last executing test programs: 47.531795385s ago: executing program 1 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) 46.556115654s ago: executing program 1 (id=281): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000011, 0x32, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 46.262153239s ago: executing program 1 (id=285): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x20000890, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0xce21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 45.901988926s ago: executing program 1 (id=289): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 45.596394142s ago: executing program 4 (id=292): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 45.18972631s ago: executing program 1 (id=296): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000f14010029b9"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48010) 45.077729982s ago: executing program 4 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, 0x0, 0x20000008) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r6, 0xffffffffffffffff, 0x0) 44.553925492s ago: executing program 4 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) 44.240549689s ago: executing program 4 (id=304): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000480)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@dioread_lock}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 43.917915475s ago: executing program 1 (id=307): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 43.288735327s ago: executing program 32 (id=307): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 42.835687056s ago: executing program 4 (id=313): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x64000004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 42.217871188s ago: executing program 4 (id=317): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 41.65062146s ago: executing program 33 (id=317): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 9.454693066s ago: executing program 6 (id=320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000080c0)=[{{&(0x7f0000000800)={0xa, 0x4e24, 0xffffff8d, @rand_addr=' \x01\x00', 0x101}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000004580)="b8", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x3}, 0x8) 9.052904614s ago: executing program 6 (id=450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4008804) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.153896969s ago: executing program 0 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 4.027029462s ago: executing program 5 (id=471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0xffffff8d, @rand_addr=' \x01\x00', 0x101}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000004580)="b8", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x3}, 0x8) 3.783169387s ago: executing program 5 (id=472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000002"], 0xf8}}, 0x0) 3.59994123s ago: executing program 5 (id=473): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0a"], 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 3.432044463s ago: executing program 0 (id=475): shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) unshare(0x26020480) mount$bind(0x0, 0x0, &(0x7f0000000200), 0x3088010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000d14040029bd7000fcdbdf2508000100010000000800030000000000080001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) 3.273623286s ago: executing program 5 (id=476): io_setup(0x5, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0xd5f, 0x0, @opaque="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"}}}}}, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10140000", @ANYRES16=r7, @ANYBLOB="00012cbd7000fddbdf2508000000fc130280d9000500862ce26dfe8aecea84a012cd2a8f9a8b8f46a08e01ad187206a4379ee80fb742ec76d2bc02f0093e14fae58e32a9547b28f01d00178c6821aaecb6cbd28046ecdbe12a56683fdfbddad9432eec0521e302bfbc899509d02e9f029c80cd7a7dc04e72d0aba29dfd27ea803b3904ae82b5add1d9bf0eb00933ad925f439d64afc78d88667791b2102a95b51d78d72c9ae09df11fbd718e7533532aa08f583e79ce7a1bf873d86b2a431f5522b802bffde1ff2339b1d71e952b31395128613040703dd9f5771ab21abd9c9fdfc22fbe7b0ab182d863270000000801038018000180060002007b0000000c000200626174616476300028000180050002000000000008000100040000000400030008000100fcffffff08000100ab78000014000180040003000c0002006e6c3830323131000c000180080001000900000020000180080001001000000005000200000000000800010000100000040003004c00018004000300040003000a00020050505050505000000900020065787434000000000c0002006e6c3830323131000a0002005050505050500000080001000d000000080001000e0000001c0001800400030005000200000000000500020000000000040003000c000180080001000900000010000180040003000800010023170000030104004163d94182faa34a02f9374181a172a4148cbda590ebc1638d91809996edb5f893dd3de9d39a424095532c03dd8c3a5bc32168ccb4e3a700c475c05ef69fb73bf52e24dd01c6b6f83387ab51b90285878c1b6211c8671c810495bb79581a24fd42c7d9c77b873a8d822d0b71a136f10462d581b4b0f689ebaa1352c32a5170e4e58a768dd93a9f5f14eb394a9bafa05618653c8a839e1aabfe539552aaf3404d058d0864e08e2eed36ff069752fd82445925a5e8df347ad659de3691009ae831483aea320c668e1805d648cb770f4bb0d9dcf23794fb819377d60bf8fefc2d701e8537bb997da2a1a205876106dfec5906d789e5bc998f6cf8d75f433defe4002a000500492451a18f925efc129fd533958e79d0db381c187c152fb45a0d9de833e2df5d92aabf448db5000004100400c5178e1135cb82b0d22d217af73e541960c0478fe3a2220a75f899c11de577e6e75f5cec252c77a613f830238f56e08fb44fb7c1803814fc620442d855690fe97447637d5b6fb755413eaed1f2592b3bfd26e8b915a54b54a4f8299e7ecf89d9b187d33faab3eb2926b4770558ce23ea5b4306113d9d753e03bc58a865765df6a9fa7da6c83c23fd279876e9d08886ab97fed2e6b50907fc3b9c8877f995ee08c445fa42d0f0ea0aafe3f5bdb6b5aa492cc1a74289b8e8b1f7c4fb4843c3a67e9ed69440323878b71c586d56e117671238ebebde4d0793c05f8291ec8f7a433ec10c4c131d6bf8dab07c0ca0dcbdddc5cea9bc80e792c0b541cf6fbf2751a75568935bd37c7f0375cdd387f59a413541a93e12b9cd6615588d988a53979fd771850e323f45a593c349b599ab221d26dbbf29e1568f702e71dd547ad296346a6c4d59e0a382e3c5a67dfb9b2f8e4efded265d1bfdc09c040a82441c3a0c4e1d4ca4cadacb601569c11503eec955b9c4b8fd8e8999f5a3e773d5776d7a8bdf5a3f4d6d0c6d2ebea10afa7d1572cd62b825cf707604e056be5109983aacdbd5eb5b2d4baec86fa1b41a4efec6dae7de7a787e521f35e22f05d644f97fa55e0dce0f85b745465d35b73c47496eef8890c8348603b6226e1f6e77bdb3ab6ad825708cb821ca2059236072f6f1822cd5c1c37e28f419b3a13670ce227bf41ceb8d96b9b7063eb8027a0996c039ce6bec97702c8d232cd8751d2108fd2fda67e2f4480ccb8efaac49395fedb8d1d67938c57206440f357c6496472255a7b2ab4bf850bc6939fabc8fac88aa860d09d4df341c9e4f2cb7734e4128535c3646093bd972c204b46e50c9424dd637a3be137861677d0dec59be6e8320dfb9afc40caecd9fab175a7baec66c49fa6b069bfdd16b6e0f8e052e8ca543bb030f3c566adbdc4b2d6c32eed17398ac008fb76a2c060711e9821505c36ebbf55912779d44a971b72bff5291c9e8ce592b8abcffd77381f82a538cc982e3d273bbf99ff2d465e686712e04aa7e5e911d950f339d7cf35fd1088b8b08802a60209c0e7f687cc2c3c987c32236e9a38c4120b21839aad195d6c37b5f48c771eb2c015bbc82112e93160e0321635f10edd53d616a86bb7f4a0781f7b66d47b3ddfabe6f49bd66f47c033313902253e75d71f79f62478f6828bd1f6526bae14f5061c97af5cd302687898532aa0033f251b7f626e32ce14b701b1b00176e3cb6de9bda6fc2f756b350d2ed8c402c9f6301476a94525ae729d5a85fd5f8b10b1ef4dd274fe6d831313bd8bb686fa8b1706bea38ffaa6ce4b8d8c9718a8830ae6e78a22e44abf1767a2353b5b45de165d9d77c0b5c0140f2fd6d29b5ba89ec866dcf412fa3f8368ab7cec145985ff9f84184dc6d380e12bf361e0b56e2a4098bd41de2272e4ae07851debbff5339537821de7a6e9ad459505a3c3c48d9e3571919a962851a32bd97b8a0a55c7bc0a5a5fc2828734acaab0aa2f7c79c12b943d17e7e6592f00cd45fe1efd6bfa3c2d7c66b144ff1b0f2769327b7fa2b272c44c489582c9372937e331cfee27525a4debd5c59e621034860bac896b416a85e827551145ab425014b0fd5947de7a9fbc3b87615cb53ab453b301c255716fdc2bc9136ab249d1147fda5df7a911299cfb540b7a79f633458bab8654eda27e820e2f6f298be466f45b4a7be2b9bce26f9d8f9f1bb4edad203bf6ad7e2a161a10e1b4fe9fab735ba200defc09d19400f3538b2f3b7caad353ef507f626dd504ac7ec9f3cfd88ebaa8e79ee9c824b7889d0767dffffffffffffff7f7f62c83d1458fdc23316378de6371903c112683c9a6aad40e773d4ec41190a3119b0caf9e94443887870e321133c9e10f02969f6a1bc38a2629c1475c58e88c7beb3f8624aac4201268bb05d70196e3856f13fbe4d5e15e750ca78deacab3e50c8f3c25ed56e6c4fa9895a42dd855a8f4ddea5b8370cbe93632652bb1eabbdca59dc16749e1643769570d43a9d69ab30ac1f596aa72015a4eea7a2c4ff59d666ce9d9af73854b1059018711a590289e140efd30cd2e854d548a98fe52a9c260018da469ce595368fd78c96be9cc95a72bbaad02da2cead7f5131644b88150737c469fdef39c04156a7d1de19930e702743cee246bff2785c0b26368796167332c766f4d600ba7fe4f5c6af621dd00ef10ad3187c9bf5bed799af22938f272a1771ebc723c586f11a1028a378e478a3c1ffdaf56359e23d850d54de1c3025fcd52efc7f4b9baa470cc045c343bfa606daa67ab24b9b9e2463dfa1fa4b32ca69c975923918a1a5772f91b35092116a43f6f16e503d1e7b146978d1fda50c8890fc87157bb8717bdd3c12c8b943c8f30b9eba309bb93775ddaf8ae461842c14fcd3e7a64a8196ebe59ffc1a3b15587e8cf364b013c09b16110e5e773a7463babc5278f5057c6b555ea5eaa35eb4e775abfb9495c1f097a84daca4a3e04204d8f9769812c1cdf05f5fe42a76ce769385bbe7b2567b96beef01f8fe473513724ec6d6751df6ca66a2e96af5ca6ca5cc4bbe325d62341bd0d9b370a044a18165dd3be6d4ac34ba8ab645a8d251e5ddb49d16ebb58a2bd759fd39e5d1dad6d8b7da8099e7dd2a3f2a45827982964088aaa91499587a75091c11276b8ddeb7a1db368d853d6fb8c7a49960587a172fe0834bcd2bdbdeced4834ee55fa365a091ac1b9b5da7bc68398262048cd95cf210e1ab998126f00b1c74a91e40d8273e7fd151bbc952b292e5657976043b3b42d29d9b4d53c4266498e0acd3366a75f9e7c197cf55e6270ee82e0866ba97b9ba18fabd4a09301dad3d8829e9c1cc3c5e7c60a43f05d8aa095f07db1ee31d79dd7eabb008a596f27d68ee06034d8ccd3acecf69eb8a844c4db3eb70f491116f618e15fc2f06c5492ac8b3ba78321484b09642f34bd60ca4fe19b006688bfd36023e4abf50f790a4d9d788383696d9379d6df3bcd4db55b27a65979a54e1b7b0f469e62701c468c923ea32a2a28e9fb81dd79e1edbdbff4c5076c39bf61d313c40d572ea28975955ec53bc6371fa079daabe07ad633e16a302945a7569f58746de850a50dc9a389c1fc11cbfe711e1b7782336de81c87ea63ca7c7bcb6de869b6afd25d72b624405fd2e848add56a63586759c0764c3e6fe3f053e58dc64e9ba080b52058dc0c336642d634372df8c945ec6a08abad11facd61eb86665fb8a868027706b42f935746341d5e48aa9c87ffe0a92a883f04ce1731353d3a50068c7e2934c5c5c503a970de9cafc7e53094be3c449d14ea7fccbc5951e126062d57239970bedefdf6bce9496c1feb30d2fdd7907164436e9095172ca36e81d600ca7ae30f3aea38731d049395498935228ecc367b8adfe77e25e94898c1c0d98590b5eea225d50383d3368204f770c9761d2bea6b2aed0fc438d10760a020c434bed7a5f5b1e9918c9427a5b91945b3ad05e1e955f8aeac47763dc49079f396aa7224023cc4a77d942f3af58b8ef2744bc3d3d4634b25d69d1fccca2c7e4e2586dd51509c06a3240a1b5d2c35423b77fca894bb426ed62357c2c70e69068d04b3b7fa540723a0be0c12ac94ac8d7a73e22c80551782b3595abc759c9bb4ce9c5e40a519ba5e0fb4817b07953c027090f7562afa42a1bb1437749803cf131b7150cc364de8293db7fc5a9084ebe07d42d9f34ef993b4bf2c789752e9c71e0e1d1860c5c24b71feaccdb86b960d03935a92e47767d99df3828d47f8434a9492aa4c18a7bd864e8b4c3c00c274844044f211d09a2a0de6d335ddc3c4d1827b70309ce6410096603a561a11d6498af4099e57be85a6e1b30faeeca44a712f6e57512eac5c805bd614e528e9b4d0febaa2dd823c5f9df41a7257726926a73f4af0c5881fd13b0315d4ab6bebd4f890639dfeaf618941db724a948e4a4492d38bd193fc6a80e560403889ad19bee8ca67779b103b3a2db1ef3028a86fdd290077eb52dda8dc62a29a48d799aa9f5de5398a28ffb6b80eea30aa3e14656b6b8ab9c8bf2c97d6d01a9b8dc7579dc77e37f631043aa6a8a05683d64fa2c9bc8c1b424035eb31f5b5f057e44283bedb60381fc8aaa508417efcc3b1036ad4e9a0d3475399e7111dac2daf62f73bfe1684f31279c34f0a54ec4aab38fb08e85a1465aa467249456a1ae8ecd4d9e2c71d20f17dac532e6476b274d9cecafb214e79b80cca1a68d29184e1cbfb72bbf147dfcab89389effae2d80b2bbd830b12325da2cf84386e482af1c3c92e063ab8eb3b9eb00466e2b3fa3c65e02598d44cf34598b127c2ad77177ef3c503c738a5effdbc193f8ea9de53d6ee0eec800feaee4f52bdfe221d444d76e2596cc447d36568b802ec3726b18d3fbdc870d5f75674cbdc236f1106410744158d54a459618190adb621c557c153194ef0bed58a1eac3074c4faf4cc24faafd3f741e2625f5e690985c622527b871d48b3a13f0ef95b7714f6ac26fb4a220bdcfc88427e727a25a353d85ae0121b504de8b39a7bd3f1d5a81e83da9f75483d1588533555996d3604d2ed2065883f0dcf98195d6135b0e44f0f8ac4b3f436c23473869c7366c75b8d4b676cfed03a7b22d55e78baa44492645d52ef9287b869168667e983cd96b69df7b1a609087238d8a6ff0bc9ff8a6da71ef0915d23c4809c90463fbaba968e39a24f7f81332df9320363f07b73271f6c137a6e2b065eafacf2e41569b4bbdd0a059b806e6ce2319154b0df2d7e7aa4a3a8d8744707ec80458263ecc1dc5f052f6a220e728f92e2b65021e2ee9df4552c8f5a2e2fd8b6b369777a6bff48f77697fc501b300642ac9f041fea523f786ed0f4d8a3db3eee39b7919b3ae9ae4730b0af2f9bdda3491c3c772a9ca7e9edf4ef7c0304e2c6e235ebcba00b38434239cbe912ce7148259ec0ebc7f5ff122588884508d8526b4e3f55b3da9d1c4c95f8f417aa2fdd05732385e576f1616d07aa92d0e55e7e0c8c681a85dc9a76c13947a4ee20a1f9f77403145f8160d1ede1fc60e469faeb73135b25bd70d1d2e7207bdb53622f05c3e6496a6b6b3150f9344e9b03bca85212b80fc53d862ff1c342e1c80f9d5a590dde69db5a85ff27ac026e9c9e3e09d8896ea5facf6aeb8808aa1964a81fbb38313452706b2b4829b511f7c6473ccf759a0e96a7ca175a98de9bb07e6c0e03fc73bf94c246077a46dd885a34961e7d5f7d7d35060bd867cdb7982061cd2c0f55587e9c02287782915e6a13641fb025ece4e75ea9912b73fe398a9bbb11316ad645d03126aaa13a29d473c6fec6ddeee36bf7f99612ce2a555d7b3f0e4e776b53e97896f2f6f2e99677c3aaef904e957a0f1140101e27f573eb92bafe7b2bd560896cda40de10486e7896d15638b8c0174234898b7784e70a4f23e6df5e04df832a70e2e33f1ae21783cb7f7b661826133c862abcf0f7de982844b199f260ab889c9dead513b640d44655a74f2aef3fd20176f4e0334419ccce6290564e3437025ac2474cf9cb34eb1276512855496ceefcc1d0e2c6aad602c0335b9a15c6bdf2a383409a1bca92cdbffdf7c3e8ca390a4b236c97b65b612f02ba925fc0268cea31bf0e89b6db05d6486c4bd94a31730741e8c41e7605396ef063998d861e32657fd7adbecb741a01f28ea71b153f61438d0939a891169073214b1bb35ed21de53618870da60d1069cdbc5c23e6e242aa422320388e31ec87ddb8745a1f3c2c38c31b5dc74aaadfef51d0723701701e9c52bf5895f0e9489bb0b262bd20005000f565436d73f92fc7bc3be836674ad169d696cddc272ebd7ccf872595f52b96501c0033e2594bafd2e7927f50deb804f4a860b1be3d120d8dfa957fcce92756049b4471a415f7aecac374c0492fba25a5e804bddbae1c0b9e51b49a744f30d5362c3c5df80bdf371ece5f46ce18d0bab3487e203bcc5600a1b5f751431336e8b4fec71da5831d316157209dca0f1658e7b9ddf4a2631e8051c0f3e8f569a44b94593f49be3efe70e839d0ba5593ccb4067f77d6261ce8ada30d0319192be50321cb8fa01b6d6e0b7b7fa1d1dc31900000400010008000200eb0a0000"], 0x1410}, 0x1, 0x0, 0x0, 0x800}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r9, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r6, {0x2, 0xf}, {}, {0x5, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x4f}, {0x10, 0x4}]}, @restrict={0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @union={0x0, 0x5, 0x0, 0x5, 0x1, 0x4bb, [{0x1}, {0x9, 0x5, 0x2}, {0xa, 0x3, 0x752c21de}, {0xd, 0x4, 0x9}, {0x4, 0x2, 0x4}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x8ac}], "3a15"}]}, {0x0, [0x61, 0x30, 0x5f, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/67, 0xb7, 0x43, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x2ac0000, 0xee, 0x1, 0x40004, 0xffffffffffffffff, 0xb1, '\x00', r6, r11, 0x3, 0x3, 0x2}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x9, 0x100100001, 0xfffffffffffffffc}) eventfd2(0x8, 0x1) 2.314569635s ago: executing program 0 (id=480): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000003cc0)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.016790461s ago: executing program 2 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 1.978359612s ago: executing program 3 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x20008010) sendmsg$nl_route_sched(r1, 0x0, 0x20084084) 1.783895395s ago: executing program 2 (id=485): fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 1.605829259s ago: executing program 2 (id=486): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='dax_insert_mapping\x00', r1, 0x0, 0x2}, 0xffffff57) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feff"], 0x48) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="f4ffffffffff00000000000008004500005c00000000001190780000000000000005"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="22d64d1b3c8e9dd782b13a0a2a1e24c9b47778a127677ea0838d058974e14d0d684865400121ee98fd5e6c8b1342f6189d8089a2125a22fffb5a4e591d7bebd348", @ANYRES16=r4, @ANYBLOB="00022dbd7000fcdbdf2505000000050005000600000004000680"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000426bd70000b0000003700000008000300", @ANYRES32=0x0, @ANYBLOB="0800570009000000080057000400000008010000ffffff7f"], 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000a80)=[{r8}, {r6, 0x1084}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x400) r9 = timerfd_create(0x0, 0x80800) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) timerfd_settime(r9, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 1.459436142s ago: executing program 5 (id=487): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x78}}, 0x0) 1.432435002s ago: executing program 2 (id=488): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) eventfd(0x10) io_submit(r1, 0x1, &(0x7f00000006c0)=[0x0]) close_range(r0, 0xffffffffffffffff, 0x0) 1.346580254s ago: executing program 3 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.217742016s ago: executing program 0 (id=490): shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) unshare(0x26020480) mount$bind(0x0, 0x0, &(0x7f0000000200), 0x3088010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000d14040029bd7000fcdbdf2508000100010000000800030000000000080001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) 1.118595218s ago: executing program 2 (id=491): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000ffffffff"]) 1.104957869s ago: executing program 5 (id=492): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000080)="5e8e", 0x2, 0x0, &(0x7f0000000000)={0x2, 0x4, @private=0xa010100}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x6, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mlockall(0x7) listen(r0, 0xda90) accept(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) fcntl$setlease(r6, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2800, 0x45) 913.425012ms ago: executing program 3 (id=493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 629.821698ms ago: executing program 3 (id=494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0xffffff8d, @rand_addr=' \x01\x00', 0x101}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000004580)="b8", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x3}, 0x8) 412.911092ms ago: executing program 2 (id=495): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) renameat2(0xffffffffffffffff, &(0x7f0000003540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x6) write$binfmt_elf64(r0, 0x0, 0x141) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x6, 0x800) 352.918803ms ago: executing program 3 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x40408c0) 305.726974ms ago: executing program 6 (id=497): io_setup(0x5, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0xd5f, 0x0, @opaque="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"}}}}}, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10140000", @ANYRES16=r7, @ANYBLOB="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"], 0x1410}, 0x1, 0x0, 0x0, 0x800}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r9, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r6, {0x2, 0xf}, {}, {0x5, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x4f}, {0x10, 0x4}]}, @restrict={0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @union={0x0, 0x5, 0x0, 0x5, 0x1, 0x4bb, [{0x1}, {0x9, 0x5, 0x2}, {0xa, 0x3, 0x752c21de}, {0xd, 0x4, 0x9}, {0x4, 0x2, 0x4}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x8ac}], "3a15"}]}, {0x0, [0x61, 0x30, 0x5f, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/67, 0xb7, 0x43, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x2ac0000, 0xee, 0x1, 0x40004, 0xffffffffffffffff, 0xb1, '\x00', r6, r11, 0x3, 0x3, 0x2}, 0x50) inotify_init() eventfd2(0x8, 0x1) 235.356605ms ago: executing program 0 (id=498): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x6, 0xfa00, {0x2000000000000004, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffb, {"50916300"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 180.97µs ago: executing program 0 (id=499): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300000000000000ae000000000005000100070000000900020073797a310000000014000780050015002c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) 0s ago: executing program 3 (id=500): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.381487][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.394298][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.412643][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.422248][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.431201][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.443317][ T4280] device veth0_macvtap entered promiscuous mode [ 79.455779][ T4280] device veth1_macvtap entered promiscuous mode [ 79.472400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.483476][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.499588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.520551][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.543085][ T4279] device veth0_macvtap entered promiscuous mode [ 79.587269][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.612646][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.624608][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.638039][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.650759][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.677278][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.691076][ T4279] device veth1_macvtap entered promiscuous mode [ 79.710873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.717086][ T4382] loop3: detected capacity change from 0 to 512 [ 79.729932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.742100][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.754909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.770811][ T4276] device veth0_vlan entered promiscuous mode [ 79.803196][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.833011][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.839760][ T4382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6: bg 0: block 248: padding at end of block bitmap is not set [ 79.843251][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.868147][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.881401][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.892221][ T4382] Quota error (device loop3): write_blk: dquota write failed [ 79.901202][ T4382] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 79.912951][ T4382] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.6: Failed to acquire dquot type 1 [ 79.915269][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.938324][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.942129][ T4382] EXT4-fs (loop3): 1 truncate cleaned up [ 79.947262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.961478][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.961984][ T4382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.981414][ T4276] device veth1_vlan entered promiscuous mode [ 79.988625][ T4382] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.003833][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.012961][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.028998][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.040456][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.123571][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.141937][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.153154][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.165704][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.175772][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.186310][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.202586][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.212539][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 80.228780][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.238475][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.239612][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 80.247783][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.264896][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6852: comm kworker/u4:1: Failed to release dquot type 1 [ 80.265715][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.286579][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.295491][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.316181][ T4276] device veth0_macvtap entered promiscuous mode [ 80.328307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.354144][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.373321][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.390428][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.400616][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.418034][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.432372][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.447485][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.459823][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.485062][ T4276] device veth1_macvtap entered promiscuous mode [ 80.492832][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.502694][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.511557][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.521219][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.531594][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.552225][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.563304][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.578250][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.589741][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.631045][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.643842][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.661515][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.673434][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.692056][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.703790][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.714053][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.724683][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.734868][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.745386][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.758531][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.777202][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.789027][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.798050][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.823024][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.839032][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.845220][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.859964][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.871442][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.891321][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.902886][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.925271][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.936213][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.947288][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.962158][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.990892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.997976][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 81.011383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.020743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.048532][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.072688][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.081705][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 81.088018][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.097441][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.143238][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.156403][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 81.165515][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 81.165920][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 81.171593][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.231948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.308017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.324829][ T4403] loop3: detected capacity change from 0 to 128 [ 81.331393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.333079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.417153][ T4403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.448004][ T4405] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 81.456868][ T4403] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.460198][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.515077][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.573952][ T27] audit: type=1800 audit(1757065955.012:2): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 81.626735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.667416][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.667469][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.672379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.750703][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 81.814085][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.814140][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.825906][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.049613][ T4413] loop3: detected capacity change from 0 to 512 [ 82.063814][ T4413] ======================================================= [ 82.063814][ T4413] WARNING: The mand mount option has been deprecated and [ 82.063814][ T4413] and is ignored by this kernel. Remove the mand [ 82.063814][ T4413] option from the mount to silence this warning. [ 82.063814][ T4413] ======================================================= [ 82.144682][ T4413] EXT4-fs: Ignoring removed oldalloc option [ 82.154170][ T4418] loop0: detected capacity change from 0 to 764 [ 82.162422][ T4413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.619237][ T4424] loop4: detected capacity change from 0 to 1764 [ 83.821816][ T4418] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.312691][ T4413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.11: Parent and EA inode have the same ino 15 [ 84.355954][ T4418] Symlink component flag not implemented [ 84.413393][ T4418] Symlink component flag not implemented (7) [ 84.463448][ T4413] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.535661][ T4413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.11: Parent and EA inode have the same ino 15 [ 84.568344][ T27] audit: type=1326 audit(1757065958.012:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 84.664458][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 84.701429][ T4413] EXT4-fs (loop3): 1 orphan inode deleted [ 84.730517][ T27] audit: type=1326 audit(1757065958.052:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 84.767789][ T4413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.798461][ T27] audit: type=1326 audit(1757065958.052:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 84.875490][ T27] audit: type=1326 audit(1757065958.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.103588][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 85.192819][ T4444] futex_wake_op: syz.2.19 tries to shift op by 144; fix this program [ 85.296462][ T4444] loop2: detected capacity change from 0 to 512 [ 85.333726][ T27] audit: type=1326 audit(1757065958.772:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.425703][ T4444] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 85.470901][ T27] audit: type=1326 audit(1757065958.772:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.505629][ T4444] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.522286][ T4444] EXT4-fs (loop2): mount failed [ 85.589865][ T27] audit: type=1326 audit(1757065958.792:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.611860][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.672717][ T27] audit: type=1326 audit(1757065958.792:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.695071][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.746342][ T27] audit: type=1326 audit(1757065958.792:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 85.758772][ T4460] lo speed is unknown, defaulting to 1000 [ 85.862059][ T27] audit: type=1326 audit(1757065958.792:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 86.512763][ T27] audit: type=1326 audit(1757065958.792:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 86.532337][ T4460] lo speed is unknown, defaulting to 1000 [ 86.543230][ T4460] lo speed is unknown, defaulting to 1000 [ 86.562476][ T4460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.625467][ T4460] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.663969][ T27] audit: type=1326 audit(1757065958.792:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 86.693100][ T26] cfg80211: failed to load regulatory.db [ 86.776126][ T27] audit: type=1326 audit(1757065958.792:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 86.789735][ T4460] lo speed is unknown, defaulting to 1000 [ 86.845088][ T4460] lo speed is unknown, defaulting to 1000 [ 86.852181][ T4460] lo speed is unknown, defaulting to 1000 [ 86.862922][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 86.893191][ T4471] IPVS: Error joining to the multicast group [ 86.921554][ T4460] lo speed is unknown, defaulting to 1000 [ 86.931506][ T4460] lo speed is unknown, defaulting to 1000 [ 87.124771][ T4473] loop0: detected capacity change from 0 to 8192 [ 87.297266][ T4482] loop4: detected capacity change from 0 to 512 [ 87.353503][ T4482] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.552468][ T4482] EXT4-fs (loop4): 1 orphan inode deleted [ 87.568854][ T65] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:4: Failed to release dquot type 1 [ 87.625436][ T4482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.662620][ T4482] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.737177][ T4500] random: crng reseeded on system resumption [ 87.883110][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 87.892857][ T3639] udevd[3639]: worker [4375] terminated by signal 33 (Unknown signal 33) [ 87.935227][ T3639] udevd[3639]: worker [4375] failed while handling '/devices/virtual/block/loop0' [ 88.665544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.851266][ T4529] sp0: Synchronizing with TNC [ 89.245877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.254883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.265188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.273902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.282374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.290822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.299215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.307597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.316072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.764443][ T4544] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 90.118277][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 90.144322][ T4555] netlink: 52 bytes leftover after parsing attributes in process `syz.2.61'. [ 90.401668][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 90.401808][ T27] audit: type=1326 audit(1757065963.842:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 90.868160][ T4563] lo speed is unknown, defaulting to 1000 [ 91.517431][ T27] audit: type=1326 audit(1757065963.842:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 91.639940][ T27] audit: type=1326 audit(1757065963.912:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 91.655365][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.66'. [ 91.693149][ T27] audit: type=1326 audit(1757065964.262:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 91.769009][ T27] audit: type=1326 audit(1757065964.262:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b18ebe9 code=0x7ffc0000 [ 91.835966][ T4576] netlink: 76 bytes leftover after parsing attributes in process `syz.1.68'. [ 91.915310][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 91.956170][ T4582] usb usb4: usbfs: interface 0 claimed by hub while 'syz.2.70' sets config #0 [ 92.231018][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 92.764364][ T4607] loop0: detected capacity change from 0 to 128 [ 92.820620][ T4607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.887890][ T4607] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.995517][ T4615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.82'. [ 93.059849][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 93.296145][ T4624] loop1: detected capacity change from 0 to 512 [ 93.351278][ T4624] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.87: casefold flag without casefold feature [ 93.476266][ T4624] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.87: couldn't read orphan inode 15 (err -117) [ 93.500066][ T4624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.596540][ T4624] Illegal XDP return value 4294967274 on prog (id 45) dev syz_tun, expect packet loss! [ 93.680880][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.704159][ T4624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.712542][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.741256][ T4624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.765394][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.110433][ T4642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 94.151253][ T4648] loop2: detected capacity change from 0 to 512 [ 94.163858][ T4648] EXT4-fs: Ignoring removed nobh option [ 94.204813][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.97: corrupted inode contents [ 94.224546][ T4648] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #3: comm syz.2.97: mark_inode_dirty error [ 94.264665][ T4650] loop4: detected capacity change from 0 to 512 [ 94.280130][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.97: corrupted inode contents [ 94.300241][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 94.310774][ T4648] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.97: mark_inode_dirty error [ 94.350134][ T4650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.98: bg 0: block 131: padding at end of block bitmap is not set [ 94.375061][ T4648] Quota error (device loop2): write_blk: dquota write failed [ 94.408309][ T4648] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.458508][ T4650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 94.469608][ T27] audit: type=1326 audit(1757065967.912:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 94.496188][ T4648] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.97: Failed to acquire dquot type 0 [ 94.496701][ T4650] EXT4-fs (loop4): 1 truncate cleaned up [ 94.551025][ T27] audit: type=1326 audit(1757065967.912:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 94.579835][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.97: corrupted inode contents [ 94.584700][ T4650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.614479][ T4648] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #16: comm syz.2.97: mark_inode_dirty error [ 94.700560][ T27] audit: type=1326 audit(1757065967.912:69): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 94.753423][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.97: corrupted inode contents [ 94.787313][ T4648] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.97: mark_inode_dirty error [ 94.836279][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.97: corrupted inode contents [ 94.887188][ T4648] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 94.903082][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 94.921754][ T4648] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.97: corrupted inode contents [ 94.975573][ T4648] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.97: mark_inode_dirty error [ 95.031934][ T4648] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 95.078778][ T4648] EXT4-fs (loop2): 1 truncate cleaned up [ 95.105267][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.134655][ T4648] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.258044][ T4648] device wlan0 entered promiscuous mode [ 95.304403][ T4647] device wlan0 left promiscuous mode [ 95.317330][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 95.369267][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 95.472169][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 95.625042][ T4686] loop1: detected capacity change from 0 to 1024 [ 95.751881][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.765004][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 95.765020][ T27] audit: type=1326 audit(1757065969.202:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.792131][ T4686] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.793422][ T27] audit: type=1326 audit(1757065969.202:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.826439][ T27] audit: type=1326 audit(1757065969.212:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.848518][ T27] audit: type=1326 audit(1757065969.212:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.871675][ T27] audit: type=1326 audit(1757065969.212:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.919800][ T27] audit: type=1326 audit(1757065969.212:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.929463][ T4686] mmap: syz.1.113 (4686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.965159][ T27] audit: type=1326 audit(1757065969.222:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 95.970537][ T2183] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.052094][ T2183] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.075177][ T27] audit: type=1326 audit(1757065969.222:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 96.169681][ T27] audit: type=1326 audit(1757065969.222:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 96.203165][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 96.246129][ T27] audit: type=1326 audit(1757065969.222:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 97.194633][ T4733] lo speed is unknown, defaulting to 1000 [ 97.432905][ T4738] bridge: RTM_NEWNEIGH with invalid ether address [ 97.996992][ T4759] capability: warning: `syz.4.135' uses deprecated v2 capabilities in a way that may be insecure [ 98.152527][ T4761] loop3: detected capacity change from 0 to 2048 [ 98.251170][ T4761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.384444][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 98.590359][ T4773] loop3: detected capacity change from 0 to 512 [ 98.614157][ T4773] EXT4-fs: Ignoring removed nobh option [ 98.696381][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.140: corrupted inode contents [ 98.714278][ T4773] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #3: comm syz.3.140: mark_inode_dirty error [ 98.767904][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.140: corrupted inode contents [ 98.801946][ T4780] tipc: Started in network mode [ 98.812270][ T4773] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.140: mark_inode_dirty error [ 98.831015][ T4780] tipc: Node identity fe4c02fa6f85, cluster identity 4711 [ 98.843593][ T4780] tipc: Enabled bearer , priority 0 [ 98.859094][ T4773] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.140: Failed to acquire dquot type 0 [ 98.880404][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.140: corrupted inode contents [ 98.894551][ T4773] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #16: comm syz.3.140: mark_inode_dirty error [ 98.912095][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.140: corrupted inode contents [ 98.934561][ T4773] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.140: mark_inode_dirty error [ 98.948696][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.140: corrupted inode contents [ 98.966775][ T4773] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 98.987071][ T4773] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.140: corrupted inode contents [ 99.002321][ T4773] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.140: mark_inode_dirty error [ 99.021387][ T4773] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 99.033867][ T4773] EXT4-fs (loop3): 1 truncate cleaned up [ 99.043472][ T4773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.052950][ T4773] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.176696][ T4781] tipc: Disabling bearer [ 99.234152][ T4773] device wlan0 entered promiscuous mode [ 99.260887][ T4772] device wlan0 left promiscuous mode [ 99.370613][ T4784] loop4: detected capacity change from 0 to 128 [ 99.470333][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 99.591433][ T4787] program syz.4.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.927840][ T4531] kworker/u4:10: attempt to access beyond end of device [ 99.927840][ T4531] loop4: rw=1, sector=145, nr_sectors = 520 limit=128 [ 99.942600][ T4799] loop3: detected capacity change from 0 to 512 [ 99.974924][ T4799] EXT4-fs: Ignoring removed orlov option [ 100.029138][ T4799] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 100.220397][ T4799] EXT4-fs (loop3): 1 truncate cleaned up [ 100.220449][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.231870][ T4812] loop0: detected capacity change from 0 to 512 [ 100.232645][ T4812] EXT4-fs: Ignoring removed nobh option [ 100.321533][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.155: corrupted inode contents [ 100.321905][ T4812] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #3: comm syz.0.155: mark_inode_dirty error [ 100.322782][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.155: corrupted inode contents [ 100.323112][ T4812] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.155: mark_inode_dirty error [ 100.324237][ T4812] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.155: Failed to acquire dquot type 0 [ 100.327482][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.155: corrupted inode contents [ 100.328965][ T4812] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #16: comm syz.0.155: mark_inode_dirty error [ 100.334244][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.155: corrupted inode contents [ 100.334594][ T4812] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.155: mark_inode_dirty error [ 100.334941][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.155: corrupted inode contents [ 100.345313][ T4812] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 100.345675][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.155: corrupted inode contents [ 100.345976][ T4812] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.155: mark_inode_dirty error [ 100.346270][ T4812] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 100.347112][ T4812] EXT4-fs (loop0): 1 truncate cleaned up [ 100.347142][ T4812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.347232][ T4812] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.367438][ T4812] device wlan0 entered promiscuous mode [ 100.380701][ T4811] device wlan0 left promiscuous mode [ 100.471736][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 100.605523][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 100.688640][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 101.045800][ T4833] lo speed is unknown, defaulting to 1000 [ 101.059900][ T4833] lo speed is unknown, defaulting to 1000 [ 101.064903][ T4833] lo speed is unknown, defaulting to 1000 [ 101.611946][ T4833] infiniband sz1: set active [ 101.612079][ T4833] infiniband sz1: added lo [ 101.649245][ T26] lo speed is unknown, defaulting to 1000 [ 101.766835][ T4839] netlink: 9 bytes leftover after parsing attributes in process `syz.0.159'. [ 101.803260][ T4833] RDS/IB: sz1: added [ 101.804748][ T4833] smc: adding ib device sz1 with port count 1 [ 101.804882][ T4833] smc: ib device sz1 port 1 has pnetid [ 101.807470][ T4833] lo speed is unknown, defaulting to 1000 [ 101.813119][ T4427] lo speed is unknown, defaulting to 1000 [ 101.848651][ T4842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 101.932007][ T4833] lo speed is unknown, defaulting to 1000 [ 102.190503][ T4833] lo speed is unknown, defaulting to 1000 [ 102.307657][ T4833] lo speed is unknown, defaulting to 1000 [ 102.434068][ T4833] lo speed is unknown, defaulting to 1000 [ 102.501430][ T4850] loop1: detected capacity change from 0 to 2048 [ 102.610533][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.748314][ T4268] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 102.777493][ T4268] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 102.800069][ T4857] loop0: detected capacity change from 0 to 512 [ 102.814705][ T4857] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.854943][ T4857] __quota_error: 157 callbacks suppressed [ 102.854959][ T4857] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 102.858177][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 102.880106][ T4857] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 102.894033][ T4857] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.166: Failed to acquire dquot type 1 [ 102.911829][ T4857] EXT4-fs (loop0): 1 truncate cleaned up [ 102.921743][ T4857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.939726][ T4857] EXT4-fs (loop0): unmounting filesystem. [ 103.244396][ T4864] loop1: detected capacity change from 0 to 512 [ 103.268150][ T4864] EXT4-fs: Ignoring removed nobh option [ 103.329934][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.169: corrupted inode contents [ 103.406139][ T4864] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #3: comm syz.1.169: mark_inode_dirty error [ 103.552422][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.169: corrupted inode contents [ 103.605651][ T4864] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.169: mark_inode_dirty error [ 103.627235][ T4864] Quota error (device loop1): write_blk: dquota write failed [ 103.634866][ T4864] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.649262][ T4864] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.169: Failed to acquire dquot type 0 [ 103.678400][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.169: corrupted inode contents [ 103.741639][ T4864] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #16: comm syz.1.169: mark_inode_dirty error [ 103.814719][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.169: corrupted inode contents [ 103.879553][ T4864] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.169: mark_inode_dirty error [ 103.904256][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.169: corrupted inode contents [ 103.929283][ T4885] loop3: detected capacity change from 0 to 128 [ 103.940204][ T4864] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 103.976542][ T4864] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.169: corrupted inode contents [ 104.009857][ T4864] EXT4-fs error (device loop1): ext4_truncate:4312: inode #16: comm syz.1.169: mark_inode_dirty error [ 104.024043][ T4864] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 104.044439][ T4864] EXT4-fs (loop1): 1 truncate cleaned up [ 104.051964][ T4889] program syz.3.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.053080][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.071515][ T4864] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.151877][ T4864] device wlan0 entered promiscuous mode [ 104.178559][ T4863] device wlan0 left promiscuous mode [ 104.234859][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 104.434417][ T4532] kworker/u4:11: attempt to access beyond end of device [ 104.434417][ T4532] loop3: rw=1, sector=145, nr_sectors = 408 limit=128 [ 104.548394][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 104.581212][ T4907] Zero length message leads to an empty skb [ 105.048902][ T4918] Falling back ldisc for ptm1. [ 105.071040][ T4923] loop3: detected capacity change from 0 to 512 [ 105.090278][ T4923] EXT4-fs: Ignoring removed nobh option [ 105.232512][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.193: corrupted inode contents [ 105.266945][ T27] audit: type=1326 audit(1757065978.712:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 105.317032][ T27] audit: type=1326 audit(1757065978.712:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 105.332893][ T4929] loop1: detected capacity change from 0 to 512 [ 105.343225][ T4923] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #3: comm syz.3.193: mark_inode_dirty error [ 105.359529][ T27] audit: type=1326 audit(1757065978.712:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 105.373446][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.193: corrupted inode contents [ 105.384799][ T27] audit: type=1326 audit(1757065978.712:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 105.418557][ T4929] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.535565][ T4923] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.193: mark_inode_dirty error [ 105.577498][ T27] audit: type=1326 audit(1757065978.712:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 105.598882][ T4936] loop2: detected capacity change from 0 to 128 [ 105.637266][ T4923] Quota error (device loop3): write_blk: dquota write failed [ 105.645045][ T4923] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.193: Failed to acquire dquot type 0 [ 105.681621][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.193: corrupted inode contents [ 105.710206][ T4923] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #16: comm syz.3.193: mark_inode_dirty error [ 105.734968][ T4936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.744926][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.193: corrupted inode contents [ 105.765219][ T4923] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.193: mark_inode_dirty error [ 105.779653][ T4936] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.790268][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.193: corrupted inode contents [ 105.811169][ T4944] loop0: detected capacity change from 0 to 512 [ 105.831861][ T4923] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 105.890308][ T4923] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.193: corrupted inode contents [ 105.953554][ T4944] EXT4-fs (loop0): 1 orphan inode deleted [ 105.985685][ T4923] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.193: mark_inode_dirty error [ 105.985953][ T4531] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:10: Failed to release dquot type 1 [ 106.019199][ T4944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.042174][ T4944] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.085823][ T4923] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 106.111028][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 106.137423][ T4923] EXT4-fs (loop3): 1 truncate cleaned up [ 106.177540][ T4923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.226009][ T4923] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.257193][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 106.334525][ T4923] device wlan0 entered promiscuous mode [ 106.380900][ T4921] device wlan0 left promiscuous mode [ 106.536227][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 106.597132][ T4965] loop1: detected capacity change from 0 to 1024 [ 106.698057][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.804979][ T4976] device pim6reg1 entered promiscuous mode [ 107.001652][ T4965] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.206: Allocating blocks 449-513 which overlap fs metadata [ 107.124277][ T4984] loop2: detected capacity change from 0 to 512 [ 107.173907][ T4984] EXT4-fs: Ignoring removed orlov option [ 107.232700][ T4984] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 107.292725][ T4984] EXT4-fs (loop2): 1 truncate cleaned up [ 107.305817][ T4984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.449330][ T4989] loop3: detected capacity change from 0 to 2048 [ 107.480712][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 107.522879][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.721373][ T4963] EXT4-fs (loop1): pa ffff888074ec6540: logic 48, phys. 177, len 21 [ 107.729996][ T4963] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 107.803336][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 108.126120][ T5009] loop3: detected capacity change from 0 to 512 [ 108.156085][ T5013] loop0: detected capacity change from 0 to 512 [ 108.181607][ T5009] EXT4-fs: Ignoring removed nobh option [ 108.270412][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.218: corrupted inode contents [ 108.340362][ T5009] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #3: comm syz.3.218: mark_inode_dirty error [ 108.353642][ T5013] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 108.381422][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 108.401577][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #3: comm syz.3.218: corrupted inode contents [ 108.444396][ T5009] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.218: mark_inode_dirty error [ 108.509612][ T5009] __quota_error: 85 callbacks suppressed [ 108.509631][ T5009] Quota error (device loop3): write_blk: dquota write failed [ 108.561281][ T5009] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.592603][ T5009] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.218: Failed to acquire dquot type 0 [ 108.619204][ T27] audit: type=1326 audit(1757065982.062:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 108.643869][ T5027] loop1: detected capacity change from 0 to 512 [ 108.690968][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.218: corrupted inode contents [ 108.718004][ T5027] EXT4-fs: Ignoring removed orlov option [ 108.744482][ T5009] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #16: comm syz.3.218: mark_inode_dirty error [ 108.775250][ T27] audit: type=1326 audit(1757065982.062:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 108.781391][ T5027] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.844222][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.218: corrupted inode contents [ 108.879082][ T27] audit: type=1326 audit(1757065982.062:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 108.907305][ T5009] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.218: mark_inode_dirty error [ 108.929036][ T5031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.949752][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.218: corrupted inode contents [ 108.955052][ T27] audit: type=1326 audit(1757065982.062:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 109.030279][ T27] audit: type=1326 audit(1757065982.062:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 109.032132][ T5009] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 109.070532][ T27] audit: type=1326 audit(1757065982.072:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 109.100425][ T5027] EXT4-fs (loop1): 1 truncate cleaned up [ 109.107489][ T5027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.189959][ T5009] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #16: comm syz.3.218: corrupted inode contents [ 109.210276][ T27] audit: type=1326 audit(1757065982.072:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 109.339364][ T5009] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.218: mark_inode_dirty error [ 109.391681][ T27] audit: type=1326 audit(1757065982.072:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc678ebe9 code=0x7ffc0000 [ 109.439635][ T5009] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 109.491032][ T5009] EXT4-fs (loop3): 1 truncate cleaned up [ 109.515022][ T5009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.574175][ T5009] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.905441][ T5044] rdma_rxe: rxe_register_device failed with error -23 [ 109.912530][ T5044] rdma_rxe: failed to add lo [ 109.981979][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 109.988694][ T5031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.044150][ T5009] device wlan0 entered promiscuous mode [ 110.052091][ T5009] device wlan0 left promiscuous mode [ 110.187787][ T5031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.254998][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 110.385459][ T5031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.622074][ T5031] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.679287][ T5031] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.726167][ T5031] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.782741][ T5031] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.082286][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 111.203734][ T5089] loop1: detected capacity change from 0 to 512 [ 111.244567][ T5089] EXT4-fs: Ignoring removed orlov option [ 111.289381][ T5089] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 111.330047][ T5095] loop2: detected capacity change from 0 to 512 [ 111.351316][ T5095] EXT4-fs: Ignoring removed nobh option [ 111.369041][ T5089] EXT4-fs (loop1): 1 truncate cleaned up [ 111.402780][ T5089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.432066][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.245: corrupted inode contents [ 111.464851][ T5095] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #3: comm syz.2.245: mark_inode_dirty error [ 111.494342][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.245: corrupted inode contents [ 111.551562][ T5095] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.245: mark_inode_dirty error [ 111.608837][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 111.620643][ T5095] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.245: Failed to acquire dquot type 0 [ 111.663852][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.245: corrupted inode contents [ 111.748032][ T5095] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #16: comm syz.2.245: mark_inode_dirty error [ 111.761668][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.245: corrupted inode contents [ 111.777242][ T5095] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.245: mark_inode_dirty error [ 111.789069][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.245: corrupted inode contents [ 111.814344][ T5095] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 111.833695][ T5095] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.245: corrupted inode contents [ 111.856482][ T5095] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.245: mark_inode_dirty error [ 111.881671][ T5095] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 111.899208][ T5106] lo speed is unknown, defaulting to 1000 [ 111.907457][ T5095] EXT4-fs (loop2): 1 truncate cleaned up [ 111.913156][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.936383][ T5095] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.992791][ T5095] device wlan0 entered promiscuous mode [ 112.006704][ T5095] device wlan0 left promiscuous mode [ 112.130899][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 112.957619][ T5120] lo speed is unknown, defaulting to 1000 [ 113.542268][ T5107] syz.1.248 (5107) used greatest stack depth: 18176 bytes left [ 113.623233][ T5127] loop0: detected capacity change from 0 to 128 [ 113.775937][ T5131] program syz.0.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.893069][ T5134] loop3: detected capacity change from 0 to 512 [ 113.903118][ T5134] EXT4-fs: Ignoring removed oldalloc option [ 113.922883][ T27] kauditd_printk_skb: 90 callbacks suppressed [ 113.922898][ T27] audit: type=1326 audit(1757065987.362:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 113.962552][ T5137] loop2: detected capacity change from 0 to 512 [ 113.992633][ T5134] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.257: Parent and EA inode have the same ino 15 [ 113.996769][ T5137] EXT4-fs: Ignoring removed orlov option [ 114.012349][ T27] audit: type=1326 audit(1757065987.362:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.036355][ T27] audit: type=1326 audit(1757065987.362:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.037050][ T5137] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 114.058968][ T27] audit: type=1326 audit(1757065987.362:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.096286][ T27] audit: type=1326 audit(1757065987.362:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.118443][ T5134] EXT4-fs (loop3): 1 orphan inode deleted [ 114.124412][ T5134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.144444][ T27] audit: type=1326 audit(1757065987.362:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.171235][ T5137] EXT4-fs (loop2): 1 truncate cleaned up [ 114.229805][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.259741][ T27] audit: type=1326 audit(1757065987.362:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.289549][ T27] audit: type=1326 audit(1757065987.362:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.312732][ T27] audit: type=1326 audit(1757065987.362:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 114.342241][ T4362] kworker/u4:7: attempt to access beyond end of device [ 114.342241][ T4362] loop0: rw=1, sector=145, nr_sectors = 480 limit=128 [ 114.353660][ T27] audit: type=1326 audit(1757065987.362:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fda1578ec23 code=0x7ffc0000 [ 114.385540][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 114.526449][ T5146] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 114.644132][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 114.718397][ T5150] bridge: RTM_NEWNEIGH with invalid ether address [ 114.912706][ T5158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 115.314971][ T5174] loop0: detected capacity change from 0 to 512 [ 115.341821][ T5174] EXT4-fs: Ignoring removed orlov option [ 115.381310][ T5174] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 115.565860][ T5174] EXT4-fs (loop0): 1 truncate cleaned up [ 115.587743][ T5174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.719118][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 116.037711][ T5196] bridge: RTM_NEWNEIGH with invalid ether address [ 116.648274][ T5215] loop4: detected capacity change from 0 to 512 [ 116.681107][ T5215] EXT4-fs: Ignoring removed orlov option [ 116.686753][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 116.701861][ T5215] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.784072][ T5215] EXT4-fs (loop4): 1 truncate cleaned up [ 116.837616][ T5215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.880795][ T5221] loop2: detected capacity change from 0 to 512 [ 116.915373][ T5223] loop1: detected capacity change from 0 to 512 [ 116.990110][ T5223] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 117.011592][ T5223] EXT4-fs (loop1): invalid journal inode [ 117.023515][ T5221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.025338][ T5223] EXT4-fs (loop1): can't get journal size [ 117.064495][ T5221] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.083631][ T5223] EXT4-fs (loop1): 1 truncate cleaned up [ 117.091045][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 117.123853][ T5223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.286142][ T5223] loop1: detected capacity change from 512 to 0 [ 117.384401][ T5241] bridge: RTM_NEWNEIGH with invalid ether address [ 117.414969][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 117.429592][ C1] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 117.439230][ T4268] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 117.505182][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 117.517564][ T4268] EXT4-fs error (device loop1): ext4_get_inode_loc:4645: inode #2: block 5: comm syz-executor: unable to read itable block [ 117.550372][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 117.585550][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 117.618363][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 117.627986][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 117.638194][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 117.646521][ T4268] EXT4-fs (loop1): I/O error while writing superblock [ 117.653338][ T4268] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: IO failure [ 117.705319][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 117.720215][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 117.729920][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 117.739439][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 117.748438][ T4268] EXT4-fs (loop1): I/O error while writing superblock [ 117.757390][ T4268] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 117.786032][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 117.955819][ T5139] EXT4-fs error (device loop1): ext4_check_bdev_write_error:218: comm ext4lazyinit: Error while async write back metadata [ 117.981715][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 117.991326][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.000852][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.008267][ T5260] loop2: detected capacity change from 0 to 128 [ 118.016843][ T4268] EXT4-fs (loop1): I/O error while writing superblock [ 118.029080][ T5139] EXT4-fs (loop1): previous I/O error to superblock detected [ 118.045982][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.125117][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 118.134708][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.145202][ T5139] EXT4-fs (loop1): I/O error while writing superblock [ 118.163832][ T9] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4630: inode #2: block 5: comm kworker/u4:0: unable to read itable block [ 118.220235][ T4532] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.239744][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.248892][ T9] EXT4-fs (loop1): I/O error while writing superblock [ 118.263467][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 118.267356][ T5265] loop3: detected capacity change from 0 to 512 [ 118.301575][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 118.311439][ T5265] EXT4-fs: Ignoring removed orlov option [ 118.319791][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 118.328261][ T4268] EXT4-fs (loop1): I/O error while writing superblock [ 118.354201][ T5265] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 118.417423][ T5265] EXT4-fs (loop3): 1 truncate cleaned up [ 118.469409][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.637859][ T5271] loop4: detected capacity change from 0 to 512 [ 118.716656][ T5271] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.723877][ T5271] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.304: bad orphan inode 13 [ 118.763769][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 118.888389][ T5271] ext4_test_bit(bit=12, block=18) = 1 [ 118.889546][ T5275] loop2: detected capacity change from 0 to 128 [ 118.893820][ T5271] is_bad_inode(inode)=0 [ 118.942351][ T4465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.001077][ T5271] NEXT_ORPHAN(inode)=2130706432 [ 119.007673][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.016294][ T5271] max_ino=32 [ 119.019548][ T5271] i_nlink=1 [ 119.023401][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.056473][ T5275] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.181535][ T4465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.207592][ T5271] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 119.271139][ T5271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.304: bg 0: block 248: padding at end of block bitmap is not set [ 119.374510][ T5271] __quota_error: 132 callbacks suppressed [ 119.374529][ T5271] Quota error (device loop4): write_blk: dquota write failed [ 119.473461][ T5271] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 119.484144][ T5271] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.304: Failed to acquire dquot type 1 [ 119.546414][ T5271] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.589111][ T4465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.748388][ T4465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.823363][ T4276] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 119.851820][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 119.862411][ T4276] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 120.534835][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.556425][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.565344][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.573180][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.582837][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.592926][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.866251][ T5308] lo speed is unknown, defaulting to 1000 [ 121.845864][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.863247][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.872531][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.887881][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.896214][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.903504][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.222282][ T5327] lo speed is unknown, defaulting to 1000 [ 122.447891][ T5308] chnl_net:caif_netlink_parms(): no params data found [ 122.663390][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.681499][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.689416][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 122.738152][ T5308] device bridge_slave_0 entered promiscuous mode [ 122.770742][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.790547][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.799137][ T5308] device bridge_slave_1 entered promiscuous mode [ 122.823965][ T4465] device hsr_slave_0 left promiscuous mode [ 122.850788][ T4465] device hsr_slave_1 left promiscuous mode [ 122.865032][ T4465] device bridge_slave_1 left promiscuous mode [ 122.886489][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.929595][ T4465] device bridge_slave_0 left promiscuous mode [ 122.951068][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.037480][ T4465] device veth1_macvtap left promiscuous mode [ 123.052203][ T4465] device veth0_macvtap left promiscuous mode [ 123.067407][ T4465] device veth1_vlan left promiscuous mode [ 123.080520][ T4465] device veth0_vlan left promiscuous mode [ 123.957183][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 124.765490][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 125.239681][ T4465] team0 (unregistering): Port device team_slave_1 removed [ 125.312123][ T4465] team0 (unregistering): Port device team_slave_0 removed [ 125.350905][ T4465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.035224][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 126.082960][ T4465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.152107][ T5392] loop2: detected capacity change from 0 to 128 [ 126.172363][ T5392] EXT4-fs: Ignoring removed nobh option [ 126.248609][ T5392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.262673][ T5392] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.331998][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 126.611069][ T4465] bond0 (unregistering): Released all slaves [ 126.756571][ T5390] lo speed is unknown, defaulting to 1000 [ 126.763603][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.782699][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.852862][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 126.912708][ T5308] team0: Port device team_slave_0 added [ 126.963678][ T5308] team0: Port device team_slave_1 added [ 127.118471][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.134247][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.221637][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.321583][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.333619][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.364311][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.514675][ T5308] device hsr_slave_0 entered promiscuous mode [ 127.573350][ T5308] device hsr_slave_1 entered promiscuous mode [ 127.586864][ T5308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.660011][ T5308] Cannot create hsr debugfs directory [ 127.693621][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 127.788714][ T5420] syz.2.345[5420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.788826][ T5420] syz.2.345[5420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.078501][ T27] audit: type=1326 audit(1757066001.522:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.115479][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 128.187954][ T27] audit: type=1326 audit(1757066001.572:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.219096][ T27] audit: type=1326 audit(1757066001.572:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.255660][ T27] audit: type=1326 audit(1757066001.572:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.300554][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.305414][ T27] audit: type=1326 audit(1757066001.572:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.321566][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.354669][ T27] audit: type=1326 audit(1757066001.572:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.371848][ T5327] device bridge_slave_0 entered promiscuous mode [ 128.521804][ T27] audit: type=1326 audit(1757066001.572:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.544162][ T27] audit: type=1326 audit(1757066001.572:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.553365][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.574039][ T27] audit: type=1326 audit(1757066001.572:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1578ebe9 code=0x7ffc0000 [ 128.597127][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.605748][ T5327] device bridge_slave_1 entered promiscuous mode [ 128.686412][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.754700][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.796690][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.915198][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 128.927074][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.977549][ T5308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.056896][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.078626][ T5308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.098735][ T5308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.133417][ T5327] team0: Port device team_slave_0 added [ 129.152732][ T5308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.171186][ T5441] netlink: 176 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.198847][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.218820][ T5327] team0: Port device team_slave_1 added [ 129.233047][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.307187][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.321236][ T5446] loop3: detected capacity change from 0 to 1024 [ 129.339058][ T5446] EXT4-fs: Ignoring removed nobh option [ 129.356913][ T5446] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.410665][ T5446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.446068][ T5446] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 129.624378][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.635308][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.712756][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.774498][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.794184][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.913021][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.934440][ T27] audit: type=1326 audit(1757066003.372:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5471 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 129.984421][ T5468] loop2: detected capacity change from 0 to 2048 [ 130.178765][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.195440][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 130.684075][ T5480] lo speed is unknown, defaulting to 1000 [ 131.189797][ T5327] device hsr_slave_0 entered promiscuous mode [ 131.256816][ T5468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.355'. [ 131.308499][ T5327] device hsr_slave_1 entered promiscuous mode [ 131.317532][ T5490] random: crng reseeded on system resumption [ 131.335291][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.375415][ T5327] Cannot create hsr debugfs directory [ 131.546177][ T5468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.355'. [ 132.356838][ T5496] lo speed is unknown, defaulting to 1000 [ 132.411843][ T4280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 132.448116][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.506107][ T4280] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 132.563135][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 132.745745][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.759331][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766224][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904169][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.930821][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.984533][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.998654][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.012995][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.020183][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.028548][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.037676][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.056999][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.064150][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.072527][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.088792][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.149094][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.180345][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.204422][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.292150][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.313416][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.333455][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.513861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.536168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.545346][ T5514] netlink: 256 bytes leftover after parsing attributes in process `syz.3.365'. [ 133.584426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.602095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.656425][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.923579][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'. [ 134.027325][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 134.027340][ T27] audit: type=1326 audit(1757066007.472:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.099548][ T5327] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.185523][ T27] audit: type=1326 audit(1757066007.512:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.235990][ T5528] loop3: detected capacity change from 0 to 512 [ 134.278207][ T27] audit: type=1326 audit(1757066007.512:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.303033][ T5528] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.366: error while reading EA inode 32 err=-116 [ 134.321727][ T5528] EXT4-fs (loop3): Remounting filesystem read-only [ 134.322361][ T5327] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.329049][ T5528] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.366: error while reading EA inode 32 err=-116 [ 134.356437][ T5528] EXT4-fs (loop3): Remounting filesystem read-only [ 134.394331][ T5528] EXT4-fs (loop3): 1 orphan inode deleted [ 134.420361][ T5327] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.451012][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.495312][ T27] audit: type=1326 audit(1757066007.512:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.511662][ T5327] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.551054][ T5528] EXT4-fs (loop3): unmounting filesystem. [ 134.591260][ T27] audit: type=1326 audit(134.034:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.619578][ T27] audit: type=1326 audit(134.034:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.680400][ T27] audit: type=1326 audit(134.034:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.721924][ T27] audit: type=1326 audit(134.034:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.751062][ T27] audit: type=1326 audit(134.034:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.783026][ T27] audit: type=1326 audit(134.034:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 134.812511][ T5519] lo speed is unknown, defaulting to 1000 [ 135.340607][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.351288][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.436532][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.567973][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.648135][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.675706][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.689113][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.722166][ T33] device hsr_slave_0 left promiscuous mode [ 135.736485][ T33] device hsr_slave_1 left promiscuous mode [ 135.746181][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.753723][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.782372][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.792505][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.978007][ T33] device bridge_slave_1 left promiscuous mode [ 135.984796][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.997659][ T33] device bridge_slave_0 left promiscuous mode [ 136.004143][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.039632][ T5570] loop0: detected capacity change from 0 to 2048 [ 136.046791][ T33] device veth1_macvtap left promiscuous mode [ 136.052959][ T33] device veth0_macvtap left promiscuous mode [ 136.059331][ T33] device veth1_vlan left promiscuous mode [ 136.069408][ T33] device veth0_vlan left promiscuous mode [ 136.779270][ T5570] Alternate GPT is invalid, using primary GPT. [ 136.788563][ T5570] loop0: p2 p3 p7 [ 137.092502][ T4429] udevd[4429]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 137.100696][ T4434] udevd[4434]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 137.108551][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 137.531028][ T5585] loop0: detected capacity change from 0 to 128 [ 137.561312][ T5585] FAT-fs (loop0): Directory bread(block 32) failed [ 137.568091][ T5585] FAT-fs (loop0): Directory bread(block 33) failed [ 137.574856][ T5585] FAT-fs (loop0): Directory bread(block 34) failed [ 137.590416][ T5585] FAT-fs (loop0): Directory bread(block 35) failed [ 137.598763][ T5585] FAT-fs (loop0): Directory bread(block 36) failed [ 137.612524][ T5585] FAT-fs (loop0): Directory bread(block 37) failed [ 137.620814][ T5585] FAT-fs (loop0): Directory bread(block 38) failed [ 137.629520][ T33] team0 (unregistering): Port device team_slave_1 removed [ 137.629780][ T5585] FAT-fs (loop0): Directory bread(block 39) failed [ 137.644624][ T5585] FAT-fs (loop0): Directory bread(block 40) failed [ 137.651743][ T5585] FAT-fs (loop0): Directory bread(block 41) failed [ 137.704130][ T33] team0 (unregistering): Port device team_slave_0 removed [ 137.765414][ T5585] syz.0.384: attempt to access beyond end of device [ 137.765414][ T5585] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.792094][ T5585] Buffer I/O error on dev loop0, logical block 1028, async page read [ 137.813798][ T5585] syz.0.384: attempt to access beyond end of device [ 137.813798][ T5585] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.828370][ T5585] Buffer I/O error on dev loop0, logical block 41991, async page read [ 137.837982][ T5585] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.839324][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.846224][ T5585] FAT-fs (loop0): Filesystem has been set read-only [ 137.861468][ T5585] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.872228][ T5585] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.881325][ T5585] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.890078][ T5585] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.905678][ T5584] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.907426][ T5585] syz.0.384: attempt to access beyond end of device [ 137.907426][ T5585] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.913690][ T5584] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 137.933656][ T5585] Buffer I/O error on dev loop0, logical block 1028, async page read [ 137.943354][ T5585] syz.0.384: attempt to access beyond end of device [ 137.943354][ T5585] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.957672][ T5585] Buffer I/O error on dev loop0, logical block 41991, async page read [ 137.973407][ T5584] syz.0.384: attempt to access beyond end of device [ 137.973407][ T5584] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.987831][ T5584] Buffer I/O error on dev loop0, logical block 1028, async page read [ 137.997850][ T5584] syz.0.384: attempt to access beyond end of device [ 137.997850][ T5584] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 138.003180][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.012493][ T5584] Buffer I/O error on dev loop0, logical block 41991, async page read [ 138.029273][ T5584] syz.0.384: attempt to access beyond end of device [ 138.029273][ T5584] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 138.047070][ T5584] Buffer I/O error on dev loop0, logical block 1028, async page read [ 138.056977][ T5584] syz.0.384: attempt to access beyond end of device [ 138.056977][ T5584] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 138.070455][ T5584] Buffer I/O error on dev loop0, logical block 41991, async page read [ 138.080614][ T5585] syz.0.384: attempt to access beyond end of device [ 138.080614][ T5585] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 138.082402][ T5586] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 138.094602][ T5585] Buffer I/O error on dev loop0, logical block 1028, async page read [ 138.110731][ T5585] syz.0.384: attempt to access beyond end of device [ 138.110731][ T5585] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 138.124192][ T5585] Buffer I/O error on dev loop0, logical block 41991, async page read [ 138.153103][ T5586] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 138.161568][ T5586] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 138.176097][ T5586] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000a009) [ 138.719226][ T33] bond0 (unregistering): Released all slaves [ 138.814853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.845000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.876534][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.883689][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.912563][ T5572] lo speed is unknown, defaulting to 1000 [ 138.962796][ T5327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.987721][ T5327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.067829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.091014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.126006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.153251][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.160494][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.222216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.241263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.258503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.274443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.286447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.306202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.342256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.359094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.381435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.394479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.426215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.442245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.472401][ T5608] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 140.006482][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.046054][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.108584][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.139998][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.178765][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.196433][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.213897][ T5308] device veth0_vlan entered promiscuous mode [ 140.250488][ T5308] device veth1_vlan entered promiscuous mode [ 140.397962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.446561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.481879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.516164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.555482][ T5308] device veth0_macvtap entered promiscuous mode [ 140.578417][ T5308] device veth1_macvtap entered promiscuous mode [ 140.635483][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.663665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.681793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.692695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.761622][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.806085][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.829204][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 140.829219][ T27] audit: type=1326 audit(141.781:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 140.867195][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.878204][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.888171][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.899306][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.910930][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.929302][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.012898][ T27] audit: type=1326 audit(141.811:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 141.222601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.468116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.607819][ T27] audit: type=1326 audit(141.811:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 141.655164][ T27] audit: type=1326 audit(141.811:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 141.756376][ T27] audit: type=1326 audit(141.811:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 141.794132][ T5642] lo speed is unknown, defaulting to 1000 [ 141.891669][ T27] audit: type=1326 audit(141.811:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 142.036629][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.054869][ T27] audit: type=1326 audit(141.811:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 142.081343][ T27] audit: type=1326 audit(141.811:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 142.117914][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.132009][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.155153][ T27] audit: type=1326 audit(141.811:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 142.179956][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.184209][ T5644] 9pnet: Could not find request transport: 0xffffffffffffffff [ 142.220126][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.245269][ T27] audit: type=1326 audit(141.811:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 142.284494][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.350768][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.414575][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.437219][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.496630][ T5308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.524437][ T5308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.549966][ T5308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.569470][ T5308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.804049][ T5669] syz.0.406[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.804157][ T5669] syz.0.406[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.846157][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.895269][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.911397][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 142.965310][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.004394][ T4464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.073630][ T4464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.351332][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.185048][ T5684] lo speed is unknown, defaulting to 1000 [ 144.673311][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.696307][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.790576][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.857113][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.882877][ T5703] loop0: detected capacity change from 0 to 512 [ 144.906164][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.944496][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.968490][ T5703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.033411][ T5327] device veth0_vlan entered promiscuous mode [ 145.112330][ T5327] device veth1_vlan entered promiscuous mode [ 145.416149][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 145.875394][ T5721] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 145.885575][ T5721] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 145.895224][ T5721] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.909140][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.937574][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.014348][ T5327] device veth0_macvtap entered promiscuous mode [ 146.053996][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 146.089143][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.105857][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 146.105872][ T27] audit: type=1326 audit(147.051:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 146.120823][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.168319][ T27] audit: type=1326 audit(147.051:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 146.285804][ T27] audit: type=1326 audit(147.091:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 146.299594][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.455492][ T27] audit: type=1326 audit(147.091:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 146.477478][ T27] audit: type=1326 audit(147.091:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 146.511795][ T5327] device veth1_macvtap entered promiscuous mode [ 147.300127][ T27] audit: type=1326 audit(147.151:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 147.308241][ T5739] lo speed is unknown, defaulting to 1000 [ 147.501752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.518223][ T5733] loop5: detected capacity change from 0 to 2048 [ 147.519314][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.421'. [ 147.592769][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.616828][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.628490][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.630197][ T5733] EXT4-fs (loop5): failed to initialize system zone (-117) [ 147.639905][ T27] audit: type=1326 audit(147.151:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 147.675148][ T27] audit: type=1326 audit(147.151:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 147.676913][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.715308][ T27] audit: type=1326 audit(147.151:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 147.715452][ T5733] EXT4-fs (loop5): mount failed [ 147.845134][ T27] audit: type=1326 audit(147.161:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bcf8ebe9 code=0x7ffc0000 [ 147.889363][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.939971][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.989588][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.018843][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.049919][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.074640][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.091588][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.141897][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.186496][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.209054][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.233491][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.253522][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.266436][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.277065][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.296340][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.327642][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.356641][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.428'. [ 148.408365][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.449728][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.513266][ T5327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.528844][ T5327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.577204][ T5769] loop5: detected capacity change from 0 to 512 [ 148.583619][ T5327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.594760][ T5327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.612076][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.648513][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.686848][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.728735][ T5762] device bridge_slave_0 left promiscuous mode [ 148.736515][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.739681][ T5769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 148.823036][ T5762] device bridge_slave_1 left promiscuous mode [ 148.855985][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.897544][ T5762] bond0: (slave bond_slave_0): Releasing backup interface [ 148.957078][ T5762] bond0: (slave bond_slave_1): Releasing backup interface [ 149.051319][ T5762] team0: Port device team_slave_0 removed [ 149.076389][ T5762] team0: Port device team_slave_1 removed [ 149.088218][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.096233][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.120085][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.128141][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.813210][ T5767] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 150.823719][ T5308] EXT4-fs (loop5): unmounting filesystem. [ 150.829975][ T5767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.430'. [ 150.841631][ T5767] batman_adv: batadv0: Adding interface: virt_wifi0 [ 150.849466][ T5767] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.876874][ T5767] batman_adv: batadv0: Interface activated: virt_wifi0 [ 150.905192][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 151.078345][ T5781] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 151.096243][ T5781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'. [ 151.140687][ T5787] loop2: detected capacity change from 0 to 512 [ 151.153372][ T5781] team0: Port device geneve0 added [ 151.193139][ T5787] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.437: casefold flag without casefold feature [ 151.298521][ T5787] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.437: couldn't read orphan inode 15 (err -117) [ 151.367632][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.584942][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 151.586239][ T4465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.617917][ T5787] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 151.649524][ T5787] batman_adv: batadv0: Removing interface: virt_wifi0 [ 151.664592][ T4465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.750556][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 151.750571][ T27] audit: type=1326 audit(152.701:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 151.850258][ T27] audit: type=1326 audit(152.741:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 151.897993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.911621][ T27] audit: type=1326 audit(152.741:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 151.943578][ T27] audit: type=1326 audit(152.741:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.021939][ T27] audit: type=1326 audit(152.741:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.070614][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.098721][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.147616][ T27] audit: type=1326 audit(152.741:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.227083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.266329][ T4258] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 152.286575][ T27] audit: type=1326 audit(920.750:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.319944][ T27] audit: type=1326 audit(920.750:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.354552][ T27] audit: type=1326 audit(920.750:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 152.443168][ T4258] usb 1-1: device descriptor read/64, error -71 [ 152.479471][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 153.030486][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 153.158491][ T5816] sd 0:0:1:0: device reset [ 153.256621][ T27] audit: type=1326 audit(920.750:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd498ebe9 code=0x7ffc0000 [ 153.328659][ T4258] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 153.529412][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'. [ 153.595360][ T4258] usb 1-1: device descriptor read/64, error -71 [ 153.757246][ T5837] rdma_rxe: rxe_register_device failed with error -23 [ 153.765889][ T5837] rdma_rxe: failed to add lo [ 154.463097][ T4258] usb usb1-port1: attempt power cycle [ 154.544207][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 154.775579][ T5850] syz.0.452[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.775696][ T5850] syz.0.452[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.849902][ T5835] lo speed is unknown, defaulting to 1000 [ 154.886344][ T5847] loop5: detected capacity change from 0 to 1024 [ 154.962604][ T5847] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.451: Invalid block bitmap block 0 in block_group 0 [ 154.993549][ T5847] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.451: Failed to acquire dquot type 0 [ 155.023277][ T5847] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.451: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.069193][ T5847] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.451: Invalid inode bitmap blk 0 in block_group 0 [ 155.086266][ T4464] EXT4-fs error (device loop5): ext4_release_dquot:6852: comm kworker/u4:8: Failed to release dquot type 0 [ 155.107244][ T5847] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 155.128516][ T5847] EXT4-fs (loop5): 1 orphan inode deleted [ 155.134745][ T5847] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.607499][ T5308] EXT4-fs (loop5): unmounting filesystem. [ 155.848694][ T5864] loop0: detected capacity change from 0 to 512 [ 155.939322][ T5864] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.456: casefold flag without casefold feature [ 155.992443][ T5864] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.456: couldn't read orphan inode 15 (err -117) [ 155.993545][ T5869] loop5: detected capacity change from 0 to 128 [ 156.015376][ T5864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.129723][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 156.161689][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.177561][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.193117][ T5869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 156.205898][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.213580][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.106943][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 157.259267][ T5308] EXT4-fs (loop5): unmounting filesystem. [ 157.513592][ T5892] loop5: detected capacity change from 0 to 128 [ 157.609250][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 157.634374][ T5894] loop2: detected capacity change from 0 to 512 [ 157.657657][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 157.657673][ T27] audit: type=1326 audit(926.903:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 157.799055][ T27] audit: type=1326 audit(926.945:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 157.841584][ T5894] EXT4-fs (loop2): 1 orphan inode deleted [ 157.860056][ T4357] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.885114][ T5894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.953650][ T4357] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:6: Failed to release dquot type 1 [ 157.957816][ T27] audit: type=1326 audit(926.945:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.105074][ T27] audit: type=1326 audit(926.945:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.217421][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 158.222767][ T27] audit: type=1326 audit(926.945:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.297579][ T27] audit: type=1326 audit(926.945:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.386579][ T27] audit: type=1326 audit(926.945:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.500874][ T27] audit: type=1326 audit(926.945:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 158.592173][ T27] audit: type=1326 audit(926.945:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568538ebe9 code=0x7ffc0000 [ 159.204728][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 159.620680][ T5937] loop5: detected capacity change from 0 to 512 [ 159.665098][ T5937] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.476: casefold flag without casefold feature [ 159.741818][ T5937] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.476: couldn't read orphan inode 15 (err -117) [ 159.840401][ T5937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.918310][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.476'. [ 159.936196][ T5947] loop2: detected capacity change from 0 to 512 [ 159.957450][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.969346][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.010768][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.024724][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.116117][ T5947] EXT4-fs (loop2): 1 orphan inode deleted [ 160.145019][ T5947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.407599][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 161.208207][ T5308] EXT4-fs (loop5): unmounting filesystem. [ 161.414105][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.487'. [ 161.817382][ T5993] loop2: detected capacity change from 0 to 512 [ 161.961055][ T5993] EXT4-fs (loop2): 1 orphan inode deleted [ 161.963612][ T5997] loop5: detected capacity change from 0 to 512 [ 161.966924][ T5993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.984947][ T5997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.992267][ T4357] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:6: Failed to release dquot type 1 [ 162.006192][ T5997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.056249][ T5997] EXT4-fs (loop5): 1 truncate cleaned up [ 162.063493][ T5997] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.189807][ T5845] Set syz1 is full, maxelem 65536 reached [ 162.249151][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 162.433720][ T6008] loop2: detected capacity change from 0 to 1024 [ 162.516148][ T6008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.560907][ T27] kauditd_printk_skb: 89 callbacks suppressed [ 162.560923][ T27] audit: type=1800 audit(933.049:833): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 162.601576][ T6019] loop6: detected capacity change from 0 to 512 [ 162.618845][ T6008] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.495: lblock 0 mapped to illegal pblock 0 (length 1) [ 162.675700][ T6019] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.497: casefold flag without casefold feature [ 162.703495][ T6008] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 162.730416][ T6019] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.497: couldn't read orphan inode 15 (err -117) [ 162.736866][ T6020] [ 162.744548][ T6020] ====================================================== [ 162.751572][ T6020] WARNING: possible circular locking dependency detected [ 162.758601][ T6020] syzkaller #0 Not tainted [ 162.763023][ T6020] ------------------------------------------------------ [ 162.770044][ T6020] syz.2.495/6020 is trying to acquire lock: [ 162.775940][ T6020] ffff888076fdb5d8 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xa6/0x120 [ 162.784847][ T6020] [ 162.784847][ T6020] but task is already holding lock: [ 162.792217][ T6020] ffff8880546ade48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_file_read_iter+0x28f/0x650 [ 162.802761][ T6020] [ 162.802761][ T6020] which lock already depends on the new lock. [ 162.802761][ T6020] [ 162.813596][ T6020] [ 162.813596][ T6020] the existing dependency chain (in reverse order) is: [ 162.822611][ T6020] [ 162.822611][ T6020] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 162.831227][ T6020] down_write+0x36/0x60 [ 162.835916][ T6020] process_measurement+0x33c/0x1a10 [ 162.841647][ T6020] ima_file_mmap+0x104/0x150 [ 162.846768][ T6020] __se_sys_remap_file_pages+0x53e/0x770 [ 162.852934][ T6020] do_syscall_64+0x4c/0xa0 [ 162.857878][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.864310][ T6020] [ 162.864310][ T6020] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 162.871875][ T6020] __lock_acquire+0x2cf8/0x7c50 [ 162.877262][ T6020] lock_acquire+0x1b4/0x490 [ 162.882295][ T6020] __might_fault+0xc2/0x120 [ 162.887330][ T6020] iov_iter_zero+0x4d4/0x1280 [ 162.892557][ T6020] __iomap_dio_rw+0x12a6/0x1dd0 [ 162.897948][ T6020] iomap_dio_rw+0x41/0xa0 [ 162.902820][ T6020] ext4_file_read_iter+0x4ef/0x650 [ 162.908461][ T6020] do_iter_read+0x63f/0xb10 [ 162.913682][ T6020] do_preadv+0x1f6/0x330 [ 162.918477][ T6020] do_syscall_64+0x4c/0xa0 [ 162.923422][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.929859][ T6020] [ 162.929859][ T6020] other info that might help us debug this: [ 162.929859][ T6020] [ 162.940092][ T6020] Possible unsafe locking scenario: [ 162.940092][ T6020] [ 162.947540][ T6020] CPU0 CPU1 [ 162.952906][ T6020] ---- ---- [ 162.958359][ T6020] lock(&sb->s_type->i_mutex_key#8); [ 162.963746][ T6020] lock(&mm->mmap_lock); [ 162.970608][ T6020] lock(&sb->s_type->i_mutex_key#8); [ 162.978523][ T6020] lock(&mm->mmap_lock); [ 162.983035][ T6020] [ 162.983035][ T6020] *** DEADLOCK *** [ 162.983035][ T6020] [ 162.991180][ T6020] 1 lock held by syz.2.495/6020: [ 162.996127][ T6020] #0: ffff8880546ade48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_file_read_iter+0x28f/0x650 [ 163.007227][ T6020] [ 163.007227][ T6020] stack backtrace: [ 163.013134][ T6020] CPU: 0 PID: 6020 Comm: syz.2.495 Not tainted syzkaller #0 [ 163.020425][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.030515][ T6020] Call Trace: [ 163.033808][ T6020] [ 163.036752][ T6020] dump_stack_lvl+0x168/0x22e [ 163.041469][ T6020] ? load_image+0x3b0/0x3b0 [ 163.045991][ T6020] ? show_regs_print_info+0x12/0x12 [ 163.051219][ T6020] ? print_circular_bug+0x12b/0x1a0 [ 163.056466][ T6020] check_noncircular+0x274/0x310 [ 163.061417][ T6020] ? add_chain_block+0x940/0x940 [ 163.066367][ T6020] ? lockdep_lock+0xdc/0x1e0 [ 163.071155][ T6020] ? _find_first_zero_bit+0xcf/0x100 [ 163.076468][ T6020] __lock_acquire+0x2cf8/0x7c50 [ 163.081340][ T6020] ? percpu_counter_add_batch+0x13b/0x160 [ 163.087078][ T6020] ? verify_lock_unused+0x140/0x140 [ 163.092291][ T6020] ? ext4_es_lookup_extent+0x443/0xb20 [ 163.097852][ T6020] ? ext4_map_blocks+0x87a/0x1b60 [ 163.102898][ T6020] lock_acquire+0x1b4/0x490 [ 163.107524][ T6020] ? __might_fault+0xa6/0x120 [ 163.112230][ T6020] ? ext4_set_iomap+0x63a/0xa30 [ 163.117099][ T6020] ? __might_sleep+0xd0/0xd0 [ 163.121707][ T6020] ? read_lock_is_recursive+0x10/0x10 [ 163.127097][ T6020] ? ext4_iomap_begin+0x906/0xae0 [ 163.132142][ T6020] ? __might_fault+0xa6/0x120 [ 163.136856][ T6020] __might_fault+0xc2/0x120 [ 163.141380][ T6020] ? __might_fault+0xa6/0x120 [ 163.146076][ T6020] iov_iter_zero+0x4d4/0x1280 [ 163.150776][ T6020] ? copy_page_from_iter+0x100/0x100 [ 163.156076][ T6020] ? rcu_is_watching+0x11/0xa0 [ 163.160855][ T6020] ? iomap_iter+0x9b2/0x1040 [ 163.165465][ T6020] ? blk_start_plug+0x94/0x110 [ 163.170246][ T6020] __iomap_dio_rw+0x12a6/0x1dd0 [ 163.175128][ T6020] ? iomap_dio_complete_work+0x70/0x70 [ 163.180613][ T6020] ? _raw_spin_lock_irq+0xab/0xe0 [ 163.185704][ T6020] ? down_write_killable_nested+0x90/0x90 [ 163.191547][ T6020] iomap_dio_rw+0x41/0xa0 [ 163.195910][ T6020] ext4_file_read_iter+0x4ef/0x650 [ 163.201040][ T6020] do_iter_read+0x63f/0xb10 [ 163.205567][ T6020] ? vfs_iter_read+0xa0/0xa0 [ 163.210181][ T6020] ? __import_iovec+0x315/0x500 [ 163.215056][ T6020] ? import_iovec+0x6f/0xa0 [ 163.219577][ T6020] do_preadv+0x1f6/0x330 [ 163.223839][ T6020] ? do_writev+0x410/0x410 [ 163.228268][ T6020] ? kasan_quarantine_put+0xd4/0x220 [ 163.233666][ T6020] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 163.239662][ T6020] ? lock_chain_count+0x20/0x20 [ 163.244531][ T6020] ? lockdep_hardirqs_on+0x94/0x140 [ 163.249847][ T6020] do_syscall_64+0x4c/0xa0 [ 163.254272][ T6020] ? clear_bhb_loop+0x60/0xb0 [ 163.258959][ T6020] ? clear_bhb_loop+0x60/0xb0 [ 163.263646][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.269563][ T6020] RIP: 0033:0x7fda1578ebe9 [ 163.273995][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.293614][ T6020] RSP: 002b:00007fda1664d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 163.302035][ T6020] RAX: ffffffffffffffda RBX: 00007fda159c6090 RCX: 00007fda1578ebe9 [ 163.310016][ T6020] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 163.318012][ T6020] RBP: 00007fda15811e19 R08: 0000000000000800 R09: 0000000000000000 [ 163.325991][ T6020] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 163.333966][ T6020] R13: 00007fda159c6128 R14: 00007fda159c6090 R15: 00007ffc2ff448a8 [ 163.341973][ T6020] [ 163.386021][ T6019] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 163.396629][ T5308] EXT4-fs (loop5): unmounting filesystem. [ 163.671450][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 163.673504][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 163.682653][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.708459][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.728750][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.737201][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.913785][ T5327] EXT4-fs (loop6): unmounting filesystem. crond[4012]: time disparity of -29284417 minutes detected