last executing test programs: 1m30.721155685s ago: executing program 2 (id=23): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x2, 0xa0000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe36e3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0x2}, 0x18) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x4000005}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x200, 0xa) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) close_range(r5, r6, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r7, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r10 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r10, 0x21, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") rmdir(&(0x7f0000000180)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x9) 1m26.446770063s ago: executing program 2 (id=40): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) 1m26.045433581s ago: executing program 2 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 1m25.576607219s ago: executing program 2 (id=48): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000a80)={[{@resuid}, {@max_dir_size_kb}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1m25.174054027s ago: executing program 2 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 1m23.682498164s ago: executing program 2 (id=64): syz_read_part_table(0x638, &(0x7f00000001c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a3881affa01a", 0x0, 0x0, 0x12, 0x0, 0x0}) 1m22.482613016s ago: executing program 32 (id=64): syz_read_part_table(0x638, &(0x7f00000001c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a3881affa01a", 0x0, 0x0, 0x12, 0x0, 0x0}) 8.442636984s ago: executing program 3 (id=523): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xcc, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd43b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37a}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0xcc}}, 0xc001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x122) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x121a02, 0x0) sendfile(r6, r5, 0x0, 0x8) 7.341545645s ago: executing program 3 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xeeb4}, 0x18) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00x\xeb', 0x0, r1) close(r1) 7.199025057s ago: executing program 3 (id=528): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x16, 0x0, 0x0}) 7.039488911s ago: executing program 3 (id=531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r1, 0x0, 0xfff5, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0xa51, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff7d}, 0x1c) 6.830332114s ago: executing program 3 (id=534): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10002) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x64, r4, 0x1, 0xff7fffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x82}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x2f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x0, 0x0) io_getevents(r6, 0x2, 0x0, &(0x7f0000001340), 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.507692168s ago: executing program 3 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.332377162s ago: executing program 1 (id=541): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340), 0x0, 0x3, 0x16, 0x0, 0x0}) 5.190782374s ago: executing program 5 (id=544): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22100) write(r1, &(0x7f0000000300)="ded496c0c4a6", 0x6) 5.046889717s ago: executing program 1 (id=546): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 4.87888473s ago: executing program 5 (id=547): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 4.269035971s ago: executing program 4 (id=549): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10002) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x64, r4, 0x1, 0xff7fffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x82}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x2f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x0, 0x0) io_getevents(r6, 0x2, 0x0, &(0x7f0000001340), 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.80075763s ago: executing program 0 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16, @ANYRES32=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 2.71449873s ago: executing program 5 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 2.7091003s ago: executing program 0 (id=552): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x3e) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES8], 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000008d07e488c07741bb800425bac14a307ba86e785c3d41ced24dad93d2cb74c6328b66202b3b23e67c5fec6d13911fa5ce37801be8b4cfe0f734f1c06e5673f440c2365cbe04b8505201", @ANYRES16=r4, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x20008044}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="000826bd7000fcdbdf250200000014000200776c616e3000"/34, @ANYBLOB="0b54cb03c2110e6f8aafbb6c4587e7cadc3ad4dc815a1967a3c6555c41e91b335efe5779b35b9b721e837901dc494c3eac3c618d41a22ab2f88d1ecd85b1e40e239bccdfad36d092816c9fb19b7dacf42c8c484a7f61a4a409122d7997873b88da607d0de2e4236402a22b5406b6f0c1"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 2.566983122s ago: executing program 1 (id=553): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.513627733s ago: executing program 4 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 2.399036155s ago: executing program 1 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) msgctl$MSG_STAT(0x0, 0xb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x71) signalfd4(r2, 0x0, 0x0, 0x1000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) pwritev(r4, &(0x7f0000000780)=[{&(0x7f00000001c0)="8b7b0aec79948004bb372b0227fd", 0xe}, {0x0}], 0x2, 0x0, 0x9) 1.463219833s ago: executing program 4 (id=556): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340), 0x0, 0x3, 0x16, 0x0, 0x0}) 1.300009455s ago: executing program 5 (id=557): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 1.276626386s ago: executing program 4 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.159052638s ago: executing program 0 (id=559): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) 1.0634237s ago: executing program 5 (id=560): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) 940.204132ms ago: executing program 4 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 550.739559ms ago: executing program 4 (id=562): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 515.82793ms ago: executing program 0 (id=563): semop(0x0, &(0x7f0000000140), 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 507.79936ms ago: executing program 5 (id=564): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10002) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x64, r4, 0x1, 0xff7fffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x82}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x2f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x0, 0x0) io_getevents(r6, 0x2, 0x0, &(0x7f0000001340), 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 259.002615ms ago: executing program 0 (id=565): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 224.183365ms ago: executing program 1 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 149.587606ms ago: executing program 0 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 0s ago: executing program 1 (id=568): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340), 0x0, 0x3, 0x16, 0x0, 0x0}) kernel console output (not intermixed with test programs): batadv_slave_1 [ 88.550311][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.576421][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.589642][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.602229][ T4264] team0: Port device team_slave_0 added [ 88.619422][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.634503][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.645948][ T4264] team0: Port device team_slave_1 added [ 88.654714][ T4259] team0: Port device team_slave_0 added [ 88.662475][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.700268][ T4259] team0: Port device team_slave_1 added [ 88.761372][ T4254] team0: Port device team_slave_0 added [ 88.770268][ T4260] team0: Port device team_slave_0 added [ 88.777198][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.784845][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.812006][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.824409][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.831892][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.857949][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.880378][ T4254] team0: Port device team_slave_1 added [ 88.888262][ T4260] team0: Port device team_slave_1 added [ 88.903001][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.910371][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.936893][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.949274][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.956578][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.982580][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.998239][ T4251] device hsr_slave_0 entered promiscuous mode [ 89.005288][ T4251] device hsr_slave_1 entered promiscuous mode [ 89.056993][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.064052][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.090485][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.103834][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.111300][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.138093][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 89.138108][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 89.151498][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.189595][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.196955][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.223380][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.236772][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.243767][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.269821][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.280542][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 89.286980][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 89.287035][ T4261] Bluetooth: hci3: command 0x0409 tx timeout [ 89.309911][ T4259] device hsr_slave_0 entered promiscuous mode [ 89.317945][ T4259] device hsr_slave_1 entered promiscuous mode [ 89.324997][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.336215][ T4259] Cannot create hsr debugfs directory [ 89.406709][ T4254] device hsr_slave_0 entered promiscuous mode [ 89.413917][ T4254] device hsr_slave_1 entered promiscuous mode [ 89.421154][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.428879][ T4254] Cannot create hsr debugfs directory [ 89.449300][ T4264] device hsr_slave_0 entered promiscuous mode [ 89.457243][ T4264] device hsr_slave_1 entered promiscuous mode [ 89.464536][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.473671][ T4264] Cannot create hsr debugfs directory [ 89.548825][ T4260] device hsr_slave_0 entered promiscuous mode [ 89.556441][ T4260] device hsr_slave_1 entered promiscuous mode [ 89.563624][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.571802][ T4260] Cannot create hsr debugfs directory [ 89.898834][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.911530][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.931819][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.941845][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.986646][ T4259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.997267][ T4259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.012685][ T4259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.037413][ T4259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.098705][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.111880][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.138921][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.159849][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.272777][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.283914][ T4254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.319100][ T4254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.347304][ T4254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.360323][ T4254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.373428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.386209][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.401563][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.413299][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.428256][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.435315][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.449944][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.463205][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.485503][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.495558][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.505322][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.512777][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.522744][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.532471][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.542453][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.549794][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.558594][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.586036][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.599506][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.608297][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.616747][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.639326][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.653848][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.664405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.673824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.686118][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.693708][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.702818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.737308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.750282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.759806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.769527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.778722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.788053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.797630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.807041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.816746][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.824106][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.832617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.842496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.855133][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.910322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.920862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.930084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.939867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.948581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.957699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.967087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.975613][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.982919][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.991194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.000684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.011030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.020686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.031226][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.038396][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.054388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.063193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.073284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.089247][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.120104][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.129292][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.164291][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.181209][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.194798][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.205787][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 91.207325][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 91.218577][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.233557][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.245626][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.258820][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.299611][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.322318][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.341829][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.356281][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 91.358823][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.362357][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 91.376937][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 91.381168][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.395236][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.410188][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.422638][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.439818][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.462369][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.492010][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.530949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.553235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.605519][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.629952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.644267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.668258][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.698456][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.711847][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.735180][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.742547][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.776517][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.806750][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.827733][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.846558][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.855232][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.867610][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.893128][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.927238][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.946610][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.953895][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.976382][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.997042][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.016345][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.030018][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.037254][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.045629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.108612][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.116387][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.140753][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.158000][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.173127][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.184072][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.199015][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.212273][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.225480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.241763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.254774][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.268212][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.278093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.288607][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.297373][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.307517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.319104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.320994][ T7] cfg80211: failed to load regulatory.db [ 92.339632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.349751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.371243][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.387825][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.406559][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.426201][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.446614][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.454213][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.491711][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.513792][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.522586][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.544347][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.577677][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.608862][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.756441][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.765505][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.838917][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.874183][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.916981][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.944722][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.983472][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.013284][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.034243][ T4260] device veth0_vlan entered promiscuous mode [ 93.078959][ T4259] device veth0_vlan entered promiscuous mode [ 93.106113][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.127212][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.164792][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.182752][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.210699][ T4260] device veth1_vlan entered promiscuous mode [ 93.242741][ T4259] device veth1_vlan entered promiscuous mode [ 93.276401][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 93.276412][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 93.306049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.314532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.371569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.398616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.430829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.439250][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 93.447125][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 93.453215][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 93.467426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.510202][ T4260] device veth0_macvtap entered promiscuous mode [ 93.552459][ T4259] device veth0_macvtap entered promiscuous mode [ 93.564759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.577643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.587196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.597497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.605148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.614835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.623996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.632679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.651522][ T4260] device veth1_macvtap entered promiscuous mode [ 93.667298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.681793][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.691027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.729567][ T4251] device veth0_vlan entered promiscuous mode [ 93.736835][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.744954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.753081][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.764412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.774823][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.787711][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.803030][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.816935][ T4259] device veth1_macvtap entered promiscuous mode [ 93.846615][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.856650][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.865445][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.874581][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.891288][ T4251] device veth1_vlan entered promiscuous mode [ 93.902807][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.926720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.935640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.961904][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.971506][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.981818][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991516][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.030632][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.042969][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.059647][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.075490][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.087080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.097190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.107360][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.116287][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.125066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.134849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.143865][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.152880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.162481][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.175279][ T4251] device veth0_macvtap entered promiscuous mode [ 94.195283][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.207265][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.221975][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.242031][ T4251] device veth1_macvtap entered promiscuous mode [ 94.253231][ T4264] device veth0_vlan entered promiscuous mode [ 94.262200][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.272571][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.281920][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.292031][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.308728][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.319292][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.328968][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.338177][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.371451][ T4254] device veth0_vlan entered promiscuous mode [ 94.391035][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.406917][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.415547][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.424255][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.451254][ T4254] device veth1_vlan entered promiscuous mode [ 94.460638][ T4264] device veth1_vlan entered promiscuous mode [ 94.487308][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.499773][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.510707][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.523003][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.534556][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.568252][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.577368][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.587309][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.595496][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.605274][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.617890][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.631182][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.644900][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.656159][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.669075][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.687897][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.700542][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.707606][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.720675][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.730421][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.739894][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.751453][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.761301][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.774781][ T4264] device veth0_macvtap entered promiscuous mode [ 94.789109][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.798646][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809587][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.818761][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839893][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.848739][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.859485][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.904376][ T4254] device veth0_macvtap entered promiscuous mode [ 94.914353][ T4264] device veth1_macvtap entered promiscuous mode [ 94.930861][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.944109][ T4254] device veth1_macvtap entered promiscuous mode [ 94.945213][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.010148][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.019853][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.029847][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.040271][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.049184][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.120665][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.134585][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.145005][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.156131][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.166119][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.177346][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.191754][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.204906][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.216203][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.226267][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.237106][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.246996][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.257539][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.269256][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.278847][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.288371][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.297876][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.307008][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.317135][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.334961][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.345054][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.357264][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 95.363352][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 95.368011][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.385607][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.403613][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.437546][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.449647][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.460401][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.470420][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.481723][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.494386][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.507544][ T4254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518458][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 95.525339][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 95.526025][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 95.556064][ T4254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.565287][ T4254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.579838][ T4254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.601307][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.609875][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.614946][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.628368][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.629543][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.656832][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.679587][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.696648][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.735214][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.749726][ T4342] loop3: detected capacity change from 0 to 2048 [ 95.751367][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.767275][ T4342] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.774741][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.787643][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.799250][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.812907][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.856851][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.866637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.875386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.890484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.913950][ T4342] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7: bg 0: block 234: padding at end of block bitmap is not set [ 95.933165][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.943661][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.948371][ T4342] EXT4-fs (loop3): Remounting filesystem read-only [ 95.953268][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970524][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.026541][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.050025][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.101308][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 96.126256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.264294][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.299545][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.339015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.352826][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.366936][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.383371][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.440051][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.462312][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.490804][ T4352] loop3: detected capacity change from 0 to 2048 [ 96.491451][ T4350] device macvlan1 entered promiscuous mode [ 96.503873][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.526842][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.537064][ T4352] EXT4-fs: Ignoring removed bh option [ 96.557019][ T4350] device ipvlan0 entered promiscuous mode [ 96.572169][ T4350] device ipvlan0 left promiscuous mode [ 96.580837][ T4350] device macvlan1 left promiscuous mode [ 96.593300][ T4352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.627628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.656977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.675630][ T4352] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.730021][ T4358] loop2: detected capacity change from 0 to 128 [ 96.762394][ T27] audit: type=1800 audit(1749695981.472:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file2" dev="loop2" ino=1048589 res=0 errno=0 [ 96.786907][ T4357] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.821441][ T4357] FAT-fs (loop2): Filesystem has been set read-only [ 96.836494][ T4357] syz.2.10: attempt to access beyond end of device [ 96.836494][ T4357] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 96.851909][ T4357] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.907620][ T4357] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.963161][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 97.112480][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.284362][ T27] audit: type=1326 audit(1749695981.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.372450][ T27] audit: type=1326 audit(1749695982.042:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.479074][ T27] audit: type=1326 audit(1749695982.042:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.597359][ T27] audit: type=1326 audit(1749695982.042:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.710502][ T27] audit: type=1326 audit(1749695982.042:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.734944][ T4379] xt_hashlimit: size too large, truncated to 1048576 [ 97.761573][ T4379] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 97.823619][ T27] audit: type=1326 audit(1749695982.042:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.902369][ T27] audit: type=1326 audit(1749695982.042:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 97.975043][ T27] audit: type=1326 audit(1749695982.042:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 98.057102][ T27] audit: type=1326 audit(1749695982.042:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8a98e929 code=0x7ffc0000 [ 98.707271][ T4396] loop0: detected capacity change from 0 to 1024 [ 98.766145][ T4396] ======================================================= [ 98.766145][ T4396] WARNING: The mand mount option has been deprecated and [ 98.766145][ T4396] and is ignored by this kernel. Remove the mand [ 98.766145][ T4396] option from the mount to silence this warning. [ 98.766145][ T4396] ======================================================= [ 98.908951][ T4396] EXT4-fs: Ignoring removed nobh option [ 98.979893][ T4396] EXT4-fs: Ignoring removed bh option [ 99.056621][ T4396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.241130][ T4396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.545737][ T4413] mmap: syz.4.21 (4413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.906889][ T4416] process 'syz.4.21' launched '/dev/fd/9' with NULL argv: empty string added [ 100.972616][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 101.210514][ T4436] loop0: detected capacity change from 0 to 764 [ 101.270327][ T4429] loop3: detected capacity change from 0 to 1024 [ 101.300906][ T4436] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 101.362347][ T4429] EXT4-fs: Ignoring removed nobh option [ 101.468609][ T4429] EXT4-fs: Ignoring removed bh option [ 101.544611][ T4429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.964352][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 102.153868][ T4459] random: crng reseeded on system resumption [ 102.195484][ T4295] kernel write not supported for file bpf-prog (pid: 4295 comm: kworker/0:4) [ 102.342433][ T4447] loop2: detected capacity change from 0 to 512 [ 102.435927][ T4447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.587841][ T4447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.587977][ T4447] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.771199][ T4472] loop1: detected capacity change from 0 to 2048 [ 102.864472][ T4472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.913064][ T4472] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 104.265491][ T4491] loop0: detected capacity change from 0 to 1024 [ 104.291184][ T4491] EXT4-fs: Ignoring removed nobh option [ 104.316104][ T4491] EXT4-fs: Ignoring removed bh option [ 104.339786][ T4491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.367274][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 104.492149][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.808244][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 104.808261][ T27] audit: type=1326 audit(1749695989.522:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 104.838970][ T951] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.842458][ T4505] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 104.873385][ T951] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.886628][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 104.904311][ T27] audit: type=1326 audit(1749695989.522:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.023116][ T27] audit: type=1326 audit(1749695989.522:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.053967][ T27] audit: type=1326 audit(1749695989.522:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.152170][ T27] audit: type=1326 audit(1749695989.522:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.200384][ T27] audit: type=1326 audit(1749695989.522:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.294349][ T27] audit: type=1326 audit(1749695989.522:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.325470][ T27] audit: type=1326 audit(1749695989.522:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.360572][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 105.405910][ T27] audit: type=1326 audit(1749695989.522:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.505803][ T27] audit: type=1326 audit(1749695989.522:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 105.928144][ T4532] loop2: detected capacity change from 0 to 512 [ 105.994926][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 106.020421][ T4532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.046330][ T4532] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.367633][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 106.534983][ T4552] syz.4.57[4552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.535096][ T4552] syz.4.57[4552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.948333][ T4558] lo speed is unknown, defaulting to 1000 [ 106.966684][ T4558] lo speed is unknown, defaulting to 1000 [ 106.980752][ T4558] lo speed is unknown, defaulting to 1000 [ 107.007513][ T4558] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.049588][ T4558] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 107.216677][ T4558] lo speed is unknown, defaulting to 1000 [ 107.230085][ T4558] lo speed is unknown, defaulting to 1000 [ 107.242085][ T4558] lo speed is unknown, defaulting to 1000 [ 107.253918][ T4558] lo speed is unknown, defaulting to 1000 [ 107.266277][ T4558] lo speed is unknown, defaulting to 1000 [ 107.841979][ T4417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.074198][ T4580] loop4: detected capacity change from 0 to 1024 [ 109.163185][ T4580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.285559][ T4580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.368880][ T4580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.69: missing EA_INODE flag [ 109.439086][ T4580] EXT4-fs (loop4): Remounting filesystem read-only [ 109.469872][ T4580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.69: error while reading EA inode 11 err=-117 [ 109.487488][ T4589] netlink: 260 bytes leftover after parsing attributes in process `syz.3.70'. [ 109.525686][ C1] sched: RT throttling activated [ 109.528319][ T4580] EXT4-fs (loop4): Remounting filesystem read-only [ 109.581273][ T4587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.70'. [ 109.603524][ T4417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.648298][ T4580] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.743908][ T4588] 9p: Unknown Cache mode readahead [ 109.766483][ T4417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.021562][ T4594] loop3: detected capacity change from 0 to 2048 [ 110.060847][ T4594] loop3: p1 < > p4 [ 110.100984][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 110.108001][ T4594] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.117827][ T4417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.141136][ T4596] loop0: detected capacity change from 0 to 164 [ 110.258379][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.270160][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.278391][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.315845][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.333724][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.341658][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.534777][ T4608] loop4: detected capacity change from 0 to 1024 [ 110.634443][ T4598] lo speed is unknown, defaulting to 1000 [ 110.718981][ T4605] udevd[4605]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.734258][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.757165][ T4608] EXT4-fs: Ignoring removed nobh option [ 110.762817][ T4608] EXT4-fs: Ignoring removed bh option [ 110.867689][ T4608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.923264][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 110.923284][ T27] audit: type=1326 audit(1749695995.632:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 111.015822][ T27] audit: type=1326 audit(1749695995.662:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 111.038385][ T27] audit: type=1326 audit(1749695995.662:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 111.060939][ T27] audit: type=1326 audit(1749695995.662:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 111.084370][ T27] audit: type=1326 audit(1749695995.662:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 111.167452][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.311770][ T4624] loop1: detected capacity change from 0 to 1024 [ 111.343188][ T27] audit: type=1326 audit(1749695996.052:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 111.380041][ T27] audit: type=1326 audit(1749695996.082:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 111.438403][ T4624] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.546969][ T4624] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.572886][ T27] audit: type=1326 audit(1749695996.112:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 111.648077][ T4624] JBD2: no valid journal superblock found [ 111.655613][ T27] audit: type=1326 audit(1749695996.112:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 111.665643][ T4637] loop3: detected capacity change from 0 to 512 [ 111.698272][ T4624] EXT4-fs (loop1): error loading journal [ 111.725820][ T27] audit: type=1326 audit(1749695996.112:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 111.744087][ T4637] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.808523][ T4637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.942476][ T4637] EXT4-fs (loop3): 1 truncate cleaned up [ 111.958674][ T4637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.962637][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 112.140909][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 112.169772][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 112.395810][ T4252] Bluetooth: hci2: command 0x0409 tx timeout [ 112.580160][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.599058][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.645414][ T4598] device bridge_slave_0 entered promiscuous mode [ 112.784562][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.804111][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.875542][ T4598] device bridge_slave_1 entered promiscuous mode [ 113.099974][ T4645] xt_policy: neither incoming nor outgoing policy selected [ 113.310214][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.508327][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.619790][ T4417] device hsr_slave_0 left promiscuous mode [ 113.647080][ T4417] device hsr_slave_1 left promiscuous mode [ 113.651533][ T4683] loop0: detected capacity change from 0 to 1024 [ 113.667885][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.683383][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.736511][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.765085][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.775066][ T4683] EXT4-fs: Ignoring removed nobh option [ 113.795466][ T4683] EXT4-fs: Ignoring removed bh option [ 113.831738][ T4417] device bridge_slave_1 left promiscuous mode [ 113.844208][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.874166][ T4683] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.901213][ T4417] device bridge_slave_0 left promiscuous mode [ 113.914993][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.026948][ T4417] device veth1_macvtap left promiscuous mode [ 114.042636][ T4417] device veth0_macvtap left promiscuous mode [ 114.051943][ T4417] device veth1_vlan left promiscuous mode [ 114.064140][ T4417] device veth0_vlan left promiscuous mode [ 114.106196][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.286027][ T4682] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.94: Allocating blocks 497-513 which overlap fs metadata [ 114.343116][ T4682] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.94: Allocating blocks 497-513 which overlap fs metadata [ 114.446594][ T4694] EXT4-fs (loop0): pa ffff888074295ee0: logic 0, phys. 113, len 25 [ 114.454955][ T4694] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 23, pa_free 24 [ 114.475841][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 114.832960][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 115.197193][ T4702] loop3: detected capacity change from 0 to 128 [ 115.313591][ T4704] atomic_op ffff88814cbe3998 conn xmit_atomic 0000000000000000 [ 115.686498][ T4720] loop4: detected capacity change from 0 to 256 [ 116.417012][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 116.498347][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 116.560120][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 116.607081][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.663658][ T4729] loop1: detected capacity change from 0 to 1024 [ 116.666149][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.714269][ T4729] EXT4-fs: Ignoring removed nobh option [ 116.743264][ T4729] EXT4-fs: Ignoring removed bh option [ 116.776214][ T4729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.854157][ T4729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.066230][ T4726] EXT4-fs error (device loop1): ext4_ext_map_blocks:4183: inode #15: comm syz.1.109: bad extent address lblock: 480, depth: 1 pblock 0 [ 117.091111][ T4726] EXT4-fs error (device loop1): ext4_ext_map_blocks:4183: inode #15: comm syz.1.109: bad extent address lblock: 480, depth: 1 pblock 0 [ 117.213090][ T4307] EXT4-fs error (device loop1): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:6: bad extent address lblock: 1, depth: 1 pblock 0 [ 117.231328][ T4307] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 117.248522][ T4307] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.248522][ T4307] [ 117.282090][ T4307] EXT4-fs error (device loop1): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:6: bad extent address lblock: 456, depth: 1 pblock 0 [ 117.304346][ T4307] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 456 with max blocks 1 with error 117 [ 117.317793][ T4307] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.317793][ T4307] [ 117.356274][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 117.454217][ T4417] bond0 (unregistering): Released all slaves [ 117.517755][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 117.684125][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 117.709839][ T4598] team0: Port device team_slave_0 added [ 117.787346][ T4598] team0: Port device team_slave_1 added [ 117.923408][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.935807][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.963269][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.993809][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.046574][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.135848][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.516610][ T4598] device hsr_slave_0 entered promiscuous mode [ 118.551508][ T4598] device hsr_slave_1 entered promiscuous mode [ 118.582079][ T4598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.612085][ T4598] Cannot create hsr debugfs directory [ 118.645786][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 118.758642][ T4766] loop0: detected capacity change from 0 to 512 [ 118.809865][ T4766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.996253][ T4766] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.013211][ T4766] __quota_error: 3 callbacks suppressed [ 119.013251][ T4766] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 119.029357][ T4766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 119.039017][ T4766] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.120: Failed to acquire dquot type 1 [ 119.084386][ T4766] EXT4-fs (loop0): 1 truncate cleaned up [ 119.094285][ T4766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.849439][ T4769] loop4: detected capacity change from 0 to 512 [ 119.920862][ T4766] lo speed is unknown, defaulting to 1000 [ 120.046754][ T4769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.413224][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 120.929489][ T4782] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 121.031212][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 121.085490][ T4782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.166154][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 121.268658][ T4791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 121.538973][ T4783] bond1 (unregistering): Released all slaves [ 121.601232][ T4598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.676969][ T4798] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 121.751012][ T4598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.830632][ T951] lo speed is unknown, defaulting to 1000 [ 121.838411][ T4598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.878625][ T4598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.984968][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 122.311224][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.380430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.397300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.434889][ T4822] device ipvlan2 entered promiscuous mode [ 122.453377][ T4822] bridge0: port 3(ipvlan2) entered blocking state [ 122.469102][ T4822] bridge0: port 3(ipvlan2) entered disabled state [ 122.617879][ T4818] team0: No ports can be present during mode change [ 122.634696][ T4823] netlink: 1544 bytes leftover after parsing attributes in process `syz.1.136'. [ 122.928700][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 123.180548][ T4848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.193471][ T4848] loop0: detected capacity change from 0 to 164 [ 123.234333][ T4823] team0 (unregistering): Port device team_slave_0 removed [ 123.278470][ T27] audit: type=1326 audit(1749696007.992:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.306219][ T4850] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 123.329054][ T4823] team0 (unregistering): Port device team_slave_1 removed [ 123.342551][ T27] audit: type=1326 audit(1749696008.022:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.366073][ T27] audit: type=1326 audit(1749696008.022:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.394698][ T27] audit: type=1326 audit(1749696008.042:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.418148][ T27] audit: type=1326 audit(1749696008.042:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.440756][ T27] audit: type=1326 audit(1749696008.042:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.451832][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.470579][ T27] audit: type=1326 audit(1749696008.042:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.521287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.536841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.549005][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.556200][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.564692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.585516][ T27] audit: type=1326 audit(1749696008.292:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 123.623987][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.640503][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.655105][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.662404][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.705071][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.732364][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.760646][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.764008][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.765352][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.775505][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.779032][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.787993][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.788732][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.815999][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.816753][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.820552][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.915409][ T4856] device syzkaller0 entered promiscuous mode [ 125.725761][ T4862] sch_fq: defrate 4294967295 ignored. [ 125.778608][ T4869] tipc: Enabling of bearer rejected, failed to enable media [ 125.840687][ T4873] lo speed is unknown, defaulting to 1000 [ 126.128977][ T4887] loop4: detected capacity change from 0 to 1024 [ 126.147790][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.155300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.196838][ T4887] EXT4-fs: Ignoring removed nobh option [ 126.202507][ T4887] EXT4-fs: Ignoring removed bh option [ 126.213640][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.271323][ T4887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.294627][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 126.365953][ T4887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.633400][ T4890] device hsr_slave_0 left promiscuous mode [ 126.671136][ T4899] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.155: Allocating blocks 497-513 which overlap fs metadata [ 126.966258][ T4908] sd 0:0:1:0: device reset [ 127.012122][ T4910] loop3: detected capacity change from 0 to 512 [ 127.117839][ T4910] __quota_error: 1 callbacks suppressed [ 127.117863][ T4910] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 127.197220][ T4910] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.216586][ T4910] EXT4-fs (loop3): mount failed [ 127.244134][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 128.206693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.234890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.253550][ T4926] loop4: detected capacity change from 0 to 512 [ 128.346847][ T4598] device veth0_vlan entered promiscuous mode [ 128.361465][ T4926] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.397924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.425037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.461376][ T4598] device veth1_vlan entered promiscuous mode [ 128.489693][ T4926] EXT4-fs (loop4): 1 truncate cleaned up [ 128.507116][ T4936] capability: warning: `syz.1.170' uses deprecated v2 capabilities in a way that may be insecure [ 128.518811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.534498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.543656][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.571581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.634089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.659898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.686933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.720068][ T4598] device veth0_macvtap entered promiscuous mode [ 128.747570][ T4598] device veth1_macvtap entered promiscuous mode [ 128.799474][ T4944] netlink: 404 bytes leftover after parsing attributes in process `syz.1.172'. [ 128.804239][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.821444][ T4942] loop0: detected capacity change from 0 to 1024 [ 128.849673][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.868930][ T4942] EXT4-fs: Ignoring removed nobh option [ 128.869885][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.896072][ T4942] EXT4-fs: Ignoring removed bh option [ 128.911366][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.930185][ T4942] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.944598][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.975564][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.999757][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.030849][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.044152][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.058660][ T4942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.068577][ T4923] netlink: 'syz.4.162': attribute type 13 has an invalid length. [ 129.201415][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.324346][ T4923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.403026][ T4941] EXT4-fs error (device loop0): ext4_ext_map_blocks:4183: inode #15: comm syz.0.171: bad extent address lblock: 476, depth: 1 pblock 0 [ 129.445854][ T4941] EXT4-fs error (device loop0): ext4_ext_map_blocks:4183: inode #15: comm syz.0.171: bad extent address lblock: 476, depth: 1 pblock 0 [ 129.460074][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.476623][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.492325][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.516863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.519298][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 129.547154][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.589576][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.614254][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.635805][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.665397][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.695764][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.725714][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.741715][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.784860][ T9] EXT4-fs error (device loop0): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:0: bad extent address lblock: 1, depth: 1 pblock 0 [ 129.805443][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.828047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.842082][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 129.854852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.872414][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.872414][ T9] [ 129.887802][ T4598] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.911522][ T4598] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.926070][ T9] EXT4-fs error (device loop0): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:0: bad extent address lblock: 460, depth: 1 pblock 0 [ 129.945723][ T4598] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.954483][ T4598] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.976177][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 460 with max blocks 1 with error 117 [ 130.014322][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.014322][ T9] [ 130.071724][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.087031][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 130.093820][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.151792][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.252126][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.326885][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.622127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.203797][ T4977] syz.5.66[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.203907][ T4977] syz.5.66[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.246502][ T27] audit: type=1326 audit(1749696015.962:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.5.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d118e929 code=0x7ffc0000 [ 131.334792][ T4982] cgroup: subsys name conflicts with all [ 131.350924][ T27] audit: type=1326 audit(1749696015.962:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.5.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d118e929 code=0x7ffc0000 [ 131.420633][ T27] audit: type=1326 audit(1749696015.962:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.5.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fa8d118e929 code=0x7ffc0000 [ 131.468214][ T27] audit: type=1326 audit(1749696015.962:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.5.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d118e929 code=0x7ffc0000 [ 131.494517][ T4986] loop4: detected capacity change from 0 to 1024 [ 131.511157][ T4986] EXT4-fs: Ignoring removed nobh option [ 131.517336][ T27] audit: type=1326 audit(1749696015.962:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.5.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d118e929 code=0x7ffc0000 [ 131.565927][ T4986] EXT4-fs: Ignoring removed bh option [ 131.579372][ T4986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.629889][ T4986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.712678][ T4984] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.185: Allocating blocks 497-513 which overlap fs metadata [ 131.735102][ T4993] netlink: 'syz.5.188': attribute type 21 has an invalid length. [ 131.760924][ T4984] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.185: Allocating blocks 497-513 which overlap fs metadata [ 131.812313][ T4994] EXT4-fs (loop4): pa ffff88805b284460: logic 0, phys. 113, len 25 [ 131.820961][ T4994] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 22, pa_free 23 [ 132.390793][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 133.256738][ T27] audit: type=1326 audit(1749696017.972:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 133.365939][ T27] audit: type=1326 audit(1749696017.972:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 133.425066][ T5015] loop3: detected capacity change from 0 to 1024 [ 133.462270][ T27] audit: type=1326 audit(1749696017.972:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 133.506143][ T5015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.539324][ T27] audit: type=1326 audit(1749696018.012:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 133.626740][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.874495][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 134.001435][ T27] audit: type=1326 audit(1749696018.712:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 134.084520][ T27] audit: type=1326 audit(1749696018.742:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 134.153300][ T5046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.210'. [ 134.183088][ T27] audit: type=1326 audit(1749696018.742:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 134.467644][ T27] audit: type=1326 audit(1749696019.172:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 134.534278][ T27] audit: type=1326 audit(1749696019.172:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 134.592462][ T27] audit: type=1326 audit(1749696019.172:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 135.252072][ T5081] lo speed is unknown, defaulting to 1000 [ 135.541953][ T5092] netlink: 36 bytes leftover after parsing attributes in process `syz.5.226'. [ 135.638389][ T5096] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 136.122948][ T5115] syz.5.237[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.123051][ T5115] syz.5.237[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.153512][ T5116] device veth0 entered promiscuous mode [ 136.202915][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 136.400929][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.240'. [ 136.503555][ T5126] loop0: detected capacity change from 0 to 512 [ 136.539335][ T5126] journal_path: Lookup failure for './file0' [ 136.565782][ T5126] EXT4-fs: error: could not find journal device path [ 136.850191][ T5133] loop4: detected capacity change from 0 to 1024 [ 136.901555][ T5133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.963484][ T5133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.170101][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 137.575333][ T5158] loop3: detected capacity change from 0 to 2048 [ 137.661855][ T5158] loop3: p1 < > p4 [ 137.676790][ T5158] loop3: p4 size 8388608 extends beyond EOD, truncated [ 137.974167][ T5174] binfmt_misc: register: failed to install interpreter file ./file0 [ 138.078130][ T5183] tipc: Started in network mode [ 138.078225][ T5183] tipc: Node identity 529c56853a6f, cluster identity 4711 [ 138.078435][ T5183] tipc: Enabled bearer , priority 0 [ 138.103538][ T5171] tipc: Resetting bearer [ 138.302595][ T5194] loop5: detected capacity change from 0 to 512 [ 138.357686][ T5194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.407105][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.415971][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.441929][ T5194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.456902][ T5194] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.465553][ T5194] capability: warning: `syz.5.271' uses 32-bit capabilities (legacy support in use) [ 138.608542][ T4598] EXT4-fs (loop5): unmounting filesystem. [ 138.768974][ T5206] loop5: detected capacity change from 0 to 1024 [ 138.783313][ T5206] EXT4-fs: Invalid want_extra_isize 0 [ 139.090026][ T951] tipc: Node number set to 1760777861 [ 140.389819][ T5171] tipc: Disabling bearer [ 140.399294][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 140.409886][ T5190] device vlan0 entered promiscuous mode [ 140.425881][ T5190] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 140.606469][ T5230] batman_adv: batadv0: Adding interface: dummy0 [ 140.627682][ T5230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.663832][ T5230] batman_adv: batadv0: Interface activated: dummy0 [ 140.746877][ T5233] batadv0: mtu less than device minimum [ 140.768086][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.781026][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.793431][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.805980][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.818392][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.831278][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.843711][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.856121][ T5233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.947005][ T5237] loop4: detected capacity change from 0 to 512 [ 141.056951][ T5237] EXT4-fs: Ignoring removed oldalloc option [ 141.173330][ T5237] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.566958][ T5237] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.286: Parent and EA inode have the same ino 15 [ 141.671225][ T5237] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.286: Parent and EA inode have the same ino 15 [ 141.776217][ T5237] EXT4-fs (loop4): 1 orphan inode deleted [ 141.782043][ T5237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.892662][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 141.980948][ T5254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.054341][ T5258] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 144.206861][ T5276] siw: device registration error -23 [ 144.793490][ T5258] team0 (unregistering): Port device team_slave_0 removed [ 144.835171][ T5258] team0 (unregistering): Port device team_slave_1 removed [ 144.887214][ T5269] lo speed is unknown, defaulting to 1000 [ 145.022548][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 145.022564][ T27] audit: type=1800 audit(1749696029.732:184): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.297" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 145.084116][ T5273] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 145.138069][ T5273] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 145.174530][ T27] audit: type=1326 audit(1749696029.862:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.179642][ T5273] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.246486][ T27] audit: type=1326 audit(1749696029.872:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.311670][ T27] audit: type=1326 audit(1749696029.882:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.364520][ T5273] syz.4.297 (5273) used greatest stack depth: 19688 bytes left [ 145.386010][ T27] audit: type=1326 audit(1749696029.882:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.463410][ T27] audit: type=1326 audit(1749696029.882:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.561812][ T27] audit: type=1326 audit(1749696029.882:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.580783][ T951] kernel write not supported for file task/201/attr/prev (pid: 951 comm: kworker/0:2) [ 145.654866][ T27] audit: type=1326 audit(1749696029.882:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.769855][ T5304] loop3: detected capacity change from 0 to 512 [ 145.791755][ T27] audit: type=1326 audit(1749696029.882:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.815220][ T27] audit: type=1326 audit(1749696029.912:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 145.844609][ T5304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.085065][ T5304] EXT4-fs (loop3): 1 truncate cleaned up [ 147.099629][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.383405][ T5304] netlink: 'syz.3.311': attribute type 13 has an invalid length. [ 147.415895][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.318'. [ 147.427404][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.492101][ T5334] loop4: detected capacity change from 0 to 512 [ 147.498667][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 147.522842][ T5304] net_ratelimit: 11 callbacks suppressed [ 147.522853][ T5304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.553512][ T5334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.634975][ T5334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.666027][ T5334] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.788501][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 147.890420][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 147.899867][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 148.716741][ T22] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.916973][ T5360] netlink: 'syz.4.326': attribute type 4 has an invalid length. [ 149.743839][ T5359] lo speed is unknown, defaulting to 1000 [ 150.619857][ T5388] Zero length message leads to an empty skb [ 151.878305][ T5404] loop1: detected capacity change from 0 to 512 [ 151.932265][ T5404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.027001][ T5404] EXT4-fs (loop1): 1 orphan inode deleted [ 152.033241][ T5404] EXT4-fs (loop1): 1 truncate cleaned up [ 152.061929][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.179167][ T27] kauditd_printk_skb: 147 callbacks suppressed [ 152.179183][ T27] audit: type=1326 audit(1749696036.892:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.231677][ T4294] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.257185][ T4294] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.275806][ T27] audit: type=1326 audit(1749696036.922:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.325897][ T27] audit: type=1326 audit(1749696036.932:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.359785][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 152.384741][ T27] audit: type=1326 audit(1749696036.932:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.468481][ T27] audit: type=1326 audit(1749696036.932:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.562905][ T27] audit: type=1326 audit(1749696036.932:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.616606][ T5417] tipc: Started in network mode [ 152.645950][ T5417] tipc: Node identity 4a3d0ea3c011, cluster identity 4711 [ 152.651679][ T27] audit: type=1326 audit(1749696036.932:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.654307][ T5417] tipc: Enabled bearer , priority 0 [ 152.745767][ T27] audit: type=1326 audit(1749696036.932:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.806244][ T5415] tipc: Resetting bearer [ 152.814442][ T27] audit: type=1326 audit(1749696036.932:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 152.895914][ T27] audit: type=1326 audit(1749696036.932:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 153.369889][ T5428] siw: device registration error -23 [ 154.062491][ T4295] tipc: Node number set to 2318143139 [ 155.574422][ T5448] loop1: detected capacity change from 0 to 1024 [ 155.648080][ T5448] EXT4-fs: Ignoring removed nobh option [ 155.728898][ T5448] EXT4-fs: Ignoring removed bh option [ 155.759422][ T5448] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.881128][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.262421][ T5462] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.361: Allocating blocks 497-513 which overlap fs metadata [ 156.301601][ T5467] loop3: detected capacity change from 0 to 512 [ 156.373096][ T5467] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 156.424314][ T5467] EXT4-fs (loop3): invalid journal inode [ 156.452864][ T5467] EXT4-fs (loop3): can't get journal size [ 156.551224][ T5467] EXT4-fs (loop3): 1 truncate cleaned up [ 156.557038][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.742819][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 156.756303][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 158.266657][ T5415] tipc: Disabling bearer [ 158.284131][ T5469] lo speed is unknown, defaulting to 1000 [ 158.459331][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 158.459345][ T27] audit: type=1326 audit(1749696043.162:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.512663][ T951] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.540658][ T951] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.585312][ T27] audit: type=1326 audit(1749696043.212:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.620318][ T27] audit: type=1326 audit(1749696043.212:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.649789][ T27] audit: type=1326 audit(1749696043.212:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.652955][ T5488] loop5: detected capacity change from 0 to 128 [ 158.692749][ T27] audit: type=1326 audit(1749696043.212:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.753479][ T27] audit: type=1326 audit(1749696043.212:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.782993][ T27] audit: type=1326 audit(1749696043.212:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.817565][ T5494] syz.5.376: attempt to access beyond end of device [ 158.817565][ T5494] loop5: rw=2049, sector=145, nr_sectors = 192 limit=128 [ 158.837744][ T27] audit: type=1326 audit(1749696043.212:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.868446][ T27] audit: type=1326 audit(1749696043.212:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 158.907776][ T27] audit: type=1326 audit(1749696043.212:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5481 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4258e929 code=0x7ffc0000 [ 159.037983][ T4488] kworker/u4:11: attempt to access beyond end of device [ 159.037983][ T4488] loop5: rw=1, sector=337, nr_sectors = 704 limit=128 [ 159.087658][ T5499] loop1: detected capacity change from 0 to 1024 [ 159.129308][ T5499] EXT4-fs: Ignoring removed nobh option [ 159.151625][ T5499] EXT4-fs: Ignoring removed bh option [ 159.193632][ T5499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.268296][ T5499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.586843][ T5510] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.380: Allocating blocks 497-513 which overlap fs metadata [ 159.623888][ T5516] loop3: detected capacity change from 0 to 2048 [ 159.689855][ T5516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.756259][ T5516] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.941173][ T5530] loop5: detected capacity change from 0 to 512 [ 160.222658][ T5530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 160.250334][ T5530] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.261122][ T5530] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 160.261664][ T5530] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 160.264094][ T5530] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.392: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 160.271163][ T5530] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.392: couldn't read orphan inode 13 (err -117) [ 160.274072][ T5530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.609894][ T5530] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.392: inode #15: comm syz.5.392: iget: illegal inode # [ 160.672562][ T5527] lo speed is unknown, defaulting to 1000 [ 160.693410][ T5530] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 160.696149][ T5530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 160.721566][ T5530] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 160.748049][ T5410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 160.859282][ T4598] EXT4-fs (loop5): unmounting filesystem. [ 160.914622][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 161.295463][ T951] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 161.342596][ T951] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.371875][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 249 with error 117 [ 161.405106][ T42] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.405106][ T42] [ 161.439228][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 161.925046][ T5573] netlink: 'syz.1.405': attribute type 39 has an invalid length. [ 161.934378][ T5574] loop3: detected capacity change from 0 to 1024 [ 161.945450][ T5574] EXT4-fs: Ignoring removed nobh option [ 161.980043][ T5574] EXT4-fs: Ignoring removed bh option [ 162.009344][ T5574] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.092565][ T5574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.534261][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.416'. [ 163.559771][ T27] kauditd_printk_skb: 169 callbacks suppressed [ 163.559785][ T27] audit: type=1326 audit(1749696048.272:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.604521][ T4295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.627044][ T4295] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.637034][ T27] audit: type=1326 audit(1749696048.292:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.667404][ T5605] loop4: detected capacity change from 0 to 512 [ 163.674999][ T27] audit: type=1326 audit(1749696048.292:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.715881][ T27] audit: type=1326 audit(1749696048.292:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.775859][ T5605] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 163.785832][ T27] audit: type=1326 audit(1749696048.292:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.800284][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 163.808287][ T27] audit: type=1326 audit(1749696048.302:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.825583][ T5605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.837120][ T27] audit: type=1326 audit(1749696048.312:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.873146][ T5605] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 163.893904][ T5605] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.921283][ T5605] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 163.946309][ T27] audit: type=1326 audit(1749696048.312:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 163.950692][ T5605] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.414: bg 0: block 40: padding at end of block bitmap is not set [ 164.024150][ T27] audit: type=1326 audit(1749696048.312:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 164.052779][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 164.076220][ T5613] smc: net device bond0 applied user defined pnetid SYZ0 [ 164.110206][ T5605] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 164.131870][ T5613] smc: net device bond0 erased user defined pnetid SYZ0 [ 164.146053][ T5605] EXT4-fs (loop4): 1 truncate cleaned up [ 164.152264][ T5605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.822648][ T5626] loop3: detected capacity change from 0 to 2048 [ 164.822734][ T5629] loop0: detected capacity change from 0 to 128 [ 165.203009][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.452427][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 166.645559][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 166.687878][ T7] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.732808][ T7] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.813412][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 168.629522][ T5676] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.833769][ T5676] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.976993][ T5676] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.152786][ T5676] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.332677][ T5598] Set syz1 is full, maxelem 65536 reached [ 170.076922][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 170.204626][ T5676] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.253624][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 170.253638][ T27] audit: type=1326 audit(1749696054.962:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.261432][ T5676] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.312877][ T22] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.314852][ T27] audit: type=1326 audit(1749696054.962:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.343311][ T22] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.400175][ T5676] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.414111][ T27] audit: type=1326 audit(1749696054.962:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.439544][ T5676] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.492244][ T27] audit: type=1326 audit(1749696054.962:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.572854][ T27] audit: type=1326 audit(1749696054.962:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.646005][ T27] audit: type=1326 audit(1749696054.962:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.719152][ T27] audit: type=1326 audit(1749696054.962:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.779291][ T27] audit: type=1326 audit(1749696054.962:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.779335][ T27] audit: type=1326 audit(1749696054.962:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 170.779370][ T27] audit: type=1326 audit(1749696054.962:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748478e929 code=0x7ffc0000 [ 171.159028][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 171.472327][ T5733] loop4: detected capacity change from 0 to 1024 [ 171.548059][ T5733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.584186][ T5739] siw: device registration error -23 [ 172.292824][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 172.332845][ T5736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.355599][ T5736] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.362686][ T5736] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 172.393080][ T5736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.415442][ T5736] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.492162][ T5736] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 172.526258][ T5736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.552468][ T5736] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.585954][ T5736] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 172.609688][ T5736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.616234][ T5736] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.622960][ T5736] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 172.632914][ T5736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.639590][ T5736] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.646476][ T5736] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 172.853727][ T5757] lo speed is unknown, defaulting to 1000 [ 173.033813][ T5765] siw: device registration error -23 [ 173.083220][ T4293] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.490201][ T4293] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.047281][ T5780] device syzkaller0 entered promiscuous mode [ 174.316660][ T4261] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.421460][ T5793] siw: device registration error -23 [ 174.486089][ T4261] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.567502][ T4261] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.636846][ T4252] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.643096][ T4261] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.420313][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 176.636203][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 176.646094][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 176.725327][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 176.731733][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 176.846532][ T5818] siw: device registration error -23 [ 177.747286][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 178.146875][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 178.146889][ T27] audit: type=1326 audit(1749696062.862:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.186276][ T27] audit: type=1326 audit(1749696062.862:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.213709][ T27] audit: type=1326 audit(1749696062.902:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.249010][ T27] audit: type=1326 audit(1749696062.902:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.273168][ T27] audit: type=1326 audit(1749696062.902:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.309462][ T27] audit: type=1326 audit(1749696062.902:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.337001][ T27] audit: type=1326 audit(1749696062.902:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.337042][ T27] audit: type=1326 audit(1749696062.902:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.337076][ T27] audit: type=1326 audit(1749696062.902:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 178.337111][ T27] audit: type=1326 audit(1749696062.922:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd749858e7 code=0x7ffc0000 [ 181.443254][ T5865] siw: device registration error -23 [ 182.319898][ T22] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 182.356849][ T22] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.970302][ T5898] loop1: detected capacity change from 0 to 1024 [ 183.002480][ T5898] EXT4-fs: Ignoring removed nobh option [ 183.039218][ T5898] EXT4-fs: Ignoring removed bh option [ 183.081713][ T5898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.229700][ T5909] siw: device registration error -23 [ 183.496702][ T5898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.211239][ T5899] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.521: Allocating blocks 497-513 which overlap fs metadata [ 184.489683][ T27] kauditd_printk_skb: 85 callbacks suppressed [ 184.489698][ T27] audit: type=1326 audit(1749696069.202:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.534449][ T951] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 184.556195][ T951] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.590685][ T27] audit: type=1326 audit(1749696069.242:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.635915][ T27] audit: type=1326 audit(1749696069.242:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.675790][ T27] audit: type=1326 audit(1749696069.242:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.752708][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 184.817485][ T27] audit: type=1326 audit(1749696069.242:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.840621][ T27] audit: type=1326 audit(1749696069.242:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.863445][ T27] audit: type=1326 audit(1749696069.242:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.893335][ T27] audit: type=1326 audit(1749696069.242:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.927864][ T27] audit: type=1326 audit(1749696069.242:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 184.960106][ T27] audit: type=1326 audit(1749696069.242:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9b8e929 code=0x7ffc0000 [ 185.207532][ T5948] siw: device registration error -23 [ 185.973953][ T5954] loop3: detected capacity change from 0 to 512 [ 186.012668][ T5954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.058200][ T5954] EXT4-fs (loop3): 1 truncate cleaned up [ 186.064008][ T5954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.692805][ T5977] loop5: detected capacity change from 0 to 1024 [ 186.731858][ T5973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.813842][ T5977] EXT4-fs: Ignoring removed nobh option [ 186.819637][ T5977] EXT4-fs: Ignoring removed bh option [ 186.847455][ T5977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.046358][ T5973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.066360][ T5977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.254725][ T5975] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.547: Allocating blocks 497-513 which overlap fs metadata [ 187.345841][ T5985] EXT4-fs (loop5): pa ffff88805417a1c0: logic 0, phys. 113, len 25 [ 187.353874][ T5985] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 23, pa_free 24 [ 187.362321][ T5973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.521170][ T5973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.852623][ T5973] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.342827][ T5973] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.571454][ T5973] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.632202][ T5973] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.788298][ T4598] EXT4-fs (loop5): unmounting filesystem. [ 189.424872][ T6008] siw: device registration error -23 [ 189.864016][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 189.864035][ T27] audit: type=1326 audit(1749696074.512:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 189.901746][ T22] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 189.944806][ T22] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.032143][ T27] audit: type=1326 audit(1749696074.512:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.155591][ T27] audit: type=1326 audit(1749696074.572:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.213237][ T27] audit: type=1326 audit(1749696074.572:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.284012][ T6015] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 190.305710][ T27] audit: type=1326 audit(1749696074.572:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.376255][ T27] audit: type=1326 audit(1749696074.572:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.430340][ T6021] loop5: detected capacity change from 0 to 512 [ 190.482119][ T27] audit: type=1326 audit(1749696074.572:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.505134][ T6021] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.544666][ T6021] EXT4-fs (loop5): 1 truncate cleaned up [ 190.555822][ T6021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.555837][ T27] audit: type=1326 audit(1749696074.572:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.587222][ T27] audit: type=1326 audit(1749696074.572:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.609649][ T27] audit: type=1326 audit(1749696074.572:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7498e929 code=0x7ffc0000 [ 190.669099][ T6023] netlink: 'syz.4.561': attribute type 4 has an invalid length. [ 190.695733][ T6023] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.561'. [ 190.857857][ T4598] EXT4-fs (loop5): unmounting filesystem. [ 190.968792][ T6028] loop4: detected capacity change from 0 to 1024 [ 191.046860][ T6028] EXT4-fs: Ignoring removed nobh option [ 191.075968][ T6028] EXT4-fs: Ignoring removed bh option [ 191.104743][ T6028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.196383][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.224649][ T6027] ================================================================== [ 192.232801][ T6027] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 192.240240][ T6027] Read of size 4 at addr ffff8880522f5038 by task syz.4.562/6027 [ 192.247979][ T6027] [ 192.250335][ T6027] CPU: 1 PID: 6027 Comm: syz.4.562 Not tainted 6.1.141-syzkaller #0 [ 192.258338][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.268441][ T6027] Call Trace: [ 192.271740][ T6027] [ 192.274698][ T6027] dump_stack_lvl+0x168/0x22e [ 192.279419][ T6027] ? __lock_acquire+0x7c50/0x7c50 [ 192.284480][ T6027] ? show_regs_print_info+0x12/0x12 [ 192.289719][ T6027] ? load_image+0x3b0/0x3b0 [ 192.294269][ T6027] ? __virt_addr_valid+0x465/0x540 [ 192.299449][ T6027] ? ext4_find_extent+0xbcc/0xe00 [ 192.304511][ T6027] print_report+0xa8/0x220 [ 192.308963][ T6027] kasan_report+0x10b/0x140 [ 192.313504][ T6027] ? ext4_find_extent+0xbcc/0xe00 [ 192.318573][ T6027] ext4_find_extent+0xbcc/0xe00 [ 192.323467][ T6027] ext4_ext_map_blocks+0x27d/0x66d0 [ 192.328729][ T6027] ? __lock_acquire+0x12e5/0x7c50 [ 192.333806][ T6027] ? ext4_ext_release+0x10/0x10 [ 192.338699][ T6027] ? rwsem_write_trylock+0x12f/0x1b0 [ 192.344022][ T6027] ? ext4_es_lookup_extent+0x443/0xb20 [ 192.349527][ T6027] ext4_map_blocks+0x9d1/0x1b60 [ 192.354425][ T6027] ? ext4_issue_zeroout+0x250/0x250 [ 192.359665][ T6027] _ext4_get_block+0x1d7/0x4e0 [ 192.364463][ T6027] ? alloc_buffer_head+0xd4/0x100 [ 192.369538][ T6027] ? __lock_acquire+0x7c50/0x7c50 [ 192.374600][ T6027] ? ext4_get_block+0x40/0x40 [ 192.379310][ T6027] ? attach_page_private+0x110/0x300 [ 192.384646][ T6027] ? create_empty_buffers+0x59e/0x7a0 [ 192.390065][ T6027] ? do_raw_spin_unlock+0x11d/0x230 [ 192.395317][ T6027] ext4_get_block_unwritten+0x2a/0x100 [ 192.400837][ T6027] __block_write_begin_int+0x54b/0x1a70 [ 192.406699][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 192.411760][ T6027] ? page_zero_new_buffers+0x650/0x650 [ 192.417283][ T6027] ? ext4_journal_check_start+0x17e/0x240 [ 192.423048][ T6027] block_page_mkwrite+0x2d8/0x5f0 [ 192.428462][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 192.433467][ T6027] ext4_page_mkwrite+0x3b2/0x10c0 [ 192.438534][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 192.443515][ T6027] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 192.449795][ T6027] ? count_memcg_event_mm+0x8f/0x3b0 [ 192.455117][ T6027] ? count_memcg_event_mm+0x358/0x3b0 [ 192.460526][ T6027] ? vm_normal_page+0x95/0x1d0 [ 192.465326][ T6027] do_page_mkwrite+0x16b/0x5c0 [ 192.470142][ T6027] wp_page_shared+0x167/0x370 [ 192.474853][ T6027] handle_mm_fault+0x1ca6/0x3e70 [ 192.479832][ T6027] ? mt_find+0x145/0x810 [ 192.484126][ T6027] ? numa_migrate_prep+0x250/0x250 [ 192.489281][ T6027] ? lock_chain_count+0x20/0x20 [ 192.494249][ T6027] ? lock_mm_and_find_vma+0xae/0x2f0 [ 192.499570][ T6027] do_user_addr_fault+0x51f/0xb10 [ 192.504637][ T6027] exc_page_fault+0x60/0x100 [ 192.509259][ T6027] asm_exc_page_fault+0x22/0x30 [ 192.514139][ T6027] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 192.520774][ T6027] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 192.540431][ T6027] RSP: 0018:ffffc9000330fa88 EFLAGS: 00050246 [ 192.546541][ T6027] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 192.554565][ T6027] RDX: 0000000000000040 RSI: ffffc9000330fb20 RDI: 0000200000079000 [ 192.562653][ T6027] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000661f6c [ 192.570662][ T6027] R10: fffff52000661f6c R11: 1ffff92000661f64 R12: 00007fffffffefc0 [ 192.578777][ T6027] R13: 000000007ffb9a80 R14: 0000200000079000 R15: ffffc9000330fb20 [ 192.586792][ T6027] ? _copy_to_user+0xa1/0x130 [ 192.591510][ T6027] _copy_to_user+0xea/0x130 [ 192.596032][ T6027] rng_dev_read+0x3c5/0x710 [ 192.600548][ T6027] ? hwrng_yield+0x20/0x20 [ 192.604971][ T6027] ? common_file_perm+0x171/0x1c0 [ 192.610005][ T6027] ? fsnotify_perm+0x39b/0x550 [ 192.614808][ T6027] do_iter_read+0x49f/0xb10 [ 192.619347][ T6027] ? vfs_iter_read+0xa0/0xa0 [ 192.623975][ T6027] ? __import_iovec+0x315/0x500 [ 192.628862][ T6027] ? import_iovec+0x6f/0xa0 [ 192.633388][ T6027] do_preadv+0x1f6/0x330 [ 192.637647][ T6027] ? do_writev+0x410/0x410 [ 192.642079][ T6027] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.648074][ T6027] ? lock_chain_count+0x20/0x20 [ 192.652946][ T6027] ? lockdep_hardirqs_on+0x94/0x140 [ 192.658167][ T6027] do_syscall_64+0x4c/0xa0 [ 192.662617][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 192.667315][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 192.672016][ T6027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.677937][ T6027] RIP: 0033:0x7f748478e929 [ 192.682378][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.701999][ T6027] RSP: 002b:00007f748560f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 192.710423][ T6027] RAX: ffffffffffffffda RBX: 00007f74849b5fa0 RCX: 00007f748478e929 [ 192.718412][ T6027] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 192.726398][ T6027] RBP: 00007f7484810b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.734379][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.742368][ T6027] R13: 0000000000000000 R14: 00007f74849b5fa0 R15: 00007ffec03136c8 [ 192.750374][ T6027] [ 192.753490][ T6027] [ 192.755817][ T6027] The buggy address belongs to the physical page: [ 192.762247][ T6027] page:ffffea000148bd40 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x522f5 [ 192.772671][ T6027] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 192.779798][ T6027] raw: 00fff00000000000 ffffea00014109c8 ffffea00014e4288 0000000000000000 [ 192.788384][ T6027] raw: 0000000000000001 0000000000000000 00000000ffffff7f 0000000000000000 [ 192.796985][ T6027] page dumped because: kasan: bad access detected [ 192.803408][ T6027] page_owner tracks the page as freed [ 192.808775][ T6027] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5991, tgid 5990 (syz.0.550), ts 187717540968, free_ts 188609967856 [ 192.826408][ T6027] post_alloc_hook+0x173/0x1a0 [ 192.831190][ T6027] get_page_from_freelist+0x1a26/0x1ac0 [ 192.836751][ T6027] __alloc_pages+0x1df/0x4e0 [ 192.841358][ T6027] __folio_alloc+0xe/0x30 [ 192.845704][ T6027] vma_alloc_folio+0x4a3/0x900 [ 192.850500][ T6027] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 192.856256][ T6027] shmem_get_folio_gfp+0x1361/0x3400 [ 192.861553][ T6027] shmem_fault+0x1be/0x7b0 [ 192.866010][ T6027] __do_fault+0x13b/0x4e0 [ 192.870391][ T6027] handle_mm_fault+0x28ca/0x3e70 [ 192.875354][ T6027] __get_user_pages+0x3ff/0xeb0 [ 192.880228][ T6027] populate_vma_page_range+0x214/0x2b0 [ 192.885708][ T6027] __mm_populate+0x248/0x370 [ 192.890312][ T6027] vm_mmap_pgoff+0x203/0x2b0 [ 192.894909][ T6027] do_syscall_64+0x4c/0xa0 [ 192.899428][ T6027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.905338][ T6027] page last free stack trace: [ 192.910010][ T6027] free_unref_page_prepare+0x8b4/0x9a0 [ 192.915512][ T6027] free_unref_page_list+0xbb/0x8e0 [ 192.920663][ T6027] release_pages+0x1f92/0x2200 [ 192.925438][ T6027] __pagevec_release+0x6d/0xe0 [ 192.930215][ T6027] shmem_undo_range+0x75b/0x2050 [ 192.935165][ T6027] shmem_evict_inode+0x248/0xa40 [ 192.940121][ T6027] evict+0x485/0x870 [ 192.944032][ T6027] __dentry_kill+0x431/0x650 [ 192.948626][ T6027] dentry_kill+0xb8/0x290 [ 192.952961][ T6027] dput+0xfa/0x1d0 [ 192.956687][ T6027] __fput+0x5e0/0x920 [ 192.960678][ T6027] task_work_run+0x1ca/0x250 [ 192.965283][ T6027] do_exit+0x936/0x2400 [ 192.969457][ T6027] do_group_exit+0x217/0x2d0 [ 192.974061][ T6027] get_signal+0x1272/0x1350 [ 192.978574][ T6027] arch_do_signal_or_restart+0xb0/0x1230 [ 192.984223][ T6027] [ 192.986564][ T6027] Memory state around the buggy address: [ 192.992196][ T6027] ffff8880522f4f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 193.000257][ T6027] ffff8880522f4f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 193.008318][ T6027] >ffff8880522f5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 193.016380][ T6027] ^ [ 193.022269][ T6027] ffff8880522f5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 193.030334][ T6027] ffff8880522f5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 193.038396][ T6027] ================================================================== [ 193.183492][ T6027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.190762][ T6027] CPU: 1 PID: 6027 Comm: syz.4.562 Not tainted 6.1.141-syzkaller #0 [ 193.198769][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.208847][ T6027] Call Trace: [ 193.212145][ T6027] [ 193.215094][ T6027] dump_stack_lvl+0x168/0x22e [ 193.219807][ T6027] ? memcpy+0x3c/0x60 [ 193.223818][ T6027] ? show_regs_print_info+0x12/0x12 [ 193.229050][ T6027] ? load_image+0x3b0/0x3b0 [ 193.233589][ T6027] panic+0x2c9/0x710 [ 193.237505][ T6027] ? bpf_jit_dump+0xd0/0xd0 [ 193.242035][ T6027] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 193.247964][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 193.252843][ T6027] ? print_memory_metadata+0x314/0x400 [ 193.258359][ T6027] check_panic_on_warn+0x80/0xa0 [ 193.263331][ T6027] ? ext4_find_extent+0xbcc/0xe00 [ 193.268395][ T6027] end_report+0x66/0x110 [ 193.272671][ T6027] kasan_report+0x118/0x140 [ 193.277207][ T6027] ? ext4_find_extent+0xbcc/0xe00 [ 193.282258][ T6027] ext4_find_extent+0xbcc/0xe00 [ 193.287261][ T6027] ext4_ext_map_blocks+0x27d/0x66d0 [ 193.292487][ T6027] ? __lock_acquire+0x12e5/0x7c50 [ 193.297556][ T6027] ? ext4_ext_release+0x10/0x10 [ 193.302435][ T6027] ? rwsem_write_trylock+0x12f/0x1b0 [ 193.307755][ T6027] ? ext4_es_lookup_extent+0x443/0xb20 [ 193.313251][ T6027] ext4_map_blocks+0x9d1/0x1b60 [ 193.318128][ T6027] ? ext4_issue_zeroout+0x250/0x250 [ 193.323353][ T6027] _ext4_get_block+0x1d7/0x4e0 [ 193.328156][ T6027] ? alloc_buffer_head+0xd4/0x100 [ 193.333220][ T6027] ? __lock_acquire+0x7c50/0x7c50 [ 193.338273][ T6027] ? ext4_get_block+0x40/0x40 [ 193.342959][ T6027] ? attach_page_private+0x110/0x300 [ 193.348277][ T6027] ? create_empty_buffers+0x59e/0x7a0 [ 193.353682][ T6027] ? do_raw_spin_unlock+0x11d/0x230 [ 193.358919][ T6027] ext4_get_block_unwritten+0x2a/0x100 [ 193.364411][ T6027] __block_write_begin_int+0x54b/0x1a70 [ 193.370010][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 193.374968][ T6027] ? page_zero_new_buffers+0x650/0x650 [ 193.380465][ T6027] ? ext4_journal_check_start+0x17e/0x240 [ 193.386230][ T6027] block_page_mkwrite+0x2d8/0x5f0 [ 193.391278][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 193.396245][ T6027] ext4_page_mkwrite+0x3b2/0x10c0 [ 193.401297][ T6027] ? _ext4_get_block+0x4e0/0x4e0 [ 193.406255][ T6027] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 193.412525][ T6027] ? count_memcg_event_mm+0x8f/0x3b0 [ 193.417832][ T6027] ? count_memcg_event_mm+0x358/0x3b0 [ 193.423227][ T6027] ? vm_normal_page+0x95/0x1d0 [ 193.428017][ T6027] do_page_mkwrite+0x16b/0x5c0 [ 193.432808][ T6027] wp_page_shared+0x167/0x370 [ 193.437527][ T6027] handle_mm_fault+0x1ca6/0x3e70 [ 193.442505][ T6027] ? mt_find+0x145/0x810 [ 193.446790][ T6027] ? numa_migrate_prep+0x250/0x250 [ 193.451944][ T6027] ? lock_chain_count+0x20/0x20 [ 193.456838][ T6027] ? lock_mm_and_find_vma+0xae/0x2f0 [ 193.462156][ T6027] do_user_addr_fault+0x51f/0xb10 [ 193.467220][ T6027] exc_page_fault+0x60/0x100 [ 193.471836][ T6027] asm_exc_page_fault+0x22/0x30 [ 193.476710][ T6027] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 193.483330][ T6027] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 193.502958][ T6027] RSP: 0018:ffffc9000330fa88 EFLAGS: 00050246 [ 193.509040][ T6027] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 193.517020][ T6027] RDX: 0000000000000040 RSI: ffffc9000330fb20 RDI: 0000200000079000 [ 193.524997][ T6027] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000661f6c [ 193.532971][ T6027] R10: fffff52000661f6c R11: 1ffff92000661f64 R12: 00007fffffffefc0 [ 193.540945][ T6027] R13: 000000007ffb9a80 R14: 0000200000079000 R15: ffffc9000330fb20 [ 193.548941][ T6027] ? _copy_to_user+0xa1/0x130 [ 193.553642][ T6027] _copy_to_user+0xea/0x130 [ 193.558163][ T6027] rng_dev_read+0x3c5/0x710 [ 193.562675][ T6027] ? hwrng_yield+0x20/0x20 [ 193.567096][ T6027] ? common_file_perm+0x171/0x1c0 [ 193.572157][ T6027] ? fsnotify_perm+0x39b/0x550 [ 193.576957][ T6027] do_iter_read+0x49f/0xb10 [ 193.581485][ T6027] ? vfs_iter_read+0xa0/0xa0 [ 193.586087][ T6027] ? __import_iovec+0x315/0x500 [ 193.590956][ T6027] ? import_iovec+0x6f/0xa0 [ 193.595463][ T6027] do_preadv+0x1f6/0x330 [ 193.599714][ T6027] ? do_writev+0x410/0x410 [ 193.604142][ T6027] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 193.610140][ T6027] ? lock_chain_count+0x20/0x20 [ 193.615006][ T6027] ? lockdep_hardirqs_on+0x94/0x140 [ 193.620208][ T6027] do_syscall_64+0x4c/0xa0 [ 193.624633][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 193.629315][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 193.634000][ T6027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.639905][ T6027] RIP: 0033:0x7f748478e929 [ 193.644409][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.664023][ T6027] RSP: 002b:00007f748560f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 193.672446][ T6027] RAX: ffffffffffffffda RBX: 00007f74849b5fa0 RCX: 00007f748478e929 [ 193.680432][ T6027] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 193.688416][ T6027] RBP: 00007f7484810b39 R08: 0000000000000000 R09: 0000000000000000 [ 193.696390][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.704363][ T6027] R13: 0000000000000000 R14: 00007f74849b5fa0 R15: 00007ffec03136c8 [ 193.712361][ T6027] [ 193.715714][ T6027] Kernel Offset: disabled [ 193.720042][ T6027] Rebooting in 86400 seconds..