ 153.839987][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.842080][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.854769][ T6256] loop2: detected capacity change from 0 to 512 [ 153.875345][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.881230][ T4115] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 153.884271][ T4115] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.899943][ T6259] loop1: detected capacity change from 0 to 1024 [ 153.927235][ T6256] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.930276][ T6256] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.677: bg 0: block 248: padding at end of block bitmap is not set [ 153.948734][ T26] audit: type=1326 audit(153.890:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 153.955475][ T6256] Quota error (device loop2): write_blk: dquota write failed [ 153.957451][ T6256] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 153.964556][ T6256] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.677: Failed to acquire dquot type 1 [ 153.967635][ T26] audit: type=1326 audit(153.890:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.020551][ T26] audit: type=1326 audit(153.890:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.030491][ T6259] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.034131][ T6259] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 154.035994][ T6259] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.039296][ T6256] EXT4-fs (loop2): 1 truncate cleaned up [ 154.042593][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.076798][ T26] audit: type=1326 audit(153.890:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.120812][ T26] audit: type=1326 audit(153.890:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.159638][ T6259] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,sysvgroups,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 154.190685][ T26] audit: type=1326 audit(153.890:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.222249][ T26] audit: type=1326 audit(153.890:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 154.271575][ T26] audit: type=1326 audit(154.160:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 154.319389][ T26] audit: type=1326 audit(154.190:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 154.337559][ T26] audit: type=1326 audit(154.210:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 154.358393][ T26] audit: type=1326 audit(154.210:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 154.409532][ T26] audit: type=1326 audit(154.210:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94265d28 code=0x7ffc0000 [ 154.526803][ T6288] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.649702][ T6070] device veth0_vlan entered promiscuous mode [ 155.642832][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.645612][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.648264][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.651084][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.655536][ T3605] Bluetooth: hci5: command 0x0419 tx timeout [ 155.663624][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.666282][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.687414][ T6070] device veth1_vlan entered promiscuous mode [ 155.692794][ T6299] loop1: detected capacity change from 0 to 512 [ 155.737155][ T6299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.742976][ T6299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.694: bg 0: block 248: padding at end of block bitmap is not set [ 155.766202][ T6299] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.694: Failed to acquire dquot type 1 [ 155.786232][ T6299] EXT4-fs (loop1): 1 truncate cleaned up [ 155.794543][ T6299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.820606][ T6070] device veth0_macvtap entered promiscuous mode [ 155.857739][ T6070] device veth1_macvtap entered promiscuous mode [ 155.894162][ T6301] lo speed is unknown, defaulting to 1000 [ 155.986854][ T6299] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 156.027448][ T6299] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.694: Failed to acquire dquot type 1 [ 156.038200][ T6313] rdma_op 000000002e69b778 conn xmit_rdma 0000000000000000 [ 156.040286][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.040984][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.045651][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.048754][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.071692][ T6299] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 156.087600][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.090668][ T6310] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 156.098245][ T6310] bond0: (slave sit0): Error -95 calling set_mac_address [ 156.130266][ T6288] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.160007][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.178165][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.181389][ T4025] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 156.199752][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.203124][ T4025] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 156.207641][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.210201][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.224538][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.240883][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.251960][ T6324] device team_slave_1 left promiscuous mode [ 156.267525][ T6324] team0: Port device team_slave_1 removed [ 156.290665][ T6288] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.309720][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.316269][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.321186][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.324796][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.327315][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.330078][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.342276][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.348272][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.357291][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.360626][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.376643][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.436435][ T6070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.438539][ T6070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.440746][ T6070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.447929][ T6070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.459313][ T6288] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.641167][ T6288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.653851][ T6288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.671102][ T6288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.683434][ T6288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.768952][ T4627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.771296][ T4627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.805113][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.892879][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.895550][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.900359][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.014928][ T6366] loop2: detected capacity change from 0 to 128 [ 158.725081][ T6366] FAT-fs (loop2): Unrecognized mount option "00000000000000000000003" or missing value [ 158.752220][ T6358] loop0: detected capacity change from 0 to 256 [ 158.833032][ T6358] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.944443][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'. [ 158.957016][ C0] vcan0: j1939_session_tx_dat: 0x00000000fbd9eb70: queue data error: -100 [ 159.165872][ T6398] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.451530][ T6411] device bridge0 entered promiscuous mode [ 159.462115][ T6411] bridge0: port 4(macsec1) entered blocking state [ 159.474985][ T6411] bridge0: port 4(macsec1) entered disabled state [ 159.482218][ T6411] device bridge0 left promiscuous mode [ 160.529252][ T6400] lo speed is unknown, defaulting to 1000 [ 161.255275][ T4082] Bluetooth: hci1: command 0x0409 tx timeout [ 161.351757][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'. [ 161.394989][ T6426] loop2: detected capacity change from 0 to 256 [ 161.580850][ T6426] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.435126][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 162.845760][ T6456] serio: Serial port ptm0 [ 162.867657][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.870607][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.883452][ T6400] device bridge_slave_0 entered promiscuous mode [ 162.889723][ T6459] lo speed is unknown, defaulting to 1000 [ 162.905941][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.907977][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.917780][ T6400] device bridge_slave_1 entered promiscuous mode [ 162.967667][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.985678][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.049741][ T6400] team0: Port device team_slave_0 added [ 163.080732][ T6400] team0: Port device team_slave_1 added [ 163.142274][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.145601][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.165101][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.186357][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.188108][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.251830][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.332422][ T4082] Bluetooth: hci1: command 0x041b tx timeout [ 164.998976][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 164.998989][ T26] audit: type=1326 audit(164.940:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.010886][ T6400] device hsr_slave_0 entered promiscuous mode [ 165.488957][ T6400] device hsr_slave_1 entered promiscuous mode [ 165.512627][ T26] audit: type=1326 audit(165.460:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.521345][ T26] audit: type=1326 audit(165.460:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.546392][ T26] audit: type=1326 audit(165.460:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.572654][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.574531][ T6400] Cannot create hsr debugfs directory [ 165.580010][ T6489] lo speed is unknown, defaulting to 1000 [ 165.603377][ T26] audit: type=1326 audit(165.460:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.608495][ T26] audit: type=1326 audit(165.460:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.625247][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 165.636810][ T6493] lo speed is unknown, defaulting to 1000 [ 165.722249][ T26] audit: type=1326 audit(165.480:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.741227][ T26] audit: type=1326 audit(165.480:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.758953][ T26] audit: type=1326 audit(165.490:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.792470][ T26] audit: type=1326 audit(165.500:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90af2d28 code=0x7ffc0000 [ 165.898480][ T6500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.744'. [ 166.024360][ T6506] device hsr_slave_0 left promiscuous mode [ 166.052768][ T6506] device hsr_slave_1 left promiscuous mode [ 167.147898][ T6518] loop2: detected capacity change from 0 to 512 [ 167.275258][ T6518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.376073][ T6518] EXT4-fs (loop2): 1 truncate cleaned up [ 167.377508][ T6518] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 167.433406][ T6400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.545259][ T6400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.652549][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 167.740273][ T6400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.776661][ T6400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.819329][ T6543] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.760'. [ 167.850021][ T6540] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.760'. [ 167.963415][ T6550] loop0: detected capacity change from 0 to 512 [ 168.109089][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.124607][ T6550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.182714][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.185331][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.189347][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.248291][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.251229][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.260483][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.262470][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.281121][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.305115][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.312057][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.313848][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.330361][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.355035][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.357961][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.361468][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.366507][ T6572] loop2: detected capacity change from 0 to 1024 [ 168.378948][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.388732][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.394312][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.414133][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.433521][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.436365][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.450778][ T6400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.460344][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.461190][ T6572] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c018, mo2=0002] [ 168.467458][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.477661][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.479975][ T6572] System zones: 0-1, 3-12 [ 168.503492][ T6572] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,debug,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,min_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 168.547732][ T6581] loop0: detected capacity change from 0 to 1024 [ 168.618260][ T6581] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 168.763295][ T6581] EXT4-fs (loop0): error: could not find journal device path: error -2 [ 168.816880][ T6590] loop5: detected capacity change from 0 to 8192 [ 169.184853][ T3605] Bluetooth: hci2: command 0x0406 tx timeout [ 169.186443][ T3605] Bluetooth: hci0: command 0x0406 tx timeout [ 169.187944][ T3605] Bluetooth: hci4: command 0x0406 tx timeout [ 169.880377][ T4579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.967254][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.011210][ T4579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.064124][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 170.064139][ T26] audit: type=1326 audit(169.930:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.071117][ T26] audit: type=1326 audit(169.930:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.140228][ T26] audit: type=1326 audit(169.930:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.146127][ T26] audit: type=1326 audit(169.930:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.151697][ T26] audit: type=1326 audit(169.930:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.157409][ T26] audit: type=1326 audit(169.930:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.332457][ T26] audit: type=1326 audit(169.930:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.340391][ T26] audit: type=1326 audit(169.930:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.350793][ T26] audit: type=1326 audit(169.930:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 170.360821][ T26] audit: type=1326 audit(169.930:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 171.272086][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.274386][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.369469][ T4579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.621597][ T4579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.703285][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.706365][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.718376][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.721553][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.747834][ T6400] device veth0_vlan entered promiscuous mode [ 171.757168][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.778592][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.792892][ T6400] device veth1_vlan entered promiscuous mode [ 171.837023][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.839599][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.842627][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.845307][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.848830][ T6400] device veth0_macvtap entered promiscuous mode [ 171.862559][ T6400] device veth1_macvtap entered promiscuous mode [ 171.889056][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.891934][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.919980][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.930271][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.940897][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.950956][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.964655][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.975484][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.987335][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.993441][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.996104][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.998562][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.001173][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.003879][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.006445][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.008839][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.011265][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.015132][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.019578][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.029753][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.438871][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.613212][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.633122][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.645845][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.671495][ T6400] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.675539][ T6400] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.677828][ T6400] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.680070][ T6400] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.824227][ T6678] rdma_op 00000000a6e0af13 conn xmit_rdma 0000000000000000 [ 172.978296][ T4579] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.061221][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.070059][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.110799][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.186796][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.189070][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.207777][ T4579] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.721917][ T6690] lo speed is unknown, defaulting to 1000 [ 173.742728][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.907811][ T4579] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.913053][ T6695] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 173.971675][ T6695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.993902][ T4579] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.085274][ T6695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.087525][ T6695] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 174.091374][ T6695] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 174.182114][ T6726] loop6: detected capacity change from 0 to 2048 [ 174.239613][ T6726] Alternate GPT is invalid, using primary GPT. [ 174.242060][ T6726] loop6: p1 p2 p3 [ 174.437109][ T6727] bridge0: port 3(team0) entered disabled state [ 174.490692][ T6727] device team0 left promiscuous mode [ 174.501502][ T6727] device team_slave_0 left promiscuous mode [ 174.517875][ T6727] device bond0 left promiscuous mode [ 174.519346][ T6727] device bond_slave_0 left promiscuous mode [ 174.537719][ T6727] device bond_slave_1 left promiscuous mode [ 174.550386][ T6727] bridge0: port 3(team0) entered disabled state [ 174.777636][ T6727] team0 (unregistering): Port device team_slave_0 removed [ 174.935388][ T6727] team0 (unregistering): Port device bond0 removed [ 174.978216][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 174.980592][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 174.982019][ T4044] udevd[4044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 175.913500][ T4579] tipc: Disabling bearer [ 175.917621][ T4579] tipc: Left network mode [ 176.059955][ T6759] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 176.061969][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.086427][ T6756] loop6: detected capacity change from 0 to 256 [ 176.107643][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 176.202515][ T6763] vhci_hcd: connection closed [ 176.212490][ T4622] vhci_hcd: stop threads [ 176.215114][ T4622] vhci_hcd: release socket [ 176.216313][ T4622] vhci_hcd: disconnect device [ 176.228446][ T6756] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.475595][ T6782] lo speed is unknown, defaulting to 1000 [ 179.987293][ T6818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.843'. [ 180.008970][ T4082] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.192435][ T4082] usb 1-1: device descriptor read/64, error -71 [ 180.356591][ T6833] loop5: detected capacity change from 0 to 512 [ 180.421383][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 180.421399][ T26] audit: type=1326 audit(180.360:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.432937][ T26] audit: type=1326 audit(180.370:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.446309][ T26] audit: type=1326 audit(180.370:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.463288][ T4082] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.468307][ T26] audit: type=1326 audit(180.370:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.485960][ T26] audit: type=1326 audit(180.370:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.505648][ T26] audit: type=1326 audit(180.370:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.511125][ T26] audit: type=1326 audit(180.370:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.517751][ T6833] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.520154][ T26] audit: type=1326 audit(180.370:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=70 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.526419][ T26] audit: type=1326 audit(180.370:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.532266][ T26] audit: type=1326 audit(180.370:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 180.620275][ T6833] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.845: corrupted inode contents [ 180.662954][ T4082] usb 1-1: device descriptor read/64, error -71 [ 180.669464][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 180.680596][ T6833] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.845: mark_inode_dirty error [ 180.683879][ T6850] loop6: detected capacity change from 0 to 256 [ 180.690715][ T6833] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.845: corrupted inode contents [ 180.699784][ T6833] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.845: mark_inode_dirty error [ 180.771798][ T6869] netlink: 'syz.2.855': attribute type 10 has an invalid length. [ 180.774613][ T6850] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.789705][ T4082] usb usb1-port1: attempt power cycle [ 181.095089][ T6889] loop5: detected capacity change from 0 to 2048 [ 181.187900][ T6889] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.190756][ T6898] loop6: detected capacity change from 0 to 512 [ 181.205025][ T4082] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.272449][ T4082] usb 1-1: device descriptor read/8, error -71 [ 181.375250][ T6898] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.455692][ T6898] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #2: comm syz.6.867: corrupted inode contents [ 181.467186][ T6898] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #2: comm syz.6.867: mark_inode_dirty error [ 181.482702][ T6898] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #2: comm syz.6.867: corrupted inode contents [ 181.503841][ T6898] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.867: mark_inode_dirty error [ 182.109378][ T6962] loop6: detected capacity change from 0 to 764 [ 182.860101][ T7023] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 182.982261][ T7018] loop5: detected capacity change from 0 to 8192 [ 183.916352][ T7049] lo speed is unknown, defaulting to 1000 [ 183.981579][ T7048] loop6: detected capacity change from 0 to 128 [ 184.158988][ T7052] attempt to access beyond end of device [ 184.158988][ T7052] loop6: rw=2049, want=713, limit=128 [ 184.290079][ T7052] attempt to access beyond end of device [ 184.290079][ T7052] loop6: rw=524288, want=369, limit=128 [ 184.318387][ T7052] attempt to access beyond end of device [ 184.318387][ T7052] loop6: rw=0, want=153, limit=128 [ 184.341857][ T7052] attempt to access beyond end of device [ 184.341857][ T7052] loop6: rw=0, want=153, limit=128 [ 184.359021][ T7052] attempt to access beyond end of device [ 184.359021][ T7052] loop6: rw=0, want=153, limit=128 [ 184.361779][ T7052] attempt to access beyond end of device [ 184.361779][ T7052] loop6: rw=0, want=153, limit=128 [ 184.394758][ T7052] attempt to access beyond end of device [ 184.394758][ T7052] loop6: rw=0, want=153, limit=128 [ 184.398186][ T7052] attempt to access beyond end of device [ 184.398186][ T7052] loop6: rw=0, want=153, limit=128 [ 184.401307][ T7052] attempt to access beyond end of device [ 184.401307][ T7052] loop6: rw=0, want=153, limit=128 [ 184.405301][ T7052] attempt to access beyond end of device [ 184.405301][ T7052] loop6: rw=0, want=153, limit=128 [ 185.622948][ T7091] loop6: detected capacity change from 0 to 512 [ 185.644428][ T7096] loop5: detected capacity change from 0 to 128 [ 185.655397][ T7091] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.692040][ T7091] EXT4-fs (loop6): 1 truncate cleaned up [ 185.693668][ T7091] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 185.923680][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 186.662267][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 186.662281][ T26] audit: type=1326 audit(186.600:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.0.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 186.693515][ T26] audit: type=1326 audit(186.630:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.0.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 187.327338][ T7148] lo speed is unknown, defaulting to 1000 [ 188.068275][ T7134] loop6: detected capacity change from 0 to 256 [ 188.159916][ T7134] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.060157][ T7184] loop6: detected capacity change from 0 to 512 [ 190.096355][ T7184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 190.121850][ T7184] EXT4-fs (loop6): 1 truncate cleaned up [ 190.123314][ T7184] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 190.939840][ T26] audit: type=1326 audit(190.880:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 191.011138][ T26] audit: type=1326 audit(190.950:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 191.049592][ T26] audit: type=1326 audit(190.980:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 191.087428][ T26] audit: type=1326 audit(190.980:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 191.234034][ T7198] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 191.244852][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 191.616921][ T7214] lo speed is unknown, defaulting to 1000 [ 192.602987][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.604678][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.818232][ T7231] loop5: detected capacity change from 0 to 1024 [ 193.867820][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 193.870328][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.875382][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.877248][ T7231] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 193.879107][ T7231] EXT4-fs (loop5): too many log groups per flexible block group [ 193.889324][ T26] audit: type=1326 audit(193.830:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 193.895005][ T26] audit: type=1326 audit(193.830:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 193.900671][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.900716][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.901003][ T7231] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 193.901068][ T7231] EXT4-fs (loop5): mount failed [ 193.941905][ T26] audit: type=1326 audit(193.860:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 193.972531][ T26] audit: type=1326 audit(193.870:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 193.978857][ T26] audit: type=1326 audit(193.870:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 193.990696][ T26] audit: type=1326 audit(193.870:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 194.036062][ T26] audit: type=1326 audit(193.870:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 194.154810][ T26] audit: type=1326 audit(193.870:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 194.192062][ T26] audit: type=1326 audit(193.870:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 194.219702][ T26] audit: type=1326 audit(193.870:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 194.231348][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 194.240416][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 196.542078][ T4579] device hsr_slave_0 left promiscuous mode [ 196.575230][ T7288] loop6: detected capacity change from 0 to 256 [ 196.592567][ T4579] device hsr_slave_1 left promiscuous mode [ 196.611745][ T7292] netlink: 44 bytes leftover after parsing attributes in process `syz.5.985'. [ 196.614728][ T7292] netlink: 'syz.5.985': attribute type 3 has an invalid length. [ 196.657132][ T7288] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.665775][ T7298] atomic_op 00000000ad237227 conn xmit_atomic 0000000000000000 [ 196.683186][ T4579] batman_adv: batadv0: Interface deactivated: dummy0 [ 196.684964][ T4579] batman_adv: batadv0: Removing interface: dummy0 [ 196.688727][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.690519][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.705710][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.713329][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.718629][ T4579] device bridge_slave_1 left promiscuous mode [ 196.722770][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.938803][ T4579] device bridge_slave_0 left promiscuous mode [ 196.941030][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.680885][ T4579] device hsr_slave_0 left promiscuous mode [ 198.842578][ T4579] device hsr_slave_1 left promiscuous mode [ 199.024246][ T4579] device bridge_slave_1 left promiscuous mode [ 199.026519][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.526881][ T4579] device bridge_slave_0 left promiscuous mode [ 199.528917][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.752897][ T4579] device veth1_macvtap left promiscuous mode [ 199.755211][ T4579] device veth0_macvtap left promiscuous mode [ 199.756914][ T4579] device veth1_vlan left promiscuous mode [ 199.758425][ T4579] device veth0_vlan left promiscuous mode [ 199.842558][ T4579] device veth1_macvtap left promiscuous mode [ 199.844240][ T4579] device veth0_macvtap left promiscuous mode [ 199.846004][ T4579] device veth1_vlan left promiscuous mode [ 199.847517][ T4579] device veth0_vlan left promiscuous mode [ 200.298795][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 200.308273][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 200.319202][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.366516][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.480216][ T4579] bond0 (unregistering): Released all slaves [ 200.771957][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 200.781791][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 200.790394][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.829117][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.957558][ T4579] bond0 (unregistering): Released all slaves [ 201.075609][ T7284] smc: net device bond0 applied user defined pnetid SYZ0 [ 201.077704][ T7280] lo speed is unknown, defaulting to 1000 [ 201.079698][ T7294] smc: net device bond0 erased user defined pnetid SYZ0 [ 201.161283][ T7324] lo speed is unknown, defaulting to 1000 [ 202.879283][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 203.842065][ T7415] loop6: detected capacity change from 0 to 512 [ 204.727428][ T7415] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.786036][ T7415] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 204.845617][ T7415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.894926][ T7415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.911015][ T7415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.937066][ T7415] device bridge_slave_0 left promiscuous mode [ 204.953165][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.108406][ T7415] device bridge_slave_1 left promiscuous mode [ 205.110020][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.164276][ T7415] bond0: (slave bond_slave_0): Releasing backup interface [ 205.223653][ T7415] bond0: (slave bond_slave_1): Releasing backup interface [ 205.383926][ T7415] team0: Port device team_slave_0 removed [ 205.427215][ T7415] team0: Port device team_slave_1 removed [ 205.439837][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.441796][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.451465][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.467716][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.609451][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1035'. [ 206.984789][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 206.984804][ T26] audit: type=1107 audit(206.930:746): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 207.149318][ T26] audit: type=1326 audit(207.090:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 207.159914][ T26] audit: type=1326 audit(207.100:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 207.184457][ T26] audit: type=1326 audit(207.100:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=149 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 207.189998][ T26] audit: type=1326 audit(207.100:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 207.243143][ T26] audit: type=1326 audit(207.100:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 207.457650][ T7537] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 207.460681][ T7537] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 207.466640][ T7537] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 208.397760][ T26] audit: type=1326 audit(208.340:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.0.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 208.423697][ T26] audit: type=1326 audit(208.370:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.0.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 208.437575][ T26] audit: type=1326 audit(208.370:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.0.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 208.454924][ T26] audit: type=1326 audit(208.370:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.0.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 208.551719][ T7552] loop6: detected capacity change from 0 to 128 [ 208.625141][ T7552] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.644445][ T7552] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.978690][ T7577] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.092957][ T7577] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.142953][ T7583] usb usb1: check_ctrlrecip: process 7583 (syz.0.1077) requesting ep 01 but needs 81 [ 210.210929][ T7577] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.279430][ T7590] $·Ç¤QÈf: renamed from bond0 [ 210.374429][ T7590] device $·Ç¤QÈf entered promiscuous mode [ 210.376317][ T7590] device bond_slave_0 entered promiscuous mode [ 210.385812][ T7590] device bond_slave_1 entered promiscuous mode [ 210.406688][ T7577] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.651421][ T7577] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.665916][ T7577] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.688872][ T7577] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.703535][ T7577] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.853478][ T7602] lo speed is unknown, defaulting to 1000 [ 211.100931][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 211.173782][ T7602] chnl_net:caif_netlink_parms(): no params data found [ 211.178929][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 212.438686][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1092'. [ 212.520929][ T7650] lo speed is unknown, defaulting to 1000 [ 212.665304][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 212.665320][ T26] audit: type=1326 audit(212.610:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.680839][ T26] audit: type=1326 audit(212.620:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.692424][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 212.714250][ T26] audit: type=1326 audit(212.620:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.719518][ T26] audit: type=1326 audit(212.620:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.776930][ T26] audit: type=1326 audit(212.620:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.801438][ T26] audit: type=1326 audit(212.620:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.819505][ T26] audit: type=1326 audit(212.620:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.834087][ T7669] loop5: detected capacity change from 0 to 164 [ 212.848217][ T26] audit: type=1326 audit(212.620:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.857261][ T26] audit: type=1326 audit(212.620:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.885034][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.891712][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.907916][ T7669] Unable to read rock-ridge attributes [ 212.908282][ T7602] device bridge_slave_0 entered promiscuous mode [ 212.926739][ T26] audit: type=1326 audit(212.620:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 212.977385][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.982895][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.997894][ T7602] device bridge_slave_1 entered promiscuous mode [ 213.060473][ T7669] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 213.101740][ T7602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.121914][ T7674] loop6: detected capacity change from 0 to 1024 [ 213.128915][ T7602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.188539][ T7674] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 213.270936][ T7602] team0: Port device team_slave_0 added [ 213.326377][ T7602] team0: Port device team_slave_1 added [ 214.243155][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.245109][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.251441][ T7602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.256125][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.257756][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.283693][ T7602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.445135][ T7602] device hsr_slave_0 entered promiscuous mode [ 214.469160][ T7708] loop0: detected capacity change from 0 to 512 [ 214.516503][ T7708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.517624][ T7602] device hsr_slave_1 entered promiscuous mode [ 214.528439][ T7708] EXT4-fs (loop0): 1 truncate cleaned up [ 214.530248][ T7708] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 214.774362][ T4115] Bluetooth: hci3: command 0x041b tx timeout [ 215.535736][ T7725] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 215.555319][ T7723] IPVS: stopping master sync thread 7725 ... [ 215.952624][ T7758] sch_tbf: burst 9895 is lower than device lo mtu (65550) ! [ 215.957471][ T7602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.994982][ T7602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.049285][ T7602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.063975][ T7763] x_tables: duplicate underflow at hook 3 [ 216.099207][ T7602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.250946][ T7777] usb usb8: usbfs: process 7777 (syz.0.1126) did not claim interface 0 before use [ 216.265388][ T7777] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 216.358527][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.369263][ T7602] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.371636][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.874760][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.121608][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 217.168339][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.171279][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.174759][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.176622][ T4622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.183179][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.224074][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.227449][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.229875][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.231612][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.268416][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.280479][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.321770][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.337914][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.341160][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.351965][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.360186][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 217.363463][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.365432][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.371117][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.376457][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.424437][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.427084][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.429420][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.431884][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.450954][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.471021][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.534499][ T7799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.615617][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.617824][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.629844][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.645294][ T7812] lo speed is unknown, defaulting to 1000 [ 217.680349][ T7816] siw: device registration error -23 [ 217.714253][ T7799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.788493][ T7799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.896794][ T7799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.947499][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.951790][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.979600][ T7602] device veth0_vlan entered promiscuous mode [ 217.982233][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.992263][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.998405][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.003494][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.026367][ T7602] device veth1_vlan entered promiscuous mode [ 218.101034][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.105456][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.111333][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.117509][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.278281][ T7799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.286109][ T7799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.289558][ T7602] device veth0_macvtap entered promiscuous mode [ 218.295493][ T7602] device veth1_macvtap entered promiscuous mode [ 218.301896][ T7799] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.307483][ T7799] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.317657][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.320205][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.632360][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.039684][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.071357][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.095435][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.098340][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.101996][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.125351][ T7602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.127506][ T7602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.129512][ T7602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.131642][ T7602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.178775][ T4403] Bluetooth: hci3: command 0x0419 tx timeout [ 219.188531][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.191468][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.247765][ T26] kauditd_printk_skb: 110 callbacks suppressed [ 219.247780][ T26] audit: type=1326 audit(219.190:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.269655][ T26] audit: type=1326 audit(219.200:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.296342][ T26] audit: type=1326 audit(219.200:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.309914][ T26] audit: type=1326 audit(219.200:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.310911][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.322093][ T26] audit: type=1326 audit(219.200:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.322412][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.332931][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.336763][ T26] audit: type=1326 audit(219.200:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.377850][ T26] audit: type=1326 audit(219.200:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.393076][ T26] audit: type=1326 audit(219.200:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.408970][ T26] audit: type=1326 audit(219.210:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.425793][ T26] audit: type=1326 audit(219.220:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.6.1144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8196cd28 code=0x7ffc0000 [ 219.436850][ T7856] hub 9-0:1.0: USB hub found [ 219.438372][ T7856] hub 9-0:1.0: 8 ports detected [ 219.447697][ T7853] xt_CT: No such helper "pptp" [ 219.501763][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.514314][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.659024][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.727194][ T7884] loop5: detected capacity change from 0 to 512 [ 220.776221][ T7884] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.857980][ T7884] EXT4-fs (loop5): 1 truncate cleaned up [ 220.859427][ T7884] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 220.908716][ T7890] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 221.961179][ T7914] loop7: detected capacity change from 0 to 128 [ 222.106616][ T7926] handle_bad_sector: 2037 callbacks suppressed [ 222.106638][ T7926] attempt to access beyond end of device [ 222.106638][ T7926] loop7: rw=2049, want=745, limit=128 [ 222.331326][ T4627] attempt to access beyond end of device [ 222.331326][ T4627] loop7: rw=1, want=1041, limit=128 [ 223.339387][ T7952] loop7: detected capacity change from 0 to 512 [ 223.362619][ T7952] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 223.392256][ T7952] EXT4-fs (loop7): 1 truncate cleaned up [ 223.400670][ T7952] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 224.465804][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 224.465820][ T26] audit: type=1326 audit(224.410:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.493017][ T26] audit: type=1326 audit(224.410:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.504784][ T26] audit: type=1326 audit(224.420:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.514569][ T26] audit: type=1326 audit(224.430:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.529301][ T26] audit: type=1326 audit(224.430:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.549262][ T26] audit: type=1326 audit(224.430:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.567127][ T26] audit: type=1326 audit(224.430:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.581570][ T26] audit: type=1326 audit(224.430:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.625476][ T26] audit: type=1326 audit(224.430:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 224.709230][ T26] audit: type=1326 audit(224.430:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 225.887563][ T7985] 9pnet: Insufficient options for proto=fd [ 226.349343][ T8006] loop5: detected capacity change from 0 to 256 [ 227.498427][ T8021] lo speed is unknown, defaulting to 1000 [ 228.477693][ T8038] loop7: detected capacity change from 0 to 512 [ 229.370748][ T8037] lo speed is unknown, defaulting to 1000 [ 229.571888][ T8038] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1196: bg 0: block 248: padding at end of block bitmap is not set [ 229.581166][ T8038] __quota_error: 17 callbacks suppressed [ 229.581183][ T8038] Quota error (device loop7): write_blk: dquota write failed [ 229.591972][ T8038] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 229.621445][ T8038] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.1196: Failed to acquire dquot type 1 [ 229.631424][ T8038] EXT4-fs (loop7): 1 truncate cleaned up [ 229.662527][ T8038] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.897821][ T8060] 9pnet: Insufficient options for proto=fd [ 230.320784][ T8071] lo speed is unknown, defaulting to 1000 [ 231.241487][ T26] audit: type=1326 audit(231.180:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 231.247285][ T26] audit: type=1326 audit(231.180:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 231.272471][ T26] audit: type=1326 audit(231.210:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 231.277186][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 231.297399][ T8097] loop6: detected capacity change from 0 to 512 [ 231.298004][ T26] audit: type=1326 audit(231.210:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 231.428454][ T26] audit: type=1326 audit(231.210:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 231.439509][ T8097] EXT4-fs (loop6): orphan cleanup on readonly fs [ 231.444923][ T8097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1210: bg 0: block 248: padding at end of block bitmap is not set [ 231.456561][ T8097] Quota error (device loop6): write_blk: dquota write failed [ 231.458593][ T8097] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 231.489135][ T8097] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1210: Failed to acquire dquot type 1 [ 231.506006][ T8097] EXT4-fs (loop6): 1 truncate cleaned up [ 231.796127][ T26] audit: type=1326 audit(231.210:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1211" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89bafd28 code=0x7ffc0000 [ 232.262507][ T8097] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.332211][ T8108] loop7: detected capacity change from 0 to 2048 [ 232.388322][ T8116] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1218'. [ 232.442021][ T8114] loop5: detected capacity change from 0 to 512 [ 232.521743][ T8108] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.892891][ T8125] lo speed is unknown, defaulting to 1000 [ 233.118776][ T8114] EXT4-fs (loop5): orphan cleanup on readonly fs [ 233.127692][ T8114] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1217: bg 0: block 248: padding at end of block bitmap is not set [ 233.149134][ T8114] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1217: Failed to acquire dquot type 1 [ 233.197600][ T8114] EXT4-fs (loop5): 1 truncate cleaned up [ 233.207966][ T8114] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.312146][ T8114] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 233.346094][ T8114] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1217: Failed to acquire dquot type 1 [ 233.349511][ T8114] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 233.730579][ T8148] 9pnet: Insufficient options for proto=fd [ 235.586117][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 235.586132][ T26] audit: type=1326 audit(235.530:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.5.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 235.599897][ T26] audit: type=1326 audit(235.530:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.5.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 235.660506][ T8184] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1234'. [ 235.662936][ T8184] 0ªX¹¦À: renamed from caif0 [ 235.696010][ T26] audit: type=1326 audit(235.530:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.5.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=19 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 235.757217][ T26] audit: type=1326 audit(235.530:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.5.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 235.764779][ T26] audit: type=1326 audit(235.530:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.5.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 235.799438][ T8184] net_ratelimit: 10 callbacks suppressed [ 235.799447][ T8184] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 236.073752][ T8193] lo speed is unknown, defaulting to 1000 [ 236.546233][ T8191] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1238'. [ 236.854902][ T8209] loop6: detected capacity change from 0 to 512 [ 236.986612][ T8210] 9pnet: Insufficient options for proto=fd [ 237.686405][ T8214] loop0: detected capacity change from 0 to 128 [ 237.774801][ T8218] netlink: 1340 bytes leftover after parsing attributes in process `syz.5.1246'. [ 238.862422][ T26] audit: type=1326 audit(238.780:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 238.878607][ T26] audit: type=1326 audit(238.780:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 238.926387][ T4594] attempt to access beyond end of device [ 238.926387][ T4594] loop0: rw=1, want=641, limit=128 [ 238.944542][ T26] audit: type=1326 audit(238.780:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=148 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 238.950988][ T26] audit: type=1326 audit(238.780:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 239.403678][ T26] audit: type=1326 audit(238.780:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 239.681335][ T8248] lo speed is unknown, defaulting to 1000 [ 239.913113][ T8265] netlink: 'syz.6.1259': attribute type 4 has an invalid length. [ 240.025680][ T8262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1254'. [ 240.033760][ T8252] 9pnet: Insufficient options for proto=fd [ 240.165012][ T8262] tipc: Started in network mode [ 240.166416][ T8262] tipc: Node identity , cluster identity 4711 [ 240.184287][ T8262] tipc: Failed to set node id, please configure manually [ 240.204947][ T8262] tipc: Enabling of bearer rejected, failed to enable media [ 240.551551][ T8280] loop6: detected capacity change from 0 to 512 [ 240.607933][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 240.655664][ C0] vcan0: j1939_session_tx_dat: 0x0000000011463c18: queue data error: -100 [ 240.855625][ C0] vcan0: j1939_tp_rxtimer: 0x0000000011463c18: rx timeout, send abort [ 241.355695][ C0] vcan0: j1939_tp_rxtimer: 0x0000000033e932a4: rx timeout, send abort [ 241.359787][ C0] vcan0: j1939_tp_rxtimer: 0x0000000011463c18: abort rx timeout. Force session deactivation [ 241.362639][ T8280] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 241.364553][ T8280] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value [ 241.459539][ T8291] loop5: detected capacity change from 0 to 128 [ 241.736274][ T4128] attempt to access beyond end of device [ 241.736274][ T4128] loop5: rw=1, want=753, limit=128 [ 241.800824][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1271'. [ 242.818298][ T8327] lo speed is unknown, defaulting to 1000 [ 243.158876][ T8338] tipc: Started in network mode [ 243.332111][ T8346] 9pnet: Insufficient options for proto=fd [ 243.374677][ T8338] tipc: Node identity ac14140f, cluster identity 4711 [ 243.962899][ T8338] tipc: New replicast peer: 10.1.1.2 [ 243.964466][ T8338] tipc: Enabled bearer , priority 10 [ 244.084176][ T8355] loop6: detected capacity change from 0 to 128 [ 244.172006][ T8359] netlink: 'syz.0.1285': attribute type 8 has an invalid length. [ 244.238509][ T8370] attempt to access beyond end of device [ 244.238509][ T8370] loop6: rw=2049, want=865, limit=128 [ 244.424411][ T8373] loop7: detected capacity change from 0 to 764 [ 244.431876][ T4627] attempt to access beyond end of device [ 244.431876][ T4627] loop6: rw=1, want=1041, limit=128 [ 245.045791][ T4075] tipc: Node number set to 2886997007 [ 245.217609][ T8373] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 245.531743][ T8393] lo speed is unknown, defaulting to 1000 [ 246.338247][ T8398] loop6: detected capacity change from 0 to 128 [ 246.550457][ T8398] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 246.572093][ T8398] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 246.602578][ T8398] FAT-fs (loop6): Filesystem has been set read-only [ 246.663167][ T6400] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 248.692632][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 249.956841][ T8467] device syz_tun entered promiscuous mode [ 249.991718][ T8495] loop7: detected capacity change from 0 to 164 [ 249.993627][ T8467] device batadv_slave_0 entered promiscuous mode [ 250.010240][ T8489] lo speed is unknown, defaulting to 1000 [ 250.038464][ T8490] device pim6reg1 entered promiscuous mode [ 250.085677][ T8495] Unable to read rock-ridge attributes [ 250.117012][ T8495] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 250.145505][ T8503] netem: change failed [ 250.328182][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1320'. [ 250.336972][ T8512] sch_tbf: burst 9895 is lower than device lo mtu (65550) ! [ 251.381562][ T8522] loop6: detected capacity change from 0 to 512 [ 251.414216][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 251.414234][ T26] audit: type=1326 audit(251.330:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 251.429459][ T26] audit: type=1326 audit(251.330:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.167988][ T8533] lo speed is unknown, defaulting to 1000 [ 252.285983][ T26] audit: type=1326 audit(251.340:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.292440][ T26] audit: type=1326 audit(251.340:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.293904][ T8522] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.373845][ T26] audit: type=1326 audit(251.340:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.379262][ T26] audit: type=1326 audit(251.340:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=442 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.462448][ T26] audit: type=1326 audit(251.340:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 252.512992][ T8540] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.534869][ T26] audit: type=1326 audit(252.380:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 252.569995][ T26] audit: type=1326 audit(252.410:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 252.630650][ T26] audit: type=1326 audit(252.410:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ec04d28 code=0x7ffc0000 [ 252.679879][ T8540] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.799756][ T8540] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.846275][ T8540] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.967773][ T8548] device veth0_to_bond entered promiscuous mode [ 252.978085][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1326'. [ 253.032083][ T8548] device veth0_to_bond left promiscuous mode [ 253.959198][ T8540] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.978036][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.979860][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.015840][ T8540] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.021325][ T8540] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.038259][ T8540] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.166426][ T8594] loop6: detected capacity change from 0 to 512 [ 254.329636][ T8594] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 254.349847][ T8594] EXT4-fs (loop6): 1 truncate cleaned up [ 254.351364][ T8594] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 254.353418][ T8599] netlink: 'syz.5.1345': attribute type 3 has an invalid length. [ 254.521622][ T8603] 9pnet: Insufficient options for proto=fd [ 256.499232][ T8601] lo speed is unknown, defaulting to 1000 [ 256.649653][ T8619] loop7: detected capacity change from 0 to 512 [ 256.814396][ T8623] loop6: detected capacity change from 0 to 512 [ 256.846375][ T8619] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.921631][ T8623] EXT4-fs (loop6): orphan cleanup on readonly fs [ 256.937385][ T8623] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1348: bg 0: block 248: padding at end of block bitmap is not set [ 256.952690][ T8615] lo speed is unknown, defaulting to 1000 [ 256.955462][ T8623] __quota_error: 2 callbacks suppressed [ 256.955479][ T8623] Quota error (device loop6): write_blk: dquota write failed [ 256.958833][ T8623] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 256.961567][ T8623] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1348: Failed to acquire dquot type 1 [ 257.108550][ T8623] EXT4-fs (loop6): 1 truncate cleaned up [ 257.132485][ T8623] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.168192][ T8623] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 257.173431][ T26] audit: type=1326 audit(257.120:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.7.1349" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91e33d28 code=0x0 [ 257.206477][ T8623] Quota error (device loop6): write_blk: dquota write failed [ 257.210725][ T8623] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 257.232467][ T8623] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1348: Failed to acquire dquot type 1 [ 257.236455][ T8642] device veth0_to_bond entered promiscuous mode [ 257.251668][ T8623] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 257.253102][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1349'. [ 257.316665][ T8642] device veth0_to_bond left promiscuous mode [ 257.377077][ T8642] bond0: (slave bond_slave_0): Releasing backup interface [ 257.398548][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 257.401764][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 257.444987][ T8650] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1354'. [ 257.533121][ T8654] tipc: Enabling of bearer rejected, already enabled [ 260.347771][ T8678] loop6: detected capacity change from 0 to 128 [ 260.355211][ T8672] lo speed is unknown, defaulting to 1000 [ 260.567154][ T8686] binfmt_misc: register: failed to install interpreter file ./file2 [ 260.690383][ T8690] loop7: detected capacity change from 0 to 512 [ 260.849316][ T8692] lo speed is unknown, defaulting to 1000 [ 260.963076][ T8690] EXT4-fs (loop7): orphan cleanup on readonly fs [ 261.012348][ T8690] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1366: bg 0: block 248: padding at end of block bitmap is not set [ 261.062879][ T8690] Quota error (device loop7): write_blk: dquota write failed [ 261.064754][ T8690] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 261.067234][ T8690] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.1366: Failed to acquire dquot type 1 [ 261.111254][ T8690] EXT4-fs (loop7): 1 truncate cleaned up [ 261.180329][ T8690] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.244253][ T8690] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 262.008740][ T8690] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 262.156715][ T26] audit: type=1326 audit(262.100:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.166380][ T26] audit: type=1326 audit(262.110:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.172040][ T26] audit: type=1326 audit(262.110:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.203152][ T8706] [ 262.203920][ T8706] ====================================================== [ 262.205822][ T8706] WARNING: possible circular locking dependency detected [ 262.207731][ T8706] 5.15.178-syzkaller #0 Not tainted [ 262.209062][ T8706] ------------------------------------------------------ [ 262.210956][ T8706] syz.6.1369/8706 is trying to acquire lock: [ 262.212496][ T8706] ffff0000ca1b8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 262.215463][ T8706] [ 262.215463][ T8706] but task is already holding lock: [ 262.217434][ T8706] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 262.220044][ T8706] [ 262.220044][ T8706] which lock already depends on the new lock. [ 262.220044][ T8706] [ 262.222710][ T8706] [ 262.222710][ T8706] the existing dependency chain (in reverse order) is: [ 262.225060][ T8706] [ 262.225060][ T8706] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 262.225951][ T26] audit: type=1326 audit(262.110:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.227314][ T8706] __mutex_lock_common+0x194/0x2154 [ 262.234067][ T8706] mutex_lock_nested+0xa4/0xf8 [ 262.235512][ T8706] rfkill_register+0x44/0x7a4 [ 262.236939][ T8706] hci_register_dev+0x3e0/0x880 [ 262.238626][ T8706] vhci_create_device+0x2c4/0x568 [ 262.240154][ T8706] vhci_write+0x318/0x3b8 [ 262.241409][ T8706] vfs_write+0x884/0xb44 [ 262.242569][ T8706] ksys_write+0x15c/0x26c [ 262.243859][ T8706] __arm64_sys_write+0x7c/0x90 [ 262.245239][ T8706] invoke_syscall+0x98/0x2b8 [ 262.246595][ T8706] el0_svc_common+0x138/0x258 [ 262.248088][ T8706] do_el0_svc+0x58/0x14c [ 262.249291][ T8706] el0_svc+0x7c/0x1f0 [ 262.250468][ T8706] el0t_64_sync_handler+0x84/0xe4 [ 262.251981][ T8706] el0t_64_sync+0x1a0/0x1a4 [ 262.253253][ T8706] [ 262.253253][ T8706] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 262.255241][ T8706] __mutex_lock_common+0x194/0x2154 [ 262.255614][ T26] audit: type=1326 audit(262.110:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.256802][ T8706] mutex_lock_nested+0xa4/0xf8 [ 262.262207][ T26] audit: type=1326 audit(262.110:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.263574][ T8706] vhci_send_frame+0x8c/0x10c [ 262.263599][ T8706] hci_send_frame+0x194/0x2f0 [ 262.263610][ T8706] hci_tx_work+0x9ac/0x16cc [ 262.263619][ T8706] process_one_work+0x790/0x11b8 [ 262.263631][ T8706] worker_thread+0x910/0x1034 [ 262.263641][ T8706] kthread+0x37c/0x45c [ 262.263649][ T8706] ret_from_fork+0x10/0x20 [ 262.263661][ T8706] [ 262.263661][ T8706] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 262.263682][ T8706] __flush_work+0xf8/0x1c0 [ 262.263691][ T8706] flush_work+0x24/0x38 [ 262.263700][ T8706] hci_dev_do_close+0x16c/0x1060 [ 262.284454][ T8706] hci_unregister_dev+0x248/0x4d4 [ 262.285840][ T8706] vhci_release+0x74/0xc4 [ 262.287154][ T8706] __fput+0x1c4/0x800 [ 262.288422][ T8706] ____fput+0x20/0x30 [ 262.289675][ T8706] task_work_run+0x130/0x1e4 [ 262.291077][ T8706] do_exit+0x670/0x20bc [ 262.292233][ T8706] do_group_exit+0x110/0x268 [ 262.293591][ T26] audit: type=1326 audit(262.140:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c10bd28 code=0x7ffc0000 [ 262.293626][ T8706] __wake_up_parent+0x0/0x60 [ 262.300586][ T8706] invoke_syscall+0x98/0x2b8 [ 262.301997][ T8706] el0_svc_common+0x138/0x258 [ 262.303408][ T8706] do_el0_svc+0x58/0x14c [ 262.304690][ T8706] el0_svc+0x7c/0x1f0 [ 262.305869][ T8706] el0t_64_sync_handler+0x84/0xe4 [ 262.307430][ T8706] el0t_64_sync+0x1a0/0x1a4 [ 262.308789][ T8706] [ 262.308789][ T8706] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 262.310843][ T8706] __mutex_lock_common+0x194/0x2154 [ 262.312321][ T8706] mutex_lock_nested+0xa4/0xf8 [ 262.313736][ T8706] bg_scan_update+0x9c/0x470 [ 262.315082][ T8706] process_one_work+0x790/0x11b8 [ 262.316450][ T8706] worker_thread+0x910/0x1034 [ 262.317780][ T8706] kthread+0x37c/0x45c [ 262.318909][ T8706] ret_from_fork+0x10/0x20 [ 262.320221][ T8706] [ 262.320221][ T8706] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 262.322865][ T8706] __lock_acquire+0x32d4/0x7638 [ 262.324372][ T8706] lock_acquire+0x240/0x77c [ 262.325703][ T8706] __flush_work+0xf8/0x1c0 [ 262.327000][ T8706] __cancel_work_timer+0x3ec/0x548 [ 262.328543][ T8706] cancel_work_sync+0x24/0x38 [ 262.329930][ T8706] hci_request_cancel_all+0xcc/0x2d0 [ 262.331544][ T8706] hci_dev_do_close+0x54/0x1060 [ 262.333035][ T8706] hci_rfkill_set_block+0xdc/0x1d0 [ 262.334616][ T8706] rfkill_set_block+0x18c/0x37c [ 262.336070][ T8706] rfkill_fop_write+0x594/0x750 [ 262.337514][ T8706] vfs_write+0x280/0xb44 [ 262.338825][ T8706] ksys_write+0x15c/0x26c [ 262.340051][ T8706] __arm64_sys_write+0x7c/0x90 [ 262.341524][ T8706] invoke_syscall+0x98/0x2b8 [ 262.342874][ T8706] el0_svc_common+0x138/0x258 [ 262.344288][ T8706] do_el0_svc+0x58/0x14c [ 262.345638][ T8706] el0_svc+0x7c/0x1f0 [ 262.345701][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1377'. [ 262.346933][ T8706] el0t_64_sync_handler+0x84/0xe4 [ 262.350724][ T8706] el0t_64_sync+0x1a0/0x1a4 [ 262.352050][ T8706] [ 262.352050][ T8706] other info that might help us debug this: [ 262.352050][ T8706] [ 262.354833][ T8706] Chain exists of: [ 262.354833][ T8706] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 262.354833][ T8706] [ 262.359015][ T8706] Possible unsafe locking scenario: [ 262.359015][ T8706] [ 262.361027][ T8706] CPU0 CPU1 [ 262.362564][ T8706] ---- ---- [ 262.363965][ T8706] lock(rfkill_global_mutex); [ 262.365225][ T8706] lock(&data->open_mutex); [ 262.367156][ T8706] lock(rfkill_global_mutex); [ 262.369066][ T8706] lock((work_completion)(&hdev->bg_scan_update)); [ 262.370855][ T8706] [ 262.370855][ T8706] *** DEADLOCK *** [ 262.370855][ T8706] [ 262.373020][ T8706] 1 lock held by syz.6.1369/8706: [ 262.374407][ T8706] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 262.377079][ T8706] [ 262.377079][ T8706] stack backtrace: [ 262.378617][ T8706] CPU: 0 PID: 8706 Comm: syz.6.1369 Not tainted 5.15.178-syzkaller #0 [ 262.380825][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.383558][ T8706] Call trace: [ 262.384443][ T8706] dump_backtrace+0x0/0x530 [ 262.385685][ T8706] show_stack+0x2c/0x3c [ 262.386804][ T8706] dump_stack_lvl+0x108/0x170 [ 262.388079][ T8706] dump_stack+0x1c/0x58 [ 262.389152][ T8706] print_circular_bug+0x150/0x1b8 [ 262.390380][ T8706] check_noncircular+0x2cc/0x378 [ 262.391596][ T8706] __lock_acquire+0x32d4/0x7638 [ 262.392929][ T8706] lock_acquire+0x240/0x77c [ 262.394065][ T8706] __flush_work+0xf8/0x1c0 [ 262.395182][ T8706] __cancel_work_timer+0x3ec/0x548 [ 262.396539][ T8706] cancel_work_sync+0x24/0x38 [ 262.397775][ T8706] hci_request_cancel_all+0xcc/0x2d0 [ 262.399150][ T8706] hci_dev_do_close+0x54/0x1060 [ 262.400437][ T8706] hci_rfkill_set_block+0xdc/0x1d0 [ 262.401811][ T8706] rfkill_set_block+0x18c/0x37c [ 262.403082][ T8706] rfkill_fop_write+0x594/0x750 [ 262.404346][ T8706] vfs_write+0x280/0xb44 [ 262.405546][ T8706] ksys_write+0x15c/0x26c [ 262.406734][ T8706] __arm64_sys_write+0x7c/0x90 [ 262.408056][ T8706] invoke_syscall+0x98/0x2b8 [ 262.409290][ T8706] el0_svc_common+0x138/0x258 [ 262.410519][ T8706] do_el0_svc+0x58/0x14c [ 262.411629][ T8706] el0_svc+0x7c/0x1f0 [ 262.412747][ T8706] el0t_64_sync_handler+0x84/0xe4 [ 262.414091][ T8706] el0t_64_sync+0x1a0/0x1a4 [ 262.516509][ T8738] loop7: detected capacity change from 0 to 128