last executing test programs: 9m31.903798197s ago: executing program 4 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) capset(0x0, &(0x7f0000000100)={0x0, 0xffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 9m31.64467871s ago: executing program 4 (id=462): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 9m28.365981325s ago: executing program 4 (id=464): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)=0x485) 9m27.606036743s ago: executing program 4 (id=465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 9m26.96600117s ago: executing program 4 (id=472): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9m25.344978687s ago: executing program 1 (id=478): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x5}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000240)=0xc) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000002c0)={'\x00', 0xf, 0xad5c, 0x5, 0x4, 0x8, r5}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f00000001c0)={0xce, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffe, 0x57, 0x8, 0x61, 0x200002000001, 0x1, 0x8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m24.955189211s ago: executing program 1 (id=480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r1, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x38}}, 0x4080) 9m24.828655143s ago: executing program 1 (id=481): socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x80000001, 0x6, 0x0, 0x500, 0x80000006, 0x1110022}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) 9m24.452522407s ago: executing program 1 (id=482): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 9m23.815817334s ago: executing program 1 (id=486): mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}, {0x0}], 0x2}, 0x102) 9m23.22994091s ago: executing program 4 (id=489): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d1, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r0, 0x20, 0x4000, 0x3000000) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64], 0x0, 0x198, &(0x7f0000000440)="$eJzs0b9r1HAYx/H38/3mcndC1aviUMFWLMYcSi8pODgFJ4cLOAgieGg4Y1u8CtfcYEuLt7iI2n9BB9FRBZ1EFJzFQXDwx9JNvKE4iEONxHwP/B/8voZ8eJ48+fVkMetnVWBne71LxF+a3bxHcIBpKXtKlfnC1N9MbpbBaVPfMfnY5FS2unYt6fVSODVDY9wQc/rHTLUB45mV7CkHFHUhQj5ur3cTuRyTRyyrKzGNNs276A59/x5TzgT7L6HJPbe4UV+8NuyZG9SYy1bXTiwtJwvpQno9DOdP3qTVwrz/c8S/LYr7bODHVGPq/gaVDrcO7yon/EX1RUtzhNth850+duT4COV/J0d47Y2ofnZc1DmOUrtYfFCdfcIDdMxsm70Kh6tLvbR1BjmrnkngfHB+VhS1oda1Lr/z/IKSX+6j6PxOngdbVLyAsBkwX6yGSSr8a+sr0/KyeMp4r86wOD4x1UEO8dDlRjIYrAQuvBUvJhxC2IAJJnmDipktfjCvzDUm+CRYlmVZlmVZlmVZ/40/AQAA//97xVlR") 9m22.578399067s ago: executing program 32 (id=489): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d1, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r0, 0x20, 0x4000, 0x3000000) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64], 0x0, 0x198, &(0x7f0000000440)="$eJzs0b9r1HAYx/H38/3mcndC1aviUMFWLMYcSi8pODgFJ4cLOAgieGg4Y1u8CtfcYEuLt7iI2n9BB9FRBZ1EFJzFQXDwx9JNvKE4iEONxHwP/B/8voZ8eJ48+fVkMetnVWBne71LxF+a3bxHcIBpKXtKlfnC1N9MbpbBaVPfMfnY5FS2unYt6fVSODVDY9wQc/rHTLUB45mV7CkHFHUhQj5ur3cTuRyTRyyrKzGNNs276A59/x5TzgT7L6HJPbe4UV+8NuyZG9SYy1bXTiwtJwvpQno9DOdP3qTVwrz/c8S/LYr7bODHVGPq/gaVDrcO7yon/EX1RUtzhNth850+duT4COV/J0d47Y2ofnZc1DmOUrtYfFCdfcIDdMxsm70Kh6tLvbR1BjmrnkngfHB+VhS1oda1Lr/z/IKSX+6j6PxOngdbVLyAsBkwX6yGSSr8a+sr0/KyeMp4r86wOD4x1UEO8dDlRjIYrAQuvBUvJhxC2IAJJnmDipktfjCvzDUm+CRYlmVZlmVZlmVZ/40/AQAA//97xVlR") 9m22.506668878s ago: executing program 1 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) close(r0) 9m22.452817208s ago: executing program 33 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) close(r0) 9m20.895223705s ago: executing program 2 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9f50, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m18.433637211s ago: executing program 2 (id=502): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}, {0x0}], 0x2}, 0x102) 9m17.883088117s ago: executing program 2 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 9m17.508025001s ago: executing program 2 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 9m16.933004387s ago: executing program 2 (id=508): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) 9m13.91122s ago: executing program 2 (id=514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @ptr]}, {0x0, [0x5f, 0x5e]}}, &(0x7f0000000100)=""/4084, 0x3c, 0xff4, 0x1}, 0x28) 9m13.585273473s ago: executing program 34 (id=514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @ptr]}, {0x0, [0x5f, 0x5e]}}, &(0x7f0000000100)=""/4084, 0x3c, 0xff4, 0x1}, 0x28) 8m28.791221731s ago: executing program 6 (id=500): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r1, r0, 0x0, 0x40001) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, 0x0, 0x0) 8m28.693765602s ago: executing program 7 (id=516): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 8m26.405705386s ago: executing program 7 (id=611): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x18, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x100000008]}) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 8m26.300360197s ago: executing program 6 (id=614): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m24.036557982s ago: executing program 6 (id=621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 8m22.476680708s ago: executing program 35 (id=621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x2400, 0x0, 0x20}, 0x18) 8m22.29109984s ago: executing program 7 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x12103) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x24008000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010103, 0x4e23, 0x2, 0x0, 0xfffd, 0x2, 0x0, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc, 0x6e6bb0, 0x1, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0x2, @in6=@empty, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c}}, 0xe8) 8m21.752079766s ago: executing program 36 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x12103) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x24008000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010103, 0x4e23, 0x2, 0x0, 0xfffd, 0x2, 0x0, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc, 0x6e6bb0, 0x1, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0x2, @in6=@empty, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c}}, 0xe8) 10.104621552s ago: executing program 0 (id=2529): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = fanotify_init(0x0, 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x6) fanotify_mark(r0, 0x20, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000002c0)) io_setup(0x401, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x7f9) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000380)={{0x5, 0xe, 0x2, 0x3, 0xe559}, [{0x8, 0xffffffffffff8001, 0x75, 0x2}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, 0x0) linkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000500)='./file0\x00', 0x400) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000580)={{}, {0x5, 0x7}, 0x2, 0x1, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) socket$inet(0x2, 0x1, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/56, 0x38}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/135, 0x87}], 0x6, 0x8, 0x8) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000e80)={0x12, 0x10, 0xff, 0xf, 0x6}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x164, r6, 0x10a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f2d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc38a}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6aab}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8}, 0x8802) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r7) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f0000002180)) getdents(r1, &(0x7f00000021c0)=""/164, 0xa4) 8.763315126s ago: executing program 0 (id=2537): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x10000) 8.48258596s ago: executing program 0 (id=2542): sendmsg$inet(0xffffffffffffffff, 0x0, 0x200400c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0xb, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x80000001, 0x80, 0x2, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x27f, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x4, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x42, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x100092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x2000, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x1, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x0, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.142900583s ago: executing program 5 (id=2546): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r0, 0x0, &(0x7f0000000140)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x44800) 6.910897746s ago: executing program 5 (id=2550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000100010000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 6.757581428s ago: executing program 8 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.59305608s ago: executing program 5 (id=2554): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0x42}}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.51760857s ago: executing program 8 (id=2555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.296303433s ago: executing program 8 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.167058345s ago: executing program 8 (id=2561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.127945176s ago: executing program 3 (id=2564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.761960509s ago: executing program 3 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.68787398s ago: executing program 9 (id=2566): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000100010000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 4.553203221s ago: executing program 3 (id=2567): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@dioread_lock}]}, 0x22, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 4.524405182s ago: executing program 9 (id=2568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x200000000180, 0x0, 0x0, 0x2000000002de, 0x20000000030e], 0x197ba3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fd0000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00"/126]}, 0xf6) 4.469590222s ago: executing program 3 (id=2569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.359035244s ago: executing program 9 (id=2570): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 4.358808614s ago: executing program 3 (id=2571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x2020400) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000013c0), 0x280282, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) 4.257128455s ago: executing program 3 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.541190644s ago: executing program 5 (id=2574): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r0, 0x0, &(0x7f0000000140)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x44800) 1.481694864s ago: executing program 0 (id=2575): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x1f, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x6, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x40000) 1.330696556s ago: executing program 0 (id=2576): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = fanotify_init(0x0, 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x6) fanotify_mark(r0, 0x20, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000002c0)) io_setup(0x401, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x7f9) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000380)={{0x5, 0xe, 0x2, 0x3, 0xe559}, [{0x8, 0xffffffffffff8001, 0x75, 0x2}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000440)={0x7fff, 0x1, 0x4, 0x9, 0x4, 0x88}) linkat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000500)='./file0\x00', 0x400) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000580)={{}, {0x5, 0x7}, 0x2, 0x1, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) socket$inet(0x2, 0x1, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/56, 0x38}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/135, 0x87}], 0x6, 0x8, 0x8) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000e80)={0x12, 0x10, 0xff, 0xf, 0x6}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x164, r6, 0x10a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f2d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc38a}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6aab}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8}, 0x8802) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r7) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f0000002180)) getdents(r1, &(0x7f00000021c0)=""/164, 0xa4) 1.165157218s ago: executing program 9 (id=2577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 1.046688759s ago: executing program 8 (id=2578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800010001000000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 313.133907ms ago: executing program 9 (id=2579): socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xee01, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) 312.410667ms ago: executing program 5 (id=2580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x200000000180, 0x0, 0x0, 0x2000000002de, 0x20000000030e], 0x197ba3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fd0000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000010000"]}, 0xff) 226.611908ms ago: executing program 8 (id=2581): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) fstatfs(r0, &(0x7f0000000140)=""/32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 125.736069ms ago: executing program 5 (id=2582): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 125.106479ms ago: executing program 0 (id=2583): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0x42}}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 9 (id=2584): sendmsg$inet(0xffffffffffffffff, 0x0, 0x200400c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0xb, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x80000001, 0x80, 0x2, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x27f, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x4, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x42, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x100092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x2000, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x1, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x0, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): 041b tx timeout [ 281.475072][ T5370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.786564][ T5370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.078586][ T6779] device batadv_slave_0 entered promiscuous mode [ 283.024522][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 283.089158][ T6783] device batadv_slave_0 left promiscuous mode [ 283.293282][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 283.396362][ T5370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.422532][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 284.449801][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 284.576296][ T6807] unsupported nla_type 216 [ 284.663039][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.713414][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.721708][ T6727] device bridge_slave_0 entered promiscuous mode [ 284.785722][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.792981][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.817074][ T6802] loop5: detected capacity change from 0 to 32768 [ 284.844686][ T6727] device bridge_slave_1 entered promiscuous mode [ 284.866208][ T6802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.645 (6802) [ 284.904404][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 284.970891][ T6802] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.014328][ T6802] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 285.042066][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.051375][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 285.063417][ T6802] BTRFS info (device loop5): enabling auto defrag [ 285.087483][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.102767][ T6802] BTRFS info (device loop5): force clearing of disk cache [ 285.140761][ T6802] BTRFS info (device loop5): turning on sync discard [ 285.163320][ T6802] BTRFS info (device loop5): enabling disk space caching [ 285.180689][ T6802] BTRFS info (device loop5): setting nodatacow, compression disabled [ 285.203414][ T6802] BTRFS info (device loop5): disk space caching is enabled [ 285.363762][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 285.461277][ T6802] BTRFS info (device loop5): enabling ssd optimizations [ 285.475951][ T6802] BTRFS info (device loop5): rebuilding free space tree [ 285.547094][ T6802] BTRFS info (device loop5): disabling free space tree [ 285.556226][ T6802] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 285.567018][ T6802] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 285.737592][ T6852] loop0: detected capacity change from 0 to 512 [ 285.774513][ T6727] team0: Port device team_slave_0 added [ 285.810085][ T6852] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.650: invalid block [ 285.889718][ T6727] team0: Port device team_slave_1 added [ 285.896581][ T6852] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.650: invalid indirect mapped block 10 (level 1) [ 285.967396][ T6085] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.987165][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.011071][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.021369][ T6852] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.650: invalid indirect mapped block 8 (level 1) [ 286.066390][ T6761] device bridge_slave_0 entered promiscuous mode [ 286.086522][ T6852] EXT4-fs (loop0): 1 truncate cleaned up [ 286.101364][ T6852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.936878][ T6852] EXT4-fs (loop0): shut down requested (2) [ 287.161665][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 287.220403][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.361135][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.403065][ T6864] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 287.580131][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.631880][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.650640][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.812478][ T6761] device bridge_slave_1 entered promiscuous mode [ 287.839096][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.851255][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.898301][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 289.074130][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.081187][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.138995][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.189358][ T6761] team0: Port device team_slave_0 added [ 289.204327][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 290.103883][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.656'. [ 290.202920][ T6761] team0: Port device team_slave_1 added [ 290.333948][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.340990][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.400514][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.940524][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.981421][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.296077][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.316398][ T6727] device hsr_slave_0 entered promiscuous mode [ 291.344090][ T6727] device hsr_slave_1 entered promiscuous mode [ 291.383059][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.392930][ T6727] Cannot create hsr debugfs directory [ 292.586274][ T6761] device hsr_slave_0 entered promiscuous mode [ 292.616574][ T6761] device hsr_slave_1 entered promiscuous mode [ 292.653345][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.685488][ T6761] Cannot create hsr debugfs directory [ 292.872274][ T6898] loop0: detected capacity change from 0 to 32768 [ 292.944438][ T6898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.660 (6898) [ 292.995012][ T6898] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.011930][ T6898] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 293.192711][ T6898] BTRFS info (device loop0): enabling auto defrag [ 293.366481][ T6898] BTRFS info (device loop0): force clearing of disk cache [ 293.505176][ T6898] BTRFS info (device loop0): turning on sync discard [ 293.623311][ T6898] BTRFS info (device loop0): enabling disk space caching [ 293.630437][ T6898] BTRFS info (device loop0): setting nodatacow, compression disabled [ 293.734358][ T6898] BTRFS info (device loop0): disk space caching is enabled [ 293.905439][ T6898] BTRFS error (device loop0): open_ctree failed: -12 [ 294.061206][ T4261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4261) [ 296.732168][ T6944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.659365][ T6969] loop0: detected capacity change from 0 to 512 [ 297.668065][ T6944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.715694][ T6969] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.671: invalid block [ 297.728588][ T6969] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.671: invalid indirect mapped block 10 (level 1) [ 297.743385][ T6969] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.671: invalid indirect mapped block 8 (level 1) [ 297.758737][ T6969] EXT4-fs (loop0): 1 truncate cleaned up [ 297.771407][ T6969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.789205][ T6969] EXT4-fs (loop0): shut down requested (2) [ 298.156497][ T6976] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 298.549024][ T6944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.734885][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 298.968627][ T6727] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 299.013953][ T6983] loop0: detected capacity change from 0 to 512 [ 299.042823][ T6983] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.673: invalid block [ 299.416178][ T6983] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.673: invalid indirect mapped block 10 (level 1) [ 299.613721][ T6983] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.673: invalid indirect mapped block 8 (level 1) [ 299.661473][ T6944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.687369][ T6983] EXT4-fs (loop0): 1 truncate cleaned up [ 299.707685][ T6727] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 299.715864][ T6983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.787342][ T6983] EXT4-fs (loop0): shut down requested (2) [ 299.851600][ T6727] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 299.895239][ T6727] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 300.007000][ T5370] device hsr_slave_0 left promiscuous mode [ 300.022722][ T5370] device hsr_slave_1 left promiscuous mode [ 300.032856][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.051589][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.060060][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.078303][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.086657][ T5370] device bridge_slave_1 left promiscuous mode [ 300.093011][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.102518][ T5370] device bridge_slave_0 left promiscuous mode [ 300.109172][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.127026][ T5370] device hsr_slave_0 left promiscuous mode [ 300.135297][ T5370] device hsr_slave_1 left promiscuous mode [ 300.144958][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.152898][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.220204][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.242615][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.268167][ T6993] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 300.330110][ T5370] device bridge_slave_1 left promiscuous mode [ 300.376589][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.400642][ T5370] device bridge_slave_0 left promiscuous mode [ 300.415031][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.527996][ T5370] device veth1_macvtap left promiscuous mode [ 300.537796][ T5370] device veth0_macvtap left promiscuous mode [ 300.549772][ T5370] device veth1_vlan left promiscuous mode [ 300.559295][ T5370] device veth0_vlan left promiscuous mode [ 300.572803][ T5370] device veth1_macvtap left promiscuous mode [ 300.582871][ T5370] device veth0_macvtap left promiscuous mode [ 300.602544][ T5370] device veth1_vlan left promiscuous mode [ 300.610621][ T5370] device veth0_vlan left promiscuous mode [ 300.763201][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 302.343292][ T5370] team0 (unregistering): Port device team_slave_1 removed [ 302.401606][ T5370] team0 (unregistering): Port device team_slave_0 removed [ 302.456644][ T5370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.518351][ T5370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.908694][ T5370] bond0 (unregistering): Released all slaves [ 303.602533][ T5370] team0 (unregistering): Port device team_slave_1 removed [ 303.653481][ T5370] team0 (unregistering): Port device team_slave_0 removed [ 303.703835][ T5370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.759941][ T5370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.172805][ T5370] bond0 (unregistering): Released all slaves [ 304.347904][ T6944] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.420652][ T6761] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.462937][ T6761] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.520444][ T6944] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.542787][ T6944] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.563339][ T6944] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.576529][ T6761] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.624601][ T6761] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 304.797761][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.877357][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.907759][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.921483][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.993024][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.024028][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.083830][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.091064][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.104469][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.114301][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.123070][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.130265][ T5331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.169277][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.185424][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.246121][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.257070][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.288734][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.340420][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.410173][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.425209][ T7020] loop0: detected capacity change from 0 to 512 [ 305.464665][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.494162][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.509869][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.529352][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.550941][ T7020] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.682: invalid block [ 305.574153][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.625770][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.650366][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.667199][ T6727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.679040][ T7020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.682: invalid indirect mapped block 10 (level 1) [ 305.763920][ T7020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.682: invalid indirect mapped block 8 (level 1) [ 305.799472][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.985158][ T7020] EXT4-fs (loop0): 1 truncate cleaned up [ 305.992089][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.046041][ T7020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.109896][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.328549][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.364376][ T7020] EXT4-fs (loop0): shut down requested (2) [ 306.401662][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.633895][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.641146][ T5467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.649600][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.792350][ T7042] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 306.806441][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.938331][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.013943][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.021207][ T5467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.290227][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 307.386938][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.427800][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.474907][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.553564][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.574065][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.641702][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.667236][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.705047][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.738883][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.878152][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.912593][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.958217][ T6761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.132122][ T7064] device syzkaller1 entered promiscuous mode [ 308.364637][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.372655][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.409237][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.625676][ T7087] device syzkaller0 entered promiscuous mode [ 310.084084][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.091692][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.171842][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.256061][ T7112] loop0: detected capacity change from 0 to 512 [ 310.408648][ T7112] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.695: invalid block [ 310.488210][ T7112] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.695: invalid indirect mapped block 10 (level 1) [ 310.548581][ T7120] device syzkaller0 entered promiscuous mode [ 310.577021][ T7112] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.695: invalid indirect mapped block 8 (level 1) [ 310.628284][ T7112] EXT4-fs (loop0): 1 truncate cleaned up [ 310.661482][ T7112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.722069][ T7112] EXT4-fs (loop0): shut down requested (2) [ 311.074240][ T7129] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 311.533606][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.543893][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.595009][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.604281][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.606046][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 311.620460][ T6727] device veth0_vlan entered promiscuous mode [ 311.628196][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.640939][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.695859][ T6727] device veth1_vlan entered promiscuous mode [ 311.770432][ T6727] device veth0_macvtap entered promiscuous mode [ 311.788578][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 311.806330][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 311.819169][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.829917][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.851242][ T6727] device veth1_macvtap entered promiscuous mode [ 311.872715][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.894218][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.954508][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.983938][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.004575][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.028045][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.053422][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.082659][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.107604][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.126570][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.151229][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.176950][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.192994][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.211458][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.230541][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.248554][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.281206][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.306976][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.344986][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.355249][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.382167][ T6727] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.392181][ T6727] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.408814][ T6727] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.419570][ T6727] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.439853][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.459597][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.518839][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.535587][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.556372][ T6761] device veth0_vlan entered promiscuous mode [ 312.584132][ T6761] device veth1_vlan entered promiscuous mode [ 312.635443][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.657334][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.676397][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.912312][ T7156] loop0: detected capacity change from 0 to 512 [ 312.931507][ T7156] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 312.968800][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.799741][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.894314][ T6761] device veth0_macvtap entered promiscuous mode [ 313.912675][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.937779][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.970346][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.985205][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.188020][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.525149][ T6935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.535505][ T6761] device veth1_macvtap entered promiscuous mode [ 314.593368][ T6935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.632103][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.670933][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.621821][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.631969][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.643241][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.655536][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.666194][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.676153][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.696661][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.751835][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.780909][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.800358][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.036812][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.083324][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.877956][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.913271][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.937656][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.983164][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.008887][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.046421][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.089042][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.129371][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.139495][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.192520][ T6761] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.206348][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.212749][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.219452][ T6761] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.263212][ T6761] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.271997][ T6761] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.508196][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.541843][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.587261][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.777406][ T5331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.810348][ T5331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.847660][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.853326][ T7198] sctp: failed to load transform for md5: -4 [ 319.012178][ T7214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.409401][ T7237] loop8: detected capacity change from 0 to 1024 [ 320.906554][ T26] audit: type=1800 audit(1777957548.856:10): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.717" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 321.547238][ T7267] loop9: detected capacity change from 0 to 2048 [ 321.771888][ T7267] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 325.334416][ T31] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 325.381957][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 212 with error 28 [ 325.418681][ T31] EXT4-fs (loop9): This should not happen!! Data will be lost [ 325.418681][ T31] [ 325.459313][ T31] EXT4-fs (loop9): Total free blocks count 0 [ 325.483181][ T31] EXT4-fs (loop9): Free/Dirty block details [ 325.493753][ T31] EXT4-fs (loop9): free_blocks=2415919504 [ 325.499564][ T31] EXT4-fs (loop9): dirty_blocks=224 [ 325.526510][ T31] EXT4-fs (loop9): Block reservation details [ 325.553249][ T31] EXT4-fs (loop9): i_reserved_data_blocks=14 [ 325.603874][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 325.771185][ T7321] loop5: detected capacity change from 0 to 1024 [ 327.713536][ T26] audit: type=1800 audit(1777957555.646:11): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.735" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 327.773506][ T4286] Bluetooth: hci2: link tx timeout [ 327.782003][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 329.790993][ T7355] loop9: detected capacity change from 0 to 2048 [ 329.843424][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 330.109788][ T7355] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 331.909026][ T7368] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 331.925427][ T7368] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 331.937693][ T7368] EXT4-fs (loop9): This should not happen!! Data will be lost [ 331.937693][ T7368] [ 331.947383][ T7368] EXT4-fs (loop9): Total free blocks count 0 [ 331.953407][ T7368] EXT4-fs (loop9): Free/Dirty block details [ 331.959402][ T7368] EXT4-fs (loop9): free_blocks=2415919504 [ 331.965210][ T7368] EXT4-fs (loop9): dirty_blocks=32976 [ 331.970733][ T7368] EXT4-fs (loop9): Block reservation details [ 331.976797][ T7368] EXT4-fs (loop9): i_reserved_data_blocks=2061 [ 332.049550][ T7372] netlink: 'syz.0.745': attribute type 7 has an invalid length. [ 332.613686][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 332.827057][ T7376] loop5: detected capacity change from 0 to 1024 [ 333.253511][ T4286] Bluetooth: hci2: link tx timeout [ 333.258784][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.097620][ T7395] loop8: detected capacity change from 0 to 1024 [ 334.487303][ T26] audit: type=1800 audit(1777957562.436:12): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.751" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 334.593329][ T4286] Bluetooth: hci2: link tx timeout [ 334.609959][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 335.648388][ T7374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.671151][ T7386] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 335.712846][ T7386] team0: Device veth1_vlan failed to register rx_handler [ 335.775045][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 335.790725][ T7398] device hsr_slave_0 left promiscuous mode [ 335.805142][ T7398] device hsr_slave_1 left promiscuous mode [ 336.055608][ T7374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.147237][ T7410] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 336.206614][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.256930][ T7374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.342243][ T7413] bond1: (slave geneve2): making interface the new active one [ 336.405121][ T7413] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 336.471265][ T6761] EXT4-fs: 39 callbacks suppressed [ 336.471284][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 336.482981][ T7413] syz.3.754 (7413) used greatest stack depth: 18288 bytes left [ 336.617665][ T7374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.743852][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 336.791354][ T7427] netlink: 'syz.5.758': attribute type 15 has an invalid length. [ 336.846638][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.9.748'. [ 337.724327][ T7436] netlink: 44 bytes leftover after parsing attributes in process `syz.5.759'. [ 338.527991][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.535696][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.377387][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.432758][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.948651][ T7428] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.957704][ T7428] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.966946][ T7428] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.975915][ T7428] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.311811][ T7374] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.355095][ T7454] device syzkaller0 entered promiscuous mode [ 340.407172][ T7374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.481870][ T7374] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.499628][ T7374] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.531744][ T7460] Bluetooth: MGMT ver 1.22 [ 341.292515][ T7487] loop0: detected capacity change from 0 to 1024 [ 341.376222][ T7485] syz.3.771 uses obsolete (PF_INET,SOCK_PACKET) [ 341.916401][ T4286] Bluetooth: hci2: link tx timeout [ 341.921689][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.785637][ T7503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.873488][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.775'. [ 343.954019][ T7533] Zero length message leads to an empty skb [ 344.883191][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 345.971987][ T7573] fuse: Bad value for 'fd' [ 347.993553][ T7610] fuse: Bad value for 'fd' [ 350.030665][ T7645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.130331][ T7651] fuse: Bad value for 'fd' [ 350.681732][ T7670] netlink: 'syz.3.822': attribute type 9 has an invalid length. [ 350.710279][ T7670] netlink: 'syz.3.822': attribute type 7 has an invalid length. [ 350.903471][ T7670] netlink: 'syz.3.822': attribute type 8 has an invalid length. [ 352.348365][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.831'. [ 353.242462][ T7706] loop5: detected capacity change from 0 to 512 [ 353.308768][ T7706] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 355.727797][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.848'. [ 357.265984][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 357.370063][ T7765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.062226][ T7783] loop9: detected capacity change from 0 to 512 [ 358.123695][ T7783] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 358.643291][ T7790] hub 8-0:1.0: USB hub found [ 358.702628][ T7790] hub 8-0:1.0: 1 port detected [ 359.607347][ T7812] IPVS: Unknown mcast interface: dvmrp0 [ 360.530065][ T7823] loop5: detected capacity change from 0 to 512 [ 360.588512][ T7823] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 361.467480][ T7832] Driver unsupported XDP return value 0 on prog (id 146) dev N/A, expect packet loss! [ 361.672250][ T7838] loop8: detected capacity change from 0 to 2048 [ 361.776098][ T7838] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 363.779957][ T7849] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 363.794856][ T7849] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 363.807080][ T7849] EXT4-fs (loop8): This should not happen!! Data will be lost [ 363.807080][ T7849] [ 363.816774][ T7849] EXT4-fs (loop8): Total free blocks count 0 [ 363.822760][ T7849] EXT4-fs (loop8): Free/Dirty block details [ 363.828723][ T7849] EXT4-fs (loop8): free_blocks=2415919504 [ 363.834490][ T7849] EXT4-fs (loop8): dirty_blocks=38704 [ 363.839919][ T7849] EXT4-fs (loop8): Block reservation details [ 363.846028][ T7849] EXT4-fs (loop8): i_reserved_data_blocks=2419 [ 364.383643][ T7856] hub 8-0:1.0: USB hub found [ 364.399255][ T7856] hub 8-0:1.0: 1 port detected [ 364.420540][ T7858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 364.781456][ T7862] loop0: detected capacity change from 0 to 512 [ 364.849890][ T7862] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 365.346958][ T7869] Bluetooth: MGMT ver 1.22 [ 365.526713][ T5467] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 366.524177][ T7897] loop0: detected capacity change from 0 to 512 [ 366.562826][ T7897] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 368.927405][ T7904] loop5: detected capacity change from 0 to 1024 [ 369.415219][ T26] audit: type=1800 audit(1777957597.396:13): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.901" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 369.445898][ T48] Bluetooth: hci2: link tx timeout [ 369.451105][ T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 369.860211][ T7915] netlink: 'syz.5.905': attribute type 1 has an invalid length. [ 369.915965][ T7915] netlink: 'syz.5.905': attribute type 2 has an invalid length. [ 370.844835][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 370.927490][ T7934] fuse: Bad value for 'fd' [ 370.980478][ T7936] hub 8-0:1.0: USB hub found [ 371.011815][ T7936] hub 8-0:1.0: 1 port detected [ 371.229154][ T7939] loop5: detected capacity change from 0 to 512 [ 371.301566][ T7939] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 373.842574][ T7956] loop0: detected capacity change from 0 to 1024 [ 374.281761][ T26] audit: type=1800 audit(1777957602.256:14): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.915" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 374.393305][ T48] Bluetooth: hci2: link tx timeout [ 374.424431][ T48] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 374.432189][ T48] Bluetooth: hci2: link tx timeout [ 374.437599][ T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.916516][ T6727] EXT4-fs: 31 callbacks suppressed [ 375.916538][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 377.483210][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 378.057338][ T7989] fuse: Bad value for 'fd' [ 378.451870][ T8000] loop9: detected capacity change from 0 to 512 [ 378.532649][ T8000] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.926: invalid indirect mapped block 10 (level 1) [ 378.586804][ T8005] xt_TCPMSS: Only works on TCP SYN packets [ 378.604370][ T8000] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.926: invalid indirect mapped block 8 (level 1) [ 378.646573][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.653043][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.693998][ T8000] EXT4-fs (loop9): 1 truncate cleaned up [ 378.699795][ T8000] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 378.776034][ T8000] EXT4-fs (loop9): shut down requested (2) [ 379.324000][ T8010] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 379.634370][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 379.853433][ T8019] loop9: detected capacity change from 0 to 2048 [ 379.924285][ T8019] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 380.276756][ C1] hrtimer: interrupt took 479878 ns [ 383.214606][ T6761] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 383.920171][ T8042] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 383.932473][ T8042] EXT4-fs (loop9): This should not happen!! Data will be lost [ 383.932473][ T8042] [ 383.942449][ T8042] EXT4-fs (loop9): Total free blocks count 0 [ 383.948500][ T8042] EXT4-fs (loop9): Free/Dirty block details [ 383.954485][ T8042] EXT4-fs (loop9): free_blocks=2415919504 [ 383.960247][ T8042] EXT4-fs (loop9): dirty_blocks=46928 [ 383.965699][ T8042] EXT4-fs (loop9): Block reservation details [ 383.971712][ T8042] EXT4-fs (loop9): i_reserved_data_blocks=2421 [ 384.406589][ T9] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 384.522306][ T8050] tipc: Started in network mode [ 384.623238][ T8050] tipc: Node identity 101, cluster identity 4711 [ 384.715055][ T8050] tipc: Node number set to 257 [ 384.827721][ T8050] tipc: Cannot configure node identity twice [ 384.902011][ T8054] batman_adv: batadv0: Adding interface: dummy0 [ 384.939560][ T8054] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.100469][ T8054] batman_adv: batadv0: Interface activated: dummy0 [ 385.165605][ T8061] batadv0: mtu less than device minimum [ 385.185751][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.198921][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.211395][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.223871][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.236391][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.248800][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.261248][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.273719][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.286151][ T8061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.124025][ T8085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.132065][ T8085] IPv6: NLM_F_CREATE should be set when creating new route [ 386.139425][ T8085] IPv6: NLM_F_CREATE should be set when creating new route [ 386.146758][ T8085] IPv6: NLM_F_CREATE should be set when creating new route [ 388.412693][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.954'. [ 391.988595][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.019764][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.090509][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.899572][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.8.966'. [ 395.054369][ T6761] EXT4-fs: 15 callbacks suppressed [ 395.054388][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 395.430586][ T8173] fuse: Bad value for 'fd' [ 396.760538][ T8196] hub 8-0:1.0: USB hub found [ 396.766264][ T8196] hub 8-0:1.0: 1 port detected [ 400.675753][ T8250] loop0: detected capacity change from 0 to 2048 [ 400.985912][ T8250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.213223][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 401.601580][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.724633][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 401.825738][ T8277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.992'. [ 401.885720][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.943484][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.582166][ T8303] sctp: [Deprecated]: syz.3.999 (pid 8303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.582166][ T8303] Use struct sctp_sack_info instead [ 405.950067][ T8317] loop8: detected capacity change from 0 to 512 [ 406.103554][ T8317] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1004: invalid block [ 406.164016][ T5464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 406.206309][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1005'. [ 406.223941][ T8317] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1004: invalid indirect mapped block 10 (level 1) [ 406.250122][ T5464] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 406.285178][ T5464] EXT4-fs (loop0): This should not happen!! Data will be lost [ 406.285178][ T5464] [ 406.336630][ T8317] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1004: invalid indirect mapped block 8 (level 1) [ 406.355573][ T4286] block nbd0: Receive control failed (result -1) [ 406.421170][ T5464] EXT4-fs (loop0): Total free blocks count 0 [ 406.487836][ T5464] EXT4-fs (loop0): Free/Dirty block details [ 406.495141][ T8317] EXT4-fs (loop8): 1 truncate cleaned up [ 406.573930][ T5464] EXT4-fs (loop0): free_blocks=2415919504 [ 406.613262][ T8317] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 406.649677][ T5464] EXT4-fs (loop0): dirty_blocks=1568 [ 406.676023][ T5464] EXT4-fs (loop0): Block reservation details [ 406.725694][ T5464] EXT4-fs (loop0): i_reserved_data_blocks=89 [ 406.758136][ T8317] EXT4-fs (loop8): shut down requested (2) [ 406.823969][ T5464] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 134 with error 28 [ 407.474168][ T8317] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 407.623270][ T5464] EXT4-fs (loop0): This should not happen!! Data will be lost [ 407.623270][ T5464] [ 407.635802][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 412.112809][ T8371] loop5: detected capacity change from 0 to 512 [ 412.265750][ T8371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1020: invalid indirect mapped block 10 (level 1) [ 412.344914][ T8380] loop9: detected capacity change from 0 to 2048 [ 412.380837][ T8371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1020: invalid indirect mapped block 8 (level 1) [ 412.456733][ T8380] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 412.476850][ T8371] EXT4-fs (loop5): 1 truncate cleaned up [ 412.507800][ T8371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 412.689609][ T8371] EXT4-fs (loop5): shut down requested (2) [ 413.066463][ T8387] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 413.307055][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 416.525971][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 417.339052][ T8433] hub 8-0:1.0: USB hub found [ 417.351143][ T8433] hub 8-0:1.0: 1 port detected [ 417.897436][ T8435] loop5: detected capacity change from 0 to 512 [ 418.115264][ T8435] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1036: invalid indirect mapped block 10 (level 1) [ 418.264109][ T8435] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1036: invalid indirect mapped block 8 (level 1) [ 418.960721][ T8435] EXT4-fs (loop5): 1 truncate cleaned up [ 418.971817][ T8435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 419.074606][ T8435] EXT4-fs (loop5): shut down requested (2) [ 419.388232][ T8455] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 419.727401][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 420.693762][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1042'. [ 421.699609][ T8502] loop9: detected capacity change from 0 to 512 [ 422.515209][ T8502] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.1052: invalid block [ 422.651650][ T8502] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1052: invalid indirect mapped block 10 (level 1) [ 422.751946][ T8502] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1052: invalid indirect mapped block 8 (level 1) [ 422.841933][ T8502] EXT4-fs (loop9): 1 truncate cleaned up [ 422.867877][ T8502] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 422.967241][ T8502] EXT4-fs (loop9): shut down requested (2) [ 423.323273][ T8520] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 423.579040][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 423.841098][ T8525] netlink: 'syz.8.1059': attribute type 1 has an invalid length. [ 423.900032][ T8525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.196118][ T8529] bond1: (slave geneve2): making interface the new active one [ 424.241416][ T8529] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 424.346001][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 424.835314][ T8534] device syzkaller0 entered promiscuous mode [ 431.889812][ T8564] device syzkaller0 entered promiscuous mode [ 432.399266][ T8621] loop0: detected capacity change from 0 to 512 [ 432.571808][ T8621] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1081: invalid block [ 432.697978][ T8621] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1081: invalid indirect mapped block 10 (level 1) [ 432.785559][ T8621] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1081: invalid indirect mapped block 8 (level 1) [ 432.869214][ T8621] EXT4-fs (loop0): 1 truncate cleaned up [ 432.914018][ T8621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 433.012467][ T8621] EXT4-fs (loop0): shut down requested (2) [ 433.320102][ T8633] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 433.592236][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 439.549388][ T8675] loop0: detected capacity change from 0 to 512 [ 439.707714][ T8680] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1095'. [ 439.719559][ T8675] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1093: invalid block [ 439.833095][ T8675] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1093: invalid indirect mapped block 10 (level 1) [ 439.917353][ T8675] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1093: invalid indirect mapped block 8 (level 1) [ 439.996459][ T8675] EXT4-fs (loop0): 1 truncate cleaned up [ 440.066232][ T8675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 440.076145][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'. [ 440.092902][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099425][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.152802][ T8675] EXT4-fs (loop0): shut down requested (2) [ 440.196694][ T4286] block nbd1: Receive control failed (result -1) [ 440.477945][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1099'. [ 440.514293][ T8695] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 440.743922][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 442.554358][ T8731] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1109'. [ 443.094188][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 443.177167][ T4286] block nbd2: Receive control failed (result -1) [ 443.403562][ T8740] loop8: detected capacity change from 0 to 512 [ 443.469198][ T8740] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1112: invalid indirect mapped block 10 (level 1) [ 443.711018][ T8740] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1112: invalid indirect mapped block 8 (level 1) [ 443.799015][ T8740] EXT4-fs (loop8): 1 truncate cleaned up [ 443.836428][ T8740] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 443.945682][ T8740] EXT4-fs (loop8): shut down requested (2) [ 444.337581][ T8749] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 444.786737][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 445.597908][ T8770] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.289245][ T8798] loop8: detected capacity change from 0 to 512 [ 447.396727][ T8798] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1126: invalid indirect mapped block 10 (level 1) [ 447.614647][ T8798] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1126: invalid indirect mapped block 8 (level 1) [ 447.802077][ T8798] EXT4-fs (loop8): 1 truncate cleaned up [ 448.343153][ T8798] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 448.548310][ T8798] EXT4-fs (loop8): shut down requested (2) [ 448.981536][ T8798] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 449.490429][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 453.130886][ T8873] loop5: detected capacity change from 0 to 512 [ 453.216365][ T8873] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1145: invalid indirect mapped block 10 (level 1) [ 453.252510][ T8873] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1145: invalid indirect mapped block 8 (level 1) [ 453.291277][ T8873] EXT4-fs (loop5): 1 truncate cleaned up [ 453.341475][ T8873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 453.443984][ T8873] EXT4-fs (loop5): shut down requested (2) [ 454.002689][ T8882] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 454.800940][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 455.307895][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 457.026452][ T8914] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.650863][ T8928] loop8: detected capacity change from 0 to 512 [ 457.811368][ T8928] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1161: invalid indirect mapped block 10 (level 1) [ 457.848192][ T8928] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1161: invalid indirect mapped block 8 (level 1) [ 457.982435][ T8928] EXT4-fs (loop8): 1 truncate cleaned up [ 457.989501][ T8928] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 458.124413][ T8928] EXT4-fs (loop8): shut down requested (2) [ 458.365327][ T8928] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 459.316317][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 459.610045][ T8952] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.756774][ T8976] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1178'. [ 461.841200][ T8978] loop5: detected capacity change from 0 to 512 [ 462.061756][ T8978] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.1177: invalid block [ 462.159052][ T8978] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1177: invalid indirect mapped block 10 (level 1) [ 462.823679][ T8978] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1177: invalid indirect mapped block 8 (level 1) [ 462.879199][ T8978] EXT4-fs (loop5): 1 truncate cleaned up [ 462.905723][ T8978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 462.929420][ T8990] net_ratelimit: 10 callbacks suppressed [ 462.929446][ T8990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.052932][ T8978] EXT4-fs (loop5): shut down requested (2) [ 463.323269][ T8991] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 463.564267][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 465.683007][ T9027] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1190'. [ 466.719330][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.835409][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 466.934179][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.941783][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.982024][ T9041] loop8: detected capacity change from 0 to 512 [ 467.171307][ T9041] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1194: invalid block [ 467.473228][ T9041] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1194: invalid indirect mapped block 10 (level 1) [ 468.112361][ T9041] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1194: invalid indirect mapped block 8 (level 1) [ 468.175175][ T9041] EXT4-fs (loop8): 1 truncate cleaned up [ 468.181086][ T9041] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 468.265598][ T9041] EXT4-fs (loop8): shut down requested (2) [ 468.563856][ T9041] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 468.686247][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 470.163301][ T9071] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1203'. [ 472.287493][ T9096] loop8: detected capacity change from 0 to 512 [ 472.511489][ T9096] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1209: invalid block [ 472.654256][ T9096] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1209: invalid indirect mapped block 10 (level 1) [ 472.759837][ T9096] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1209: invalid indirect mapped block 8 (level 1) [ 472.902052][ T9096] EXT4-fs (loop8): 1 truncate cleaned up [ 472.928132][ T9096] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 473.043927][ T9096] EXT4-fs (loop8): shut down requested (2) [ 473.121021][ T9096] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 473.207414][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 473.456980][ T9118] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1216'. [ 475.555240][ T9140] debugfs: Directory 'netdev:syzkaller0' with parent 'phy8' already present! [ 475.910148][ T9150] loop8: detected capacity change from 0 to 512 [ 476.016752][ T9150] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1226: invalid block [ 476.062082][ T9150] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1226: invalid indirect mapped block 10 (level 1) [ 476.079650][ T9150] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1226: invalid indirect mapped block 8 (level 1) [ 476.114142][ T9150] EXT4-fs (loop8): 1 truncate cleaned up [ 476.134960][ T9150] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 476.238919][ T9150] EXT4-fs (loop8): shut down requested (2) [ 476.245865][ T9160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1229'. [ 476.301407][ T9150] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 476.369364][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 476.790345][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.850213][ T9172] loop9: detected capacity change from 0 to 512 [ 476.858344][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.529835][ T9172] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1233: invalid indirect mapped block 10 (level 1) [ 477.571423][ T9163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.605486][ T9172] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1233: invalid indirect mapped block 8 (level 1) [ 477.767238][ T9172] EXT4-fs (loop9): 1 truncate cleaned up [ 477.772978][ T9172] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 477.879447][ T9172] EXT4-fs (loop9): shut down requested (2) [ 477.917498][ T9172] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 478.016792][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 478.641629][ T9198] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1241'. [ 478.682355][ T9197] loop9: detected capacity change from 0 to 512 [ 478.768994][ T9197] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1240: invalid indirect mapped block 10 (level 1) [ 478.900252][ T9197] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1240: invalid indirect mapped block 8 (level 1) [ 478.945349][ T9197] EXT4-fs (loop9): 1 truncate cleaned up [ 478.961497][ T9197] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 479.045244][ T9197] EXT4-fs (loop9): shut down requested (2) [ 479.078848][ T9197] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 479.151658][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 480.404549][ T9216] loop5: detected capacity change from 0 to 2048 [ 480.607794][ T9216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 483.958823][ T9229] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 483.975161][ T9229] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 483.988510][ T9229] EXT4-fs (loop5): This should not happen!! Data will be lost [ 483.988510][ T9229] [ 483.999095][ T9229] EXT4-fs (loop5): Total free blocks count 0 [ 484.005749][ T9229] EXT4-fs (loop5): Free/Dirty block details [ 484.012286][ T9229] EXT4-fs (loop5): free_blocks=2415919504 [ 484.018624][ T9229] EXT4-fs (loop5): dirty_blocks=39344 [ 484.024585][ T9229] EXT4-fs (loop5): Block reservation details [ 484.031178][ T9229] EXT4-fs (loop5): i_reserved_data_blocks=2421 [ 484.130378][ T6636] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 484.570541][ T9237] device syzkaller0 entered promiscuous mode [ 484.822478][ T9240] debugfs: Directory 'netdev:syzkaller0' with parent 'phy22' already present! [ 484.904193][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1254'. [ 485.201124][ T9247] loop0: detected capacity change from 0 to 512 [ 485.300877][ T9247] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1255: invalid block [ 485.375023][ T9247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1255: invalid indirect mapped block 10 (level 1) [ 485.440297][ T9247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1255: invalid indirect mapped block 8 (level 1) [ 485.487272][ T9247] EXT4-fs (loop0): 1 truncate cleaned up [ 485.508362][ T9247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 485.597797][ T9247] EXT4-fs (loop0): shut down requested (2) [ 486.085917][ T9266] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 487.081234][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.088781][ T9262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.096383][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.103597][ T9262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.216905][ T9262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 487.315768][ T9262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.355370][ T9214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.040781][ T9287] device syzkaller0 entered promiscuous mode [ 488.100679][ T9287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.326140][ T9290] debugfs: Directory 'netdev:syzkaller0' with parent 'phy4' already present! [ 488.705365][ T9294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1268'. [ 489.150519][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 489.607403][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 490.672344][ T6085] EXT4-fs: 23 callbacks suppressed [ 490.672362][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 491.882477][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1280'. [ 492.197798][ T9363] loop5: detected capacity change from 0 to 2048 [ 492.340732][ T9363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 496.025827][ T9370] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 496.042238][ T9370] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 496.055592][ T9370] EXT4-fs (loop5): This should not happen!! Data will be lost [ 496.055592][ T9370] [ 496.066279][ T9370] EXT4-fs (loop5): Total free blocks count 0 [ 496.072856][ T9370] EXT4-fs (loop5): Free/Dirty block details [ 496.079347][ T9370] EXT4-fs (loop5): free_blocks=2415919504 [ 496.085642][ T9370] EXT4-fs (loop5): dirty_blocks=46928 [ 496.091540][ T9370] EXT4-fs (loop5): Block reservation details [ 496.098121][ T9370] EXT4-fs (loop5): i_reserved_data_blocks=2421 [ 496.228495][ T6636] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 497.463407][ T9390] loop8: detected capacity change from 0 to 1024 [ 498.333586][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 498.949475][ T26] audit: type=1800 audit(1777957726.916:15): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1288" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 499.022205][ T9418] loop9: detected capacity change from 0 to 512 [ 499.298752][ T9418] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1295: invalid indirect mapped block 10 (level 1) [ 499.429860][ T9418] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1295: invalid indirect mapped block 8 (level 1) [ 499.591319][ T9418] EXT4-fs (loop9): 1 truncate cleaned up [ 499.656372][ T9418] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 499.853586][ T9418] EXT4-fs (loop9): shut down requested (2) [ 500.304517][ T9448] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 501.556025][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567469][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.015029][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1305'. [ 503.327061][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 504.867565][ T6085] EXT4-fs: 31 callbacks suppressed [ 504.867624][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 506.895325][ T9522] loop5: detected capacity change from 0 to 1024 [ 507.509132][ T9532] loop9: detected capacity change from 0 to 512 [ 507.667708][ T9532] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.1319: invalid block [ 507.778084][ T9532] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1319: invalid indirect mapped block 10 (level 1) [ 507.882240][ T9532] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1319: invalid indirect mapped block 8 (level 1) [ 507.969422][ T9532] EXT4-fs (loop9): 1 truncate cleaned up [ 507.988635][ T9532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 508.113505][ T9532] EXT4-fs (loop9): shut down requested (2) [ 508.532377][ T26] audit: type=1800 audit(1777957736.506:16): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1315" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 508.559948][ T9549] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 508.700045][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1324'. [ 510.414251][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'. [ 512.322564][ T9598] hub 8-0:1.0: USB hub found [ 512.328242][ T9598] hub 8-0:1.0: 1 port detected [ 512.954406][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 513.744108][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1338'. [ 515.706625][ T9641] loop9: detected capacity change from 0 to 512 [ 515.845152][ T9641] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1346: invalid indirect mapped block 10 (level 1) [ 515.946501][ T9641] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1346: invalid indirect mapped block 8 (level 1) [ 516.020949][ T9641] EXT4-fs (loop9): 1 truncate cleaned up [ 516.036151][ T9656] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 516.071590][ T9641] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 516.150838][ T9656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.158030][ T9641] EXT4-fs (loop9): shut down requested (2) [ 516.592713][ T9663] loop5: detected capacity change from 0 to 512 [ 516.709100][ T9665] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 516.805210][ T9663] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1349: invalid indirect mapped block 10 (level 1) [ 516.863947][ T9663] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1349: invalid indirect mapped block 8 (level 1) [ 516.953679][ T9663] EXT4-fs (loop5): 1 truncate cleaned up [ 517.003106][ T9663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 517.181792][ T9663] EXT4-fs (loop5): shut down requested (2) [ 517.675043][ T9677] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 520.871009][ T9710] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 521.035747][ T9710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.474424][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 522.523589][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 524.544882][ T9762] netlink: 'syz.8.1374': attribute type 1 has an invalid length. [ 524.687624][ T9762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.291919][ T9774] loop8: detected capacity change from 0 to 512 [ 525.414635][ T9774] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1375: invalid indirect mapped block 10 (level 1) [ 525.550542][ T9774] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1375: invalid indirect mapped block 8 (level 1) [ 525.699724][ T9774] EXT4-fs (loop8): 1 truncate cleaned up [ 525.762123][ T9774] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 525.874547][ T9774] EXT4-fs (loop8): shut down requested (2) [ 525.901786][ T9784] loop9: detected capacity change from 0 to 512 [ 526.198776][ T9784] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1378: invalid indirect mapped block 10 (level 1) [ 526.314763][ T9784] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1378: invalid indirect mapped block 8 (level 1) [ 526.332182][ T9794] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 526.366735][ T9784] EXT4-fs (loop9): 1 truncate cleaned up [ 526.373850][ T9784] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 526.512562][ T9784] EXT4-fs (loop9): shut down requested (2) [ 527.995469][ T9808] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 528.718237][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 530.076442][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 530.821532][ T9839] xt_TCPMSS: Only works on TCP SYN packets [ 531.460537][ T9859] loop5: detected capacity change from 0 to 512 [ 531.648158][ T9859] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1394: invalid indirect mapped block 10 (level 1) [ 533.258948][ T9869] loop0: detected capacity change from 0 to 512 [ 533.293550][ T9859] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1394: invalid indirect mapped block 8 (level 1) [ 533.335162][ T9859] EXT4-fs (loop5): 1 truncate cleaned up [ 533.341490][ T9859] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 533.468260][ T9869] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1399: invalid block [ 533.617625][ T9869] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1399: invalid indirect mapped block 10 (level 1) [ 533.633667][ T9869] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1399: invalid indirect mapped block 8 (level 1) [ 533.666875][ T9869] EXT4-fs (loop0): 1 truncate cleaned up [ 533.672630][ T9869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 533.873893][ T9869] EXT4-fs (loop0): shut down requested (2) [ 535.004713][ T9889] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 535.947816][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 537.713202][ T9919] xt_TCPMSS: Only works on TCP SYN packets [ 538.080569][ T9923] loop8: detected capacity change from 0 to 512 [ 538.153419][ T9923] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 541.231421][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1414'. [ 541.327880][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 541.712922][ T9940] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1414'. [ 543.087175][ T9970] hub 8-0:1.0: USB hub found [ 543.093175][ T9970] hub 8-0:1.0: 1 port detected [ 543.819883][ T9963] netlink: 'syz.0.1422': attribute type 5 has an invalid length. [ 543.903590][ T9972] loop8: detected capacity change from 0 to 512 [ 543.921108][ T9967] loop9: detected capacity change from 0 to 512 [ 543.998805][ T9967] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 544.096059][ T9972] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1413: invalid block [ 544.198422][ T9972] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1413: invalid indirect mapped block 10 (level 1) [ 544.298009][ T9972] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1413: invalid indirect mapped block 8 (level 1) [ 544.410916][ T9972] EXT4-fs (loop8): 1 truncate cleaned up [ 544.430562][ T9972] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 544.573324][ T9972] EXT4-fs (loop8): shut down requested (2) [ 547.179992][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 547.477667][ T9987] loop8: detected capacity change from 0 to 512 [ 547.583282][ T9987] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1427: invalid block [ 547.703767][ T9987] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1427: invalid indirect mapped block 10 (level 1) [ 547.795624][ T9987] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1427: invalid indirect mapped block 8 (level 1) [ 547.884839][ T9987] EXT4-fs (loop8): 1 truncate cleaned up [ 547.890717][ T9987] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 548.009746][ T9987] EXT4-fs (loop8): shut down requested (2) [ 550.262607][T10005] netlink: 'syz.5.1434': attribute type 4 has an invalid length. [ 550.989354][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 551.167848][T10016] loop5: detected capacity change from 0 to 512 [ 551.246182][T10016] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.1437: invalid block [ 551.270290][T10018] loop8: detected capacity change from 0 to 512 [ 551.375219][T10016] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1437: invalid indirect mapped block 10 (level 1) [ 551.392439][T10018] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 554.381289][T10016] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1437: invalid indirect mapped block 8 (level 1) [ 554.464598][T10016] EXT4-fs (loop5): 1 truncate cleaned up [ 554.471582][T10016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 554.652836][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 556.359572][T10058] xt_cgroup: path and classid specified [ 556.846336][T10064] bridge0: port 3(erspan0) entered blocking state [ 556.884014][T10064] bridge0: port 3(erspan0) entered disabled state [ 557.003347][T10064] device erspan0 entered promiscuous mode [ 557.034867][T10064] bridge0: port 3(erspan0) entered blocking state [ 557.042104][T10064] bridge0: port 3(erspan0) entered forwarding state [ 557.125816][T10065] device erspan0 left promiscuous mode [ 557.134015][T10065] bridge0: port 3(erspan0) entered disabled state [ 558.029806][T10086] loop0: detected capacity change from 0 to 512 [ 558.099752][T10086] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 560.675185][T10092] tipc: Started in network mode [ 560.721220][T10092] tipc: Node identity 02a203ad6447, cluster identity 4711 [ 560.786652][T10092] tipc: Enabled bearer , priority 0 [ 560.954053][T10090] tipc: Disabling bearer [ 561.520825][T10107] device syzkaller1 entered promiscuous mode [ 564.194111][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.201770][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.440108][T10142] device syzkaller0 entered promiscuous mode [ 565.235311][T10121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.477578][T10234] netlink: 'syz.8.1487': attribute type 15 has an invalid length. [ 570.603543][T10242] netlink: 'syz.9.1489': attribute type 13 has an invalid length. [ 570.662492][T10242] netlink: 'syz.9.1489': attribute type 17 has an invalid length. [ 571.074712][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.175583][T10242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.755255][T10271] device syzkaller0 entered promiscuous mode [ 572.319759][T10289] netlink: 'syz.8.1504': attribute type 15 has an invalid length. [ 574.645101][ T6636] tipc: Subscription rejected, illegal request [ 574.755419][T10337] device syzkaller0 entered promiscuous mode [ 575.088784][T10346] netlink: 'syz.9.1521': attribute type 15 has an invalid length. [ 576.852562][T10383] netlink: 'syz.9.1534': attribute type 15 has an invalid length. [ 578.082040][T10414] loop5: detected capacity change from 0 to 512 [ 578.223400][T10414] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 580.846519][T10448] netlink: 'syz.9.1549': attribute type 15 has an invalid length. [ 581.480399][T10463] loop9: detected capacity change from 0 to 512 [ 581.556730][T10463] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1555: invalid indirect mapped block 10 (level 1) [ 581.804192][T10463] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1555: invalid indirect mapped block 8 (level 1) [ 581.953847][T10463] EXT4-fs (loop9): 1 truncate cleaned up [ 582.003297][T10463] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 582.877664][T10487] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 583.940441][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 584.725626][T10503] loop8: detected capacity change from 0 to 512 [ 584.802420][T10503] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 587.431855][T10512] netlink: 'syz.5.1565': attribute type 15 has an invalid length. [ 587.796186][T10519] device syzkaller0 entered promiscuous mode [ 588.109610][T10523] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1567'. [ 588.656544][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1573'. [ 588.723359][T10541] nbd: must specify at least one socket [ 592.244238][T10566] netlink: 'syz.9.1580': attribute type 15 has an invalid length. [ 593.048474][T10580] netlink: 'syz.0.1584': attribute type 7 has an invalid length. [ 593.071414][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1585'. [ 593.203184][T10582] nbd: must specify at least one socket [ 595.068584][T10620] netlink: 'syz.9.1592': attribute type 15 has an invalid length. [ 595.405841][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1597'. [ 595.458273][T10633] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1599'. [ 595.478607][T10630] nbd: must specify at least one socket [ 597.892115][T10676] netlink: 'syz.5.1609': attribute type 15 has an invalid length. [ 597.929468][T10677] loop8: detected capacity change from 0 to 512 [ 598.137501][T10677] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1607: invalid block [ 598.273478][T10677] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1607: invalid indirect mapped block 10 (level 1) [ 598.364044][T10677] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1607: invalid indirect mapped block 8 (level 1) [ 598.431340][T10677] EXT4-fs (loop8): 1 truncate cleaned up [ 598.478690][T10687] nbd: must specify at least one socket [ 598.484451][T10677] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 599.234542][T10696] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 599.294155][T10691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.477457][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 601.283848][T10728] netlink: 'syz.8.1622': attribute type 15 has an invalid length. [ 602.257755][T10742] nbd: must specify at least one socket [ 603.785569][T10755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 603.834604][T10759] Cannot find set identified by id 0 to match [ 603.905777][T10764] netlink: 'syz.3.1629': attribute type 21 has an invalid length. [ 605.512887][T10782] netlink: 'syz.5.1635': attribute type 15 has an invalid length. [ 606.070256][T10795] nbd: must specify at least one socket [ 608.025834][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1642'. [ 610.038313][T10840] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1647'. [ 610.309444][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.317109][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.422841][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.481687][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.796847][T10813] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.805975][T10813] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.817651][T10813] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.827425][T10813] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.154713][T10846] netlink: 'syz.3.1648': attribute type 15 has an invalid length. [ 612.255756][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1651'. [ 614.224390][T10893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.380270][T10897] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 614.522922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 614.604220][T10901] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1662'. [ 614.679205][T10901] device syzkaller0 entered promiscuous mode [ 614.904434][T10908] netlink: 'syz.0.1664': attribute type 15 has an invalid length. [ 615.252624][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1666'. [ 615.269658][T10920] loop5: detected capacity change from 0 to 512 [ 615.403323][T10920] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.1668: invalid block [ 615.422795][T10920] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1668: invalid indirect mapped block 10 (level 1) [ 615.453709][T10920] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1668: invalid indirect mapped block 8 (level 1) [ 615.580248][T10920] EXT4-fs (loop5): 1 truncate cleaned up [ 615.618960][T10920] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 616.223266][T10932] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 616.437575][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 617.684540][T10944] device syzkaller0 entered promiscuous mode [ 617.886467][T10951] netlink: 'syz.8.1675': attribute type 1 has an invalid length. [ 617.972529][T10951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.018296][T10957] netlink: 'syz.9.1677': attribute type 15 has an invalid length. [ 618.380885][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1680'. [ 618.720213][T10975] loop9: detected capacity change from 0 to 512 [ 620.743463][T10975] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1683: invalid indirect mapped block 10 (level 1) [ 620.823253][T10975] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1683: invalid indirect mapped block 8 (level 1) [ 620.881783][T10975] EXT4-fs (loop9): 1 truncate cleaned up [ 620.918300][T10975] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 621.119951][T11000] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 621.230451][T11000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.334861][T11005] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 621.893837][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 621.954820][T11010] netlink: 'syz.0.1693': attribute type 15 has an invalid length. [ 622.031817][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1695'. [ 624.787713][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.794143][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.518632][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.526159][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.375590][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 626.558548][T11065] netlink: 'syz.5.1708': attribute type 15 has an invalid length. [ 627.809135][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1701'. [ 627.859494][T11087] device netdevsim0 entered promiscuous mode [ 628.246544][T11102] loop9: detected capacity change from 0 to 512 [ 628.339112][T11107] netlink: 'syz.8.1723': attribute type 15 has an invalid length. [ 628.352000][T11102] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1721: invalid indirect mapped block 10 (level 1) [ 628.373795][T11102] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1721: invalid indirect mapped block 8 (level 1) [ 628.478392][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 628.488495][T11102] EXT4-fs (loop9): 1 truncate cleaned up [ 628.494386][T11102] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 629.606131][T11117] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 630.062308][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 630.741238][T11160] netlink: 'syz.9.1736': attribute type 15 has an invalid length. [ 631.156932][T11183] loop0: detected capacity change from 0 to 512 [ 631.233632][T11171] IPVS: Scheduler module ip_vs_ not found [ 631.254115][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1739'. [ 631.267362][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1738'. [ 631.292015][T11183] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1741: invalid block [ 631.312409][T11188] netlink: 'syz.5.1739': attribute type 1 has an invalid length. [ 631.371491][T11183] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1741: invalid indirect mapped block 10 (level 1) [ 631.397402][T11183] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1741: invalid indirect mapped block 8 (level 1) [ 631.508329][T11183] EXT4-fs (loop0): 1 truncate cleaned up [ 631.543859][T11183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 632.059614][T11200] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 632.642596][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 633.691561][T11234] netlink: 'syz.0.1750': attribute type 15 has an invalid length. [ 634.317355][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1756'. [ 634.333562][T11251] loop0: detected capacity change from 0 to 512 [ 634.431894][T11251] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1757: invalid indirect mapped block 10 (level 1) [ 634.462730][T11251] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1757: invalid indirect mapped block 8 (level 1) [ 634.614219][T11251] EXT4-fs (loop0): 1 truncate cleaned up [ 634.621786][T11251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 635.336393][T11267] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 635.450008][T11270] netlink: 'syz.8.1762': attribute type 15 has an invalid length. [ 635.588856][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 635.931488][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1765'. [ 636.327297][T11296] device syzkaller0 entered promiscuous mode [ 636.364957][T11296] tipc: Started in network mode [ 636.384385][T11296] tipc: Node identity b2296fb318cd, cluster identity 4711 [ 636.409762][T11296] tipc: Enabled bearer , priority 0 [ 636.455042][T11295] tipc: Resetting bearer [ 636.456889][T11300] loop5: detected capacity change from 0 to 512 [ 636.651052][T11300] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1774: invalid indirect mapped block 10 (level 1) [ 636.683448][T11300] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1774: invalid indirect mapped block 8 (level 1) [ 636.698566][T11300] EXT4-fs (loop5): 1 truncate cleaned up [ 636.713051][T11300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 636.941550][T11300] EXT4-fs (loop5): shut down requested (2) [ 637.310282][T11295] tipc: Disabling bearer [ 637.355075][T11306] netlink: 'syz.0.1775': attribute type 15 has an invalid length. [ 637.967972][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1782'. [ 638.107612][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 638.272034][T11333] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 639.453953][T11354] netlink: 'syz.8.1788': attribute type 15 has an invalid length. [ 639.626116][T11356] device syzkaller0 entered promiscuous mode [ 639.669231][T11356] 0: reclassify loop, rule prio 0, protocol 700 [ 639.873750][T11365] xt_l2tp: v2 doesn't support IP mode [ 639.888028][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1792'. [ 640.547678][T11385] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1798'. [ 640.990747][T11397] netlink: 'syz.9.1802': attribute type 15 has an invalid length. [ 641.055308][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 641.942140][T11436] loop9: detected capacity change from 0 to 512 [ 641.959855][T11431] device syzkaller0 entered promiscuous mode [ 642.023718][T11436] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.1813: invalid block [ 642.083567][T11436] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1813: invalid indirect mapped block 10 (level 1) [ 642.130504][T11436] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1813: invalid indirect mapped block 8 (level 1) [ 642.150532][T11436] EXT4-fs (loop9): 1 truncate cleaned up [ 642.156676][T11436] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 642.200589][T11436] EXT4-fs (loop9): shut down requested (2) [ 642.628686][T11457] netlink: 'syz.5.1816': attribute type 15 has an invalid length. [ 643.133876][T11465] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 643.365303][T11472] loop0: detected capacity change from 0 to 1024 [ 643.804557][ T26] audit: type=1800 audit(1777957871.786:17): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1819" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 646.246452][ T6761] EXT4-fs (loop9): unmounting filesystem. [ 646.908082][T11534] loop8: detected capacity change from 0 to 512 [ 646.956910][T11534] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 648.805193][T11548] netlink: 'syz.3.1827': attribute type 15 has an invalid length. [ 648.845163][T11546] device syzkaller0 entered promiscuous mode [ 649.375306][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 651.165838][T11593] netlink: 'syz.5.1853': attribute type 15 has an invalid length. [ 651.679234][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1856'. [ 653.154292][T11650] netlink: 'syz.0.1865': attribute type 15 has an invalid length. [ 653.273776][T11655] device syzkaller0 entered promiscuous mode [ 653.464865][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 653.844009][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1874'. [ 654.208518][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1880'. [ 654.272561][T11698] netlink: 'syz.3.1881': attribute type 15 has an invalid length. [ 654.568889][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1886'. [ 655.275472][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1893'. [ 655.370846][T11741] netlink: 'syz.0.1894': attribute type 15 has an invalid length. [ 655.538197][T11749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1895'. [ 655.975429][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1901'. [ 656.439519][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 656.474486][T11785] netlink: 'syz.8.1907': attribute type 15 has an invalid length. [ 657.308431][T11807] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1913'. [ 657.379505][T11810] device syzkaller0 entered promiscuous mode [ 657.522026][T11816] syz.5.1917 sent an empty control message without MSG_MORE. [ 657.627837][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1919'. [ 657.661197][T11822] netlink: 'syz.0.1920': attribute type 15 has an invalid length. [ 658.028613][T11826] device syzkaller0 entered promiscuous mode [ 661.366215][T11863] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1932'. [ 661.408142][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 661.424139][T11868] device syzkaller0 entered promiscuous mode [ 661.595207][T11875] netlink: 'syz.8.1934': attribute type 15 has an invalid length. [ 662.148400][T11898] Bluetooth: MGMT ver 1.22 [ 662.602696][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'. [ 662.844460][T11920] netlink: 'syz.5.1951': attribute type 15 has an invalid length. [ 664.024728][T11962] device syzkaller0 entered promiscuous mode [ 664.085912][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1962'. [ 667.480885][T11980] netlink: 'syz.8.1965': attribute type 15 has an invalid length. [ 668.111647][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1978'. [ 668.733780][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1985'. [ 669.977805][T12057] batman_adv: batadv0: Interface deactivated: dummy0 [ 670.424704][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.479631][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.655456][T12057] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.664721][T12057] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.673934][T12057] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.682334][T12057] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.874349][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1998'. [ 673.469541][T12195] tipc: Enabled bearer , priority 0 [ 673.509473][T12195] device syzkaller0 entered promiscuous mode [ 673.724184][T12195] tipc: Resetting bearer [ 673.759481][T12214] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2009'. [ 673.853207][T12194] tipc: Resetting bearer [ 674.038802][T12194] tipc: Disabling bearer [ 674.461187][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 675.389499][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.396910][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.977018][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.009735][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.356595][T12249] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.366053][T12249] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.375388][T12249] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.384896][T12249] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.527113][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2022'. [ 677.724215][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2035'. [ 677.963715][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2038'. [ 680.345395][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 680.361021][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2052'. [ 680.546014][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 682.048137][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.055646][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.304587][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.360700][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.756369][T12405] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.764934][T12405] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.773739][T12405] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.782140][T12405] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.824484][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2064'. [ 684.195445][T12465] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2068'. [ 684.282222][T12465] device syzkaller0 entered promiscuous mode [ 685.012993][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2069'. [ 685.847831][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.854484][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.244251][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2084'. [ 688.373864][T12522] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2087'. [ 688.403147][T12522] device syzkaller0 entered promiscuous mode [ 691.611891][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2099'. [ 693.954701][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2112'. [ 694.038911][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 695.278635][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2126'. [ 695.302047][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2127'. [ 695.336060][T12656] device vlan2 entered promiscuous mode [ 695.359632][T12656] device bond0 entered promiscuous mode [ 695.384281][T12656] device bond_slave_0 entered promiscuous mode [ 695.421291][T12656] device bond_slave_1 entered promiscuous mode [ 695.711724][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2129'. [ 696.272677][T12694] netlink: 'syz.5.2138': attribute type 13 has an invalid length. [ 696.300180][T12694] netlink: 'syz.5.2138': attribute type 17 has an invalid length. [ 696.661128][T12694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 696.706953][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.727510][T12694] batman_adv: batadv0: Interface activated: dummy0 [ 696.771466][T12694] batadv0: mtu less than device minimum [ 696.803114][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.815609][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.828048][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.840507][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.852991][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.865388][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.877812][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.890262][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 696.902697][T12694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 697.129342][T12694] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 698.474819][T12769] netlink: 'syz.3.2158': attribute type 13 has an invalid length. [ 698.509199][T12769] netlink: 'syz.3.2158': attribute type 17 has an invalid length. [ 698.693384][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2159'. [ 698.792366][T12769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.847048][T12769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.376801][T12803] loop8: detected capacity change from 0 to 512 [ 699.446275][T12803] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2168: invalid indirect mapped block 10 (level 1) [ 699.455206][T12797] xt_hashlimit: size too large, truncated to 1048576 [ 699.467050][T12803] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2168: invalid indirect mapped block 8 (level 1) [ 699.584128][T12803] EXT4-fs (loop8): 1 truncate cleaned up [ 699.589962][T12803] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 699.707537][T12803] EXT4-fs (loop8): shut down requested (2) [ 700.373762][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2173'. [ 700.934864][T12843] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 701.232457][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 701.499675][T12856] loop8: detected capacity change from 0 to 512 [ 701.557201][T12856] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 703.261079][T12862] device syzkaller1 entered promiscuous mode [ 704.152862][T12887] loop0: detected capacity change from 0 to 512 [ 704.254854][T12887] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2190: invalid indirect mapped block 10 (level 1) [ 704.359608][T12887] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2190: invalid indirect mapped block 8 (level 1) [ 704.407714][T12887] EXT4-fs (loop0): 1 truncate cleaned up [ 704.443060][T12887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 704.554629][T12887] EXT4-fs (loop0): shut down requested (2) [ 704.682632][T12900] loop5: detected capacity change from 0 to 512 [ 704.763784][T12900] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 706.777842][T12912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2183'. [ 706.809852][T12912] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2183'. [ 706.840400][T12912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2183'. [ 706.885893][T12912] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2183'. [ 706.918832][T12915] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 707.320575][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 708.639201][T12961] loop9: detected capacity change from 0 to 512 [ 708.697150][T12961] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 710.232784][T12963] tipc: Enabled bearer , priority 0 [ 710.410821][T12964] device syzkaller0 entered promiscuous mode [ 710.458719][T12970] loop0: detected capacity change from 0 to 512 [ 710.494828][T12964] tipc: Resetting bearer [ 710.528307][T12970] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2208: invalid indirect mapped block 10 (level 1) [ 710.555384][T12970] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2208: invalid indirect mapped block 8 (level 1) [ 710.571017][T12956] tipc: Resetting bearer [ 710.644611][T12970] EXT4-fs (loop0): 1 truncate cleaned up [ 710.650360][T12970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 710.774669][T12970] EXT4-fs (loop0): shut down requested (2) [ 711.535733][T12990] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 711.949299][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 714.445225][T12956] tipc: Disabling bearer [ 714.456684][T10850] tipc: Node number set to 2867097523 [ 714.493024][T12998] tipc: Enabling of bearer rejected, failed to enable media [ 714.853620][T13020] binder: 13019:13020 ioctl c0306201 0 returned -14 [ 714.909594][T13020] loop0: detected capacity change from 0 to 512 [ 714.952462][T13020] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 715.488246][T13038] netlink: 'syz.9.2223': attribute type 15 has an invalid length. [ 717.470070][T13056] tipc: Enabled bearer , priority 0 [ 717.619510][T13054] tipc: Disabling bearer [ 718.023027][T13074] netlink: 'syz.9.2234': attribute type 15 has an invalid length. [ 718.111280][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2236'. [ 718.650275][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2236'. [ 718.681407][T13082] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2236'. [ 719.031356][T13098] binder: 13097:13098 ioctl c0306201 0 returned -14 [ 719.102880][T13098] loop8: detected capacity change from 0 to 512 [ 719.142476][T13098] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 719.305439][T13109] tipc: Enabled bearer , priority 0 [ 719.375079][T13108] tipc: Disabling bearer [ 720.064665][T13116] loop0: detected capacity change from 0 to 512 [ 720.145516][T13116] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2246: invalid indirect mapped block 10 (level 1) [ 720.248320][T13116] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2246: invalid indirect mapped block 8 (level 1) [ 720.293775][T13127] netlink: 'syz.8.2248': attribute type 15 has an invalid length. [ 720.334854][T13116] EXT4-fs (loop0): 1 truncate cleaned up [ 720.341283][T13116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 720.442675][T13116] EXT4-fs (loop0): shut down requested (2) [ 720.709207][T13137] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 720.915342][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 721.147046][T13149] device syzkaller0 entered promiscuous mode [ 721.207147][T13149] net_ratelimit: 12 callbacks suppressed [ 721.207160][T13149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.069098][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2257'. [ 722.143998][T13167] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2257'. [ 722.199954][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2257'. [ 722.222081][T13167] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2257'. [ 722.269074][T13175] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 722.314398][T13175] bond0: (slave lo): Error: Device type is different from other slaves [ 722.327281][T13178] netlink: 'syz.3.2261': attribute type 15 has an invalid length. [ 722.601709][T13184] loop5: detected capacity change from 0 to 512 [ 722.730792][T13184] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.2263: invalid block [ 722.833518][T13184] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2263: invalid indirect mapped block 10 (level 1) [ 722.872225][T13184] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2263: invalid indirect mapped block 8 (level 1) [ 722.955832][T13184] EXT4-fs (loop5): 1 truncate cleaned up [ 722.965564][T13184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 723.011666][T13184] EXT4-fs (loop5): shut down requested (2) [ 723.238912][T13198] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 723.484141][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 724.083085][T13227] netlink: 'syz.0.2272': attribute type 15 has an invalid length. [ 724.454506][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2273'. [ 724.654117][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2274'. [ 724.712416][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2274'. [ 724.796837][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2274'. [ 724.914736][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2274'. [ 725.083297][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2276'. [ 725.204267][T13252] loop0: detected capacity change from 0 to 512 [ 725.302799][T13252] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.2279: invalid block [ 725.332298][T13252] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2279: invalid indirect mapped block 10 (level 1) [ 725.422789][T13252] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2279: invalid indirect mapped block 8 (level 1) [ 725.559633][T13252] EXT4-fs (loop0): 1 truncate cleaned up [ 725.569690][T13252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 725.593974][T13267] netlink: 'syz.3.2283': attribute type 15 has an invalid length. [ 725.613497][T13266] device syzkaller1 entered promiscuous mode [ 725.727271][T13252] EXT4-fs (loop0): shut down requested (2) [ 725.972289][T13275] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 726.159225][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 726.312331][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2285'. [ 726.764792][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2290'. [ 726.798877][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2290'. [ 726.828205][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2290'. [ 727.119923][T13310] loop0: detected capacity change from 0 to 1024 [ 727.452151][ T26] audit: type=1800 audit(1777957955.426:18): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2294" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 728.137773][T13324] loop8: detected capacity change from 0 to 512 [ 728.276344][T13328] netlink: 'syz.9.2299': attribute type 1 has an invalid length. [ 728.291914][T13324] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.2298: invalid block [ 728.466356][T13324] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2298: invalid indirect mapped block 10 (level 1) [ 728.489100][T13328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.652291][T13324] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2298: invalid indirect mapped block 8 (level 1) [ 728.852680][T13324] EXT4-fs (loop8): 1 truncate cleaned up [ 728.878496][T13324] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 728.965838][T13324] EXT4-fs (loop8): shut down requested (2) [ 729.209543][T13353] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 729.411791][ T6727] EXT4-fs (loop8): unmounting filesystem. [ 731.330217][T13401] __nla_validate_parse: 2 callbacks suppressed [ 731.330237][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 731.592154][T13407] loop5: detected capacity change from 0 to 512 [ 731.705751][T13407] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.2318: invalid block [ 731.732559][T13407] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2318: invalid indirect mapped block 10 (level 1) [ 731.766844][T13407] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2318: invalid indirect mapped block 8 (level 1) [ 731.817008][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2320'. [ 731.839163][T13407] EXT4-fs (loop5): 1 truncate cleaned up [ 731.872395][T13407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 732.033292][T13407] EXT4-fs (loop5): shut down requested (2) [ 732.297995][T13421] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 732.466295][T13424] loop0: detected capacity change from 0 to 1024 [ 732.549028][ T6085] EXT4-fs (loop5): unmounting filesystem. [ 732.899633][ T26] audit: type=1800 audit(1777957960.876:19): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2323" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 733.699247][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2329'. [ 734.907396][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2334'. [ 738.485246][T13538] device syzkaller1 entered promiscuous mode [ 740.739788][T13587] loop8: detected capacity change from 0 to 1024 [ 740.974189][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 741.210961][ T26] audit: type=1800 audit(1777957969.186:20): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2368" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 742.358434][T13640] loop5: detected capacity change from 0 to 1024 [ 742.750452][ T26] audit: type=1800 audit(1777957970.726:21): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2381" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 743.649451][T13658] loop5: detected capacity change from 0 to 1024 [ 744.086824][ T26] audit: type=1800 audit(1777957972.036:22): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2386" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 745.093797][T13692] loop0: detected capacity change from 0 to 1024 [ 745.125496][T13687] device syzkaller0 entered promiscuous mode [ 745.452143][ T26] audit: type=1800 audit(1777957973.426:23): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2396" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 746.942516][T13731] loop9: detected capacity change from 0 to 1024 [ 747.352585][ T26] audit: type=1800 audit(1777957975.306:24): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2405" name="file1" dev="loop9" ino=2 res=0 errno=0 [ 747.374058][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.380438][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.762966][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2408'. [ 751.199632][T13764] loop9: detected capacity change from 0 to 1024 [ 751.248607][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2417'. [ 751.729886][ T26] audit: type=1800 audit(1777957979.616:25): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2416" name="file1" dev="loop9" ino=2 res=0 errno=0 [ 752.622832][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2424'. [ 752.751611][T13802] device syzkaller0 entered promiscuous mode [ 753.356062][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2430'. [ 753.705717][T13840] loop8: detected capacity change from 0 to 1024 [ 754.193458][ T26] audit: type=1800 audit(1777957982.096:26): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2433" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 757.671500][T13812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2426'. [ 757.994367][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'. [ 758.039822][T13890] loop8: detected capacity change from 0 to 1024 [ 758.540918][ T26] audit: type=1800 audit(1777957986.496:27): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2446" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 759.351640][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2453'. [ 759.794708][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2458'. [ 760.042089][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2461'. [ 760.091983][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2461'. [ 760.120777][T13949] loop0: detected capacity change from 0 to 1024 [ 760.134098][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2461'. [ 760.180165][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2461'. [ 760.526070][ T26] audit: type=1800 audit(1777957988.476:28): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2463" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 761.287274][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2469'. [ 761.665119][T13992] tipc: Enabling of bearer rejected, failed to enable media [ 761.759601][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2473'. [ 762.847182][T14031] __nla_validate_parse: 5 callbacks suppressed [ 762.847315][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 764.431681][T14068] loop0: detected capacity change from 0 to 1024 [ 764.853926][ T26] audit: type=1800 audit(1777957992.806:29): pid=14075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2497" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 765.462161][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2501'. [ 765.695248][T14092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 766.377856][T14118] loop5: detected capacity change from 0 to 1024 [ 766.764598][ T26] audit: type=1800 audit(1777957994.716:30): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2513" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 767.511696][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2516'. [ 767.622395][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2518'. [ 768.017101][T14154] netlink: 'syz.0.2525': attribute type 1 has an invalid length. [ 768.092350][T14154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 768.531697][T14174] loop8: detected capacity change from 0 to 1024 [ 768.731780][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'. [ 768.996472][ T26] audit: type=1800 audit(1777957996.886:31): pid=14190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2530" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 769.455038][T14194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2534'. [ 769.816636][T14205] netlink: 'syz.9.2539': attribute type 1 has an invalid length. [ 769.878482][T14205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.008478][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 770.177267][T14219] device syzkaller0 entered promiscuous mode [ 770.379011][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 770.431976][T14234] loop5: detected capacity change from 0 to 1024 [ 770.863320][ T26] audit: type=1800 audit(1777957998.796:32): pid=14243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2546" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 771.467659][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2548'. [ 774.759340][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 774.796289][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 774.806098][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 774.835755][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 774.845340][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 774.852732][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.878467][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 774.886177][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 774.893832][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 774.901939][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 774.909904][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 774.919733][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.808182][T14263] netlink: 'syz.5.2554': attribute type 1 has an invalid length. [ 776.840922][T14281] device syzkaller0 entered promiscuous mode [ 776.963487][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 777.015114][T14325] loop5: detected capacity change from 0 to 1024 [ 777.445262][ T26] audit: type=1800 audit(1777958005.396:33): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2574" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 778.365351][T14351] loop8: detected capacity change from 0 to 512 [ 778.388618][T14351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 778.452041][T14355] netlink: 'syz.0.2583': attribute type 1 has an invalid length. [ 778.491232][T14351] ------------[ cut here ]------------ [ 778.497638][T14351] EA inode 11 i_nlink=0 [ 778.501190][T14351] WARNING: CPU: 1 PID: 14351 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 778.516184][T14351] Modules linked in: [ 778.520153][T14351] CPU: 1 PID: 14351 Comm: syz.8.2581 Not tainted syzkaller #0 [ 778.527888][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.538087][T14351] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 778.544896][T14351] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 0a c8 9b ff 49 8b 37 48 c7 c7 c0 a1 a0 8a 89 da e8 99 2b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 2c f6 07 [ 778.564816][T14351] RSP: 0018:ffffc90003627200 EFLAGS: 00010246 [ 778.570952][T14351] RAX: 5d47194aba5d9100 RBX: 0000000000000000 RCX: 0000000000080000 [ 778.579100][T14351] RDX: ffffc90010ed9000 RSI: 0000000000035f6d RDI: 0000000000035f6e [ 778.587181][T14351] RBP: ffffc900036272f8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 778.595278][T14351] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88807152d2f0 [ 778.603345][T14351] R13: 1ffff1100e2a5a9d R14: dffffc0000000000 R15: ffff88807152d330 [ 778.611367][T14351] FS: 00007ffb144656c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 778.620431][T14351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.627137][T14351] CR2: 00007ff960e8ed58 CR3: 000000005103c000 CR4: 00000000003506e0 [ 778.635232][T14351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 778.643298][T14351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 778.651327][T14351] Call Trace: [ 778.654755][T14351] [ 778.657778][T14351] ? ext4_xattr_block_csum+0x560/0x560 [ 778.663365][T14351] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 778.668902][T14351] ext4_xattr_set_entry+0xb33/0x1e90 [ 778.674374][T14351] ext4_xattr_ibody_set+0x250/0x690 [ 778.679653][T14351] ext4_expand_extra_isize_ea+0x12c7/0x1dc0 [ 778.685751][T14351] __ext4_expand_extra_isize+0x301/0x3e0 [ 778.691474][T14351] __ext4_mark_inode_dirty+0x47f/0x770 [ 778.697088][T14351] ext4_evict_inode+0xa7f/0x1110 [ 778.702096][T14351] ? _raw_spin_unlock+0x24/0x40 [ 778.707079][T14351] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 778.713085][T14351] ? do_raw_spin_unlock+0x11d/0x230 [ 778.718343][T14351] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 778.724377][T14351] evict+0x4c9/0x8d0 [ 778.728348][T14351] ? proc_nr_inodes+0x2f0/0x2f0 [ 778.732397][T14355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 778.733299][T14351] ? do_raw_spin_unlock+0x11d/0x230 [ 778.745239][T14351] ? _raw_spin_unlock+0x24/0x40 [ 778.750151][T14351] ? iput+0x768/0x980 [ 778.754265][T14351] ext4_orphan_cleanup+0xbeb/0x1420 [ 778.759555][T14351] ? ext4_orphan_del+0xbf0/0xbf0 [ 778.764633][T14351] ? ext4_register_sysfs+0x27e/0x2c0 [ 778.769993][T14351] ? errseq_check_and_advance+0x62/0x120 [ 778.775742][T14351] ext4_fill_super+0x6ee3/0x78c0 [ 778.780774][T14351] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 778.787163][T14351] ? set_blocksize+0x1d0/0x470 [ 778.792000][T14351] ? sb_set_blocksize+0xa5/0xe0 [ 778.797003][T14351] get_tree_bdev+0x3f1/0x610 [ 778.801660][T14351] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 778.808038][T14351] vfs_get_tree+0x88/0x270 [ 778.812613][T14351] do_new_mount+0x24a/0xa40 [ 778.817289][T14351] __se_sys_mount+0x2e3/0x3d0 [ 778.822038][T14351] ? __x64_sys_mount+0xc0/0xc0 [ 778.826941][T14351] ? lockdep_hardirqs_on+0x94/0x140 [ 778.832201][T14351] ? __x64_sys_mount+0x1c/0xc0 [ 778.837087][T14351] do_syscall_64+0x4c/0xa0 [ 778.841580][T14351] ? clear_bhb_loop+0x60/0xb0 [ 778.846389][T14351] ? clear_bhb_loop+0x60/0xb0 [ 778.851133][T14351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.857160][T14351] RIP: 0033:0x7ffb1359e04a [ 778.861645][T14351] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.881365][T14351] RSP: 002b:00007ffb14464e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 778.889898][T14351] RAX: ffffffffffffffda RBX: 00007ffb14464ee0 RCX: 00007ffb1359e04a [ 778.897979][T14351] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ffb14464ea0 [ 778.906063][T14351] RBP: 0000200000000180 R08: 00007ffb14464ee0 R09: 0000000000000000 [ 778.914187][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 778.922210][T14351] R13: 00007ffb14464ea0 R14: 000000000000047a R15: 00002000000001c0 [ 778.930319][T14351] [ 778.933430][T14351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 778.940753][T14351] CPU: 1 PID: 14351 Comm: syz.8.2581 Not tainted syzkaller #0 [ 778.948338][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.958432][T14351] Call Trace: [ 778.961751][T14351] [ 778.964727][T14351] dump_stack_lvl+0x188/0x24e [ 778.969468][T14351] ? memcpy+0x3c/0x60 [ 778.973496][T14351] ? show_regs_print_info+0x12/0x12 [ 778.978763][T14351] ? load_image+0x400/0x400 [ 778.983328][T14351] panic+0x2e5/0x730 [ 778.987277][T14351] ? bpf_jit_dump+0xd0/0xd0 [ 778.991857][T14351] __warn+0x2f8/0x4f0 [ 778.995895][T14351] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 779.001919][T14351] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 779.007954][T14351] report_bug+0x2ba/0x4f0 [ 779.012329][T14351] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 779.018342][T14351] handle_bug+0x3a/0x70 [ 779.022534][T14351] exc_invalid_op+0x16/0x40 [ 779.027098][T14351] asm_exc_invalid_op+0x16/0x20 [ 779.031978][T14351] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 779.038601][T14351] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 0a c8 9b ff 49 8b 37 48 c7 c7 c0 a1 a0 8a 89 da e8 99 2b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 2c f6 07 [ 779.058247][T14351] RSP: 0018:ffffc90003627200 EFLAGS: 00010246 [ 779.064340][T14351] RAX: 5d47194aba5d9100 RBX: 0000000000000000 RCX: 0000000000080000 [ 779.072338][T14351] RDX: ffffc90010ed9000 RSI: 0000000000035f6d RDI: 0000000000035f6e [ 779.080432][T14351] RBP: ffffc900036272f8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 779.088427][T14351] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88807152d2f0 [ 779.096444][T14351] R13: 1ffff1100e2a5a9d R14: dffffc0000000000 R15: ffff88807152d330 [ 779.104485][T14351] ? ext4_xattr_block_csum+0x560/0x560 [ 779.109988][T14351] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 779.115494][T14351] ext4_xattr_set_entry+0xb33/0x1e90 [ 779.120857][T14351] ext4_xattr_ibody_set+0x250/0x690 [ 779.126107][T14351] ext4_expand_extra_isize_ea+0x12c7/0x1dc0 [ 779.132063][T14351] __ext4_expand_extra_isize+0x301/0x3e0 [ 779.137738][T14351] __ext4_mark_inode_dirty+0x47f/0x770 [ 779.143242][T14351] ext4_evict_inode+0xa7f/0x1110 [ 779.148210][T14351] ? _raw_spin_unlock+0x24/0x40 [ 779.153094][T14351] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 779.159027][T14351] ? do_raw_spin_unlock+0x11d/0x230 [ 779.164250][T14351] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 779.170186][T14351] evict+0x4c9/0x8d0 [ 779.174122][T14351] ? proc_nr_inodes+0x2f0/0x2f0 [ 779.179002][T14351] ? do_raw_spin_unlock+0x11d/0x230 [ 779.184228][T14351] ? _raw_spin_unlock+0x24/0x40 [ 779.189102][T14351] ? iput+0x768/0x980 [ 779.193129][T14351] ext4_orphan_cleanup+0xbeb/0x1420 [ 779.198370][T14351] ? ext4_orphan_del+0xbf0/0xbf0 [ 779.203347][T14351] ? ext4_register_sysfs+0x27e/0x2c0 [ 779.208659][T14351] ? errseq_check_and_advance+0x62/0x120 [ 779.214328][T14351] ext4_fill_super+0x6ee3/0x78c0 [ 779.219315][T14351] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 779.225601][T14351] ? set_blocksize+0x1d0/0x470 [ 779.230402][T14351] ? sb_set_blocksize+0xa5/0xe0 [ 779.235286][T14351] get_tree_bdev+0x3f1/0x610 [ 779.239904][T14351] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 779.246173][T14351] vfs_get_tree+0x88/0x270 [ 779.250652][T14351] do_new_mount+0x24a/0xa40 [ 779.255186][T14351] __se_sys_mount+0x2e3/0x3d0 [ 779.259894][T14351] ? __x64_sys_mount+0xc0/0xc0 [ 779.264692][T14351] ? lockdep_hardirqs_on+0x94/0x140 [ 779.270002][T14351] ? __x64_sys_mount+0x1c/0xc0 [ 779.274795][T14351] do_syscall_64+0x4c/0xa0 [ 779.279251][T14351] ? clear_bhb_loop+0x60/0xb0 [ 779.283978][T14351] ? clear_bhb_loop+0x60/0xb0 [ 779.288689][T14351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.294618][T14351] RIP: 0033:0x7ffb1359e04a [ 779.299064][T14351] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.318691][T14351] RSP: 002b:00007ffb14464e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 779.327134][T14351] RAX: ffffffffffffffda RBX: 00007ffb14464ee0 RCX: 00007ffb1359e04a [ 779.335129][T14351] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ffb14464ea0 [ 779.343130][T14351] RBP: 0000200000000180 R08: 00007ffb14464ee0 R09: 0000000000000000 [ 779.351127][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 779.359133][T14351] R13: 00007ffb14464ea0 R14: 000000000000047a R15: 00002000000001c0 [ 779.367140][T14351] [ 779.370325][T14351] Kernel Offset: disabled [ 779.374851][T14351] Rebooting in 86400 seconds..