last executing test programs: 4m41.527613812s ago: executing program 2 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x803, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) 4m41.260033093s ago: executing program 2 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000000)) 4m40.912184469s ago: executing program 2 (id=767): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x7, 0x800, 0x1, 0x0, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x0) 4m40.598566532s ago: executing program 2 (id=769): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) close(r0) 4m40.306903594s ago: executing program 2 (id=772): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004", @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m38.664299175s ago: executing program 2 (id=785): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m23.038760488s ago: executing program 32 (id=785): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m0.308040271s ago: executing program 0 (id=1468): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbf9, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m59.107509993s ago: executing program 0 (id=1474): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) socket$kcm(0x29, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r6, r6, 0x0, 0xb) 1m57.476159623s ago: executing program 0 (id=1477): unshare(0x62040200) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 1m56.218834467s ago: executing program 0 (id=1485): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbf9, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m55.046597198s ago: executing program 0 (id=1490): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 1m54.351840498s ago: executing program 0 (id=1494): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f00000005c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) syz_open_procfs$userns(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m38.757320619s ago: executing program 33 (id=1494): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f00000005c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) syz_open_procfs$userns(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9.591210687s ago: executing program 1 (id=1974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@loopback, {0x0, 0x3, 0x0, 0x40, 0x3, 0x4, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd128-generic\x00'}, 0x0, 0xa0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40448a0}, 0x4810) 9.352840667s ago: executing program 1 (id=1977): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 6.798252517s ago: executing program 1 (id=1981): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x70) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6.03885481s ago: executing program 4 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000af00ef00af000000070000000d000000050000060400000010000000ff7f000010000000020000000a00000005000000000800000009000000020000000200000f0300000003000000400000000400000001000000bb00000004000000acc3fe0d0000000000000a01000000000000000002010000000e0000000000001800000000030000000000000804000000000000004000000a050000000841000000000010100000000000615f1e305f0000000000000000"], &(0x7f0000000840)=""/222, 0xcf, 0xde, 0x1, 0xffffffff, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 5.939916544s ago: executing program 3 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/36, 0x24, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 5.826489479s ago: executing program 1 (id=1989): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x13}}]}]}}}}}}}, 0x0) 5.518099142s ago: executing program 4 (id=1991): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 5.495311413s ago: executing program 1 (id=1992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.33211893s ago: executing program 6 (id=1993): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 5.275476563s ago: executing program 1 (id=1994): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x18) syz_open_procfs$userns(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 5.188753397s ago: executing program 5 (id=1995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4880) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x1, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 5.096099701s ago: executing program 6 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") 4.819437062s ago: executing program 5 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) sched_getparam(0x0, &(0x7f0000000100)) 4.068214344s ago: executing program 5 (id=1998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0xfffffffffffffee9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.812084506s ago: executing program 5 (id=1999): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x70) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.609688984s ago: executing program 4 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.169126683s ago: executing program 3 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000af00ef00af000000070000000d000000050000060400000010000000ff7f000010000000020000000a00000005000000000800000009000000020000000200000f0300000003000000400000000400000001000000bb00000004000000acc3fe0d0000000000000a01000000000000000002010000000e0000000000001800000000030000000000000804000000000000004000000a050000000841000000000010100000000000615f1e305f0000000000000000"], &(0x7f0000000840)=""/222, 0xcf, 0xde, 0x1, 0xffffffff, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 3.000059851s ago: executing program 4 (id=2002): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x20040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x63f}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x6}]}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x98, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040084) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r7, 0x0) 2.791763079s ago: executing program 6 (id=2003): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000002200)=""/4090, 0xffa) 2.631908786s ago: executing program 5 (id=2004): unshare(0x6a040000) 2.455511754s ago: executing program 3 (id=2005): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2.369454418s ago: executing program 6 (id=2006): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = gettid() socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\'\x00\x00\x00\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04ZbU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18V\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2.004183923s ago: executing program 3 (id=2007): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0x1a44}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {}, {@noquota}, {@nombcache}]}, 0x1, 0x442, &(0x7f0000001080)="$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") 1.705685116s ago: executing program 3 (id=2008): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x0, 0x7}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d", 0x21) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) write$sndseq(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.504105845s ago: executing program 4 (id=2009): preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/80, 0x50}], 0x2, 0xa, 0x2, 0x0) 504.091618ms ago: executing program 6 (id=2010): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000003c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) 358.200564ms ago: executing program 3 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000080000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(r5) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x29, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) getpriority(0x1, 0x0) 277.439788ms ago: executing program 5 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@barrier}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 207.959621ms ago: executing program 4 (id=2013): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x3, 0x9, 0xa, 0x20, 0x5}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x4001, 0x3, 0x320, 0x0, 0x0, 0x148, 0x0, 0x148, 0x288, 0x240, 0x240, 0x288, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x7fff, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0x80000000, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x29, 0x1e, 0x29], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e21], [0x4e23, 0x4e20], 0x2, 0xc2, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x51cf) dup3(r2, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sync() r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)={0x38, r8, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000800)=ANY=[@ANYRESDEC=r3, @ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES8, @ANYRES8=r2, @ANYRESHEX=r7, @ANYRES16=r1], 0x4, 0x276, &(0x7f0000000880)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e789501661fb8ca6dbbfae7760709c3d"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r11, @ANYBLOB="851fb1b2d0c1e634f208000a00150c667a48259e2b1d47c33025a29cda74c3544b0f96cfc5fb67e1bb41b6598358ff1e88dfa6116a11d82be09811660400cdc2feec36caf342b71992681e21000000006f82989ba3fd2933fb654224b49b302cc83f32918ddc25f461db02f3d0180fdc11820a700f3198f0bce70c808b9bb7", @ANYRES32=r11, @ANYBLOB], 0x58}}, 0x8000) ftruncate(r9, 0x81ff) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) getdents64(r1, &(0x7f0000001f40)=""/4123, 0x101b) 0s ago: executing program 6 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = gettid() sched_getparam(r2, &(0x7f0000000100)) kernel console output (not intermixed with test programs): slave_1) entered disabled state [ 241.525240][ T4577] device bridge_slave_0 left promiscuous mode [ 241.561560][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.798877][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 241.798893][ T27] audit: type=1326 audit(1765124901.605:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 241.905919][ T27] audit: type=1326 audit(1765124901.635:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.017568][ T27] audit: type=1326 audit(1765124901.635:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.063848][ T27] audit: type=1326 audit(1765124901.635:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.086491][ T27] audit: type=1326 audit(1765124901.635:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.109060][ T27] audit: type=1326 audit(1765124901.635:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.131518][ T27] audit: type=1326 audit(1765124901.635:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.154484][ T27] audit: type=1326 audit(1765124901.635:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.211081][ T27] audit: type=1326 audit(1765124901.635:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.234001][ T27] audit: type=1326 audit(1765124901.635:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 242.403730][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 242.555744][ T7085] loop3: detected capacity change from 0 to 512 [ 242.633860][ T7085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.679303][ T7094] tmpfs: Bad value for 'mpol' [ 242.711175][ T7085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.737376][ T7085] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.872299][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 244.031488][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 244.081757][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 244.127194][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.172831][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.412806][ T4577] team0 (unregistering): Port device dummy0 removed [ 244.677280][ T4577] bond0 (unregistering): Released all slaves [ 244.807881][ T6945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.825177][ T6945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.875830][ T6945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.926557][ T6945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.970401][ T7080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.976978][ T7080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 245.035723][ T7080] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 245.053528][ T7080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.072777][ T7080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 245.118946][ T7080] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 245.148631][ T7080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.170017][ T7080] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 245.241489][ T7080] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 245.301022][ T7080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.332455][ T7080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 245.393073][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.396157][ T7080] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 245.453884][ T7080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.467015][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.482335][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.502110][ T7080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 245.522209][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.539304][ T7080] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 245.693981][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.747676][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.782351][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.789576][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.840755][ T7136] loop4: detected capacity change from 0 to 512 [ 245.867761][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.900733][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.929676][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.960123][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.967346][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.998313][ T7136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.014360][ T7146] loop0: detected capacity change from 0 to 512 [ 246.028596][ T7136] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.091367][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.118490][ T7136] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.902: corrupted xattr block 33 [ 246.124185][ T7150] tmpfs: Bad value for 'mpol' [ 246.138021][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.156026][ T7146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.180926][ T7146] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.181180][ T7136] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 246.232094][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.248374][ T7151] 9pnet_fd: Insufficient options for proto=fd [ 246.259495][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.304696][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.317744][ T7146] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.904: Allocating blocks 41-42 which overlap fs metadata [ 246.352803][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.391049][ T7146] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.904: Allocating blocks 41-42 which overlap fs metadata [ 246.416078][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.449505][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 246.455569][ T7146] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.904: Failed to acquire dquot type 1 [ 246.473058][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.587134][ T7146] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 246.623508][ T7146] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.904: corrupted inode contents [ 246.656390][ T7146] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #12: comm syz.0.904: mark_inode_dirty error [ 246.670324][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.721222][ T7146] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.904: corrupted inode contents [ 246.849138][ T7146] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.904: mark_inode_dirty error [ 247.027188][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.107178][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.188179][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.347253][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.379808][ T7146] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.904: corrupted inode contents [ 247.391300][ T6945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.455894][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.487872][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.500920][ T7146] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 247.517697][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.562604][ T7146] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.904: corrupted inode contents [ 247.672279][ T7146] EXT4-fs error (device loop0): ext4_truncate:4318: inode #12: comm syz.0.904: mark_inode_dirty error [ 247.737899][ T7146] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 247.833366][ T7146] EXT4-fs (loop0): 1 truncate cleaned up [ 247.840315][ T7146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.966555][ T7139] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 248.278292][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 248.550603][ T7192] program syz.0.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.620964][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.631060][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.686337][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.850004][ T7200] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 249.110294][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 249.187105][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 249.267035][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 249.441536][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 249.546607][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 249.546624][ T27] audit: type=1326 audit(1765124909.345:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.587165][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 249.627395][ T27] audit: type=1326 audit(1765124909.385:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.686912][ T27] audit: type=1326 audit(1765124909.385:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.756231][ T27] audit: type=1326 audit(1765124909.385:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.825584][ T27] audit: type=1326 audit(1765124909.385:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.872942][ T27] audit: type=1326 audit(1765124909.385:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.927655][ T27] audit: type=1326 audit(1765124909.385:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 249.966932][ T27] audit: type=1326 audit(1765124909.385:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 250.052660][ T27] audit: type=1326 audit(1765124909.385:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 250.119185][ T27] audit: type=1326 audit(1765124909.385:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 250.293646][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.313400][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.357910][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.374998][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.389009][ T7235] loop4: detected capacity change from 0 to 4096 [ 250.405595][ T6945] device veth0_vlan entered promiscuous mode [ 250.428533][ T7235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.436359][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.456256][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.485333][ T6945] device veth1_vlan entered promiscuous mode [ 250.540246][ T7235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.593915][ T6945] device veth0_macvtap entered promiscuous mode [ 250.658179][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.675382][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.725693][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.780120][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.821227][ T6945] device veth1_macvtap entered promiscuous mode [ 250.844871][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.856723][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.922866][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.954168][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.956994][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.964556][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 251.068853][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.105409][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.154096][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.177012][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.203411][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.234834][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.253211][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.271928][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 251.283742][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.305568][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.369964][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.384449][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.404291][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.479674][ T6945] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.514832][ T6945] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.526291][ T6945] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.547053][ T6945] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.677822][ T7257] loop4: detected capacity change from 0 to 512 [ 251.821392][ T7257] EXT4-fs (loop4): too many log groups per flexible block group [ 251.837311][ T7257] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 251.840189][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.867332][ T7257] EXT4-fs (loop4): mount failed [ 251.876799][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.955698][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.005276][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.110060][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.410752][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.584812][ T7295] netlink: 660 bytes leftover after parsing attributes in process `syz.5.945'. [ 253.597360][ T7297] tmpfs: Bad value for 'mpol' [ 253.955401][ T7310] loop4: detected capacity change from 0 to 1764 [ 254.913203][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 254.913220][ T27] audit: type=1326 audit(1765124914.665:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 254.944590][ T27] audit: type=1326 audit(1765124914.665:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 254.997145][ T27] audit: type=1326 audit(1765124914.685:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 255.046331][ T27] audit: type=1326 audit(1765124914.685:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 255.176879][ T27] audit: type=1326 audit(1765124914.685:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 255.275361][ T27] audit: type=1326 audit(1765124914.925:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 255.394790][ T27] audit: type=1326 audit(1765124914.925:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 255.397526][ T7333] tmpfs: Bad value for 'mpol' [ 255.477269][ T27] audit: type=1326 audit(1765124914.935:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 255.578210][ T27] audit: type=1326 audit(1765124914.935:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 255.669219][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675598][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.697785][ T27] audit: type=1326 audit(1765124914.935:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 255.838889][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.963'. [ 256.875787][ T7359] loop0: detected capacity change from 0 to 1024 [ 256.900178][ T7359] EXT4-fs: Ignoring removed orlov option [ 256.949848][ T7359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 257.258936][ T7363] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.290975][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 257.392278][ T7341] wg1 speed is unknown, defaulting to 1000 [ 257.532852][ T7363] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.614469][ T7341] bridge0 speed is unknown, defaulting to 1000 [ 257.800852][ T7363] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.054768][ T7363] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.354157][ T7363] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.468607][ T7363] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.481853][ T7403] loop4: detected capacity change from 0 to 512 [ 258.550363][ T7363] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.581527][ T7403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.624007][ T7403] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.651718][ T7363] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.865968][ T7417] loop0: detected capacity change from 0 to 1024 [ 258.913073][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 258.948113][ T7417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.005867][ T7417] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.185575][ T7417] netlink: 'gtp': attribute type 4 has an invalid length. [ 259.227956][ T7417] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 259.650354][ T7442] netlink: 'syz.1.986': attribute type 7 has an invalid length. [ 259.682788][ T7444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.790579][ T7447] loop5: detected capacity change from 0 to 512 [ 259.827857][ T7447] EXT4-fs: inline encryption not supported [ 259.877149][ T7447] EXT4-fs (loop5): failed to initialize system zone (-117) [ 259.884525][ T7447] EXT4-fs (loop5): mount failed [ 259.951343][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 260.183151][ T7454] program syz.0.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.553664][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 260.568526][ T7471] 8021q: VLANs not supported on nlmon0 [ 261.007625][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 261.007641][ T27] audit: type=1326 audit(1765124920.815:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.126002][ T27] audit: type=1326 audit(1765124920.855:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.291965][ T27] audit: type=1326 audit(1765124920.865:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.405158][ T27] audit: type=1326 audit(1765124920.865:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.491188][ T27] audit: type=1326 audit(1765124920.865:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.582058][ T27] audit: type=1326 audit(1765124920.865:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.707172][ T27] audit: type=1326 audit(1765124920.865:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.824580][ T27] audit: type=1326 audit(1765124920.865:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 261.931740][ T27] audit: type=1326 audit(1765124920.875:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 262.054349][ T27] audit: type=1326 audit(1765124920.875:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.5.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 262.288166][ T7517] loop5: detected capacity change from 0 to 1024 [ 262.342213][ T7522] loop0: detected capacity change from 0 to 512 [ 262.462828][ T7517] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1014: Invalid block bitmap block 0 in block_group 0 [ 262.579885][ T7522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 262.612452][ T7517] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.1014: Failed to acquire dquot type 0 [ 262.636069][ T7522] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.759987][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1017'. [ 262.771368][ T7517] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.1014: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.857602][ T7517] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1014: Invalid inode bitmap blk 0 in block_group 0 [ 262.882459][ T7517] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 262.882455][ T4560] EXT4-fs error (device loop5): ext4_release_dquot:6845: comm kworker/u4:15: Failed to release dquot type 0 [ 262.897297][ T7517] EXT4-fs (loop5): 1 orphan inode deleted [ 262.953211][ T7517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 262.981869][ T7517] EXT4-fs (loop5): unmounting filesystem. [ 263.159329][ T7517] loop5: detected capacity change from 0 to 512 [ 263.235945][ T7517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 263.249396][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 263.264212][ T7517] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.363016][ T7517] EXT4-fs (loop5): unmounting filesystem. [ 263.639364][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1020'. [ 264.256458][ T7566] loop3: detected capacity change from 0 to 128 [ 264.775833][ T7579] loop3: detected capacity change from 0 to 1024 [ 264.825168][ T7579] EXT4-fs: Ignoring removed orlov option [ 264.969293][ T7579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 265.329412][ T7589] loop5: detected capacity change from 0 to 512 [ 265.348256][ T7589] EXT4-fs: Ignoring removed i_version option [ 265.377584][ T7589] EXT4-fs: Ignoring removed bh option [ 265.466505][ T7589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 265.544311][ T7589] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.933454][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 265.999367][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 266.214614][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 266.214631][ T27] audit: type=1326 audit(1765124926.015:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.260421][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1034'. [ 266.308166][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1034'. [ 266.339269][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 266.347887][ T27] audit: type=1326 audit(1765124926.055:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.466463][ T27] audit: type=1326 audit(1765124926.075:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.597051][ T27] audit: type=1326 audit(1765124926.075:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.721984][ T27] audit: type=1326 audit(1765124926.075:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.758613][ T7611] loop5: detected capacity change from 0 to 1024 [ 266.804706][ T7611] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.844126][ T7611] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.856358][ T27] audit: type=1326 audit(1765124926.075:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 266.945960][ T7611] JBD2: no valid journal superblock found [ 266.954068][ T7611] EXT4-fs (loop5): error loading journal [ 266.991183][ T27] audit: type=1326 audit(1765124926.075:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 267.066895][ T27] audit: type=1326 audit(1765124926.075:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 267.175714][ T27] audit: type=1326 audit(1765124926.075:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 267.304386][ T27] audit: type=1326 audit(1765124926.075:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 267.553353][ T7633] loop0: detected capacity change from 0 to 256 [ 267.565010][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 267.592507][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.686249][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.753484][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.812295][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.950574][ T7641] loop0: detected capacity change from 0 to 512 [ 268.040540][ T7641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.169008][ T7641] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 268.294243][ T7641] EXT4-fs (loop0): 1 truncate cleaned up [ 268.306927][ T7641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 268.931474][ T7654] loop4: detected capacity change from 0 to 1024 [ 269.022093][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 269.058318][ T7654] EXT4-fs: Ignoring removed orlov option [ 269.156074][ T7654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.769488][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 271.601172][ T7694] loop3: detected capacity change from 0 to 164 [ 271.657995][ T7694] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 272.012838][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 272.660795][ T7723] loop3: detected capacity change from 0 to 164 [ 274.182649][ T7739] netlink: 'syz.0.1074': attribute type 7 has an invalid length. [ 274.269709][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 276.332386][ T7752] loop4: detected capacity change from 0 to 512 [ 276.362239][ T7752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.442327][ T7752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.459326][ T7752] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.719798][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 276.719814][ T27] audit: type=1326 audit(1765124936.525:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 276.823403][ T27] audit: type=1326 audit(1765124936.555:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 276.849757][ T7775] program syz.5.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.937103][ T27] audit: type=1326 audit(1765124936.555:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 277.085079][ T27] audit: type=1326 audit(1765124936.555:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 277.120905][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 277.213394][ T27] audit: type=1326 audit(1765124936.555:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 277.250711][ T7785] netlink: 'syz.5.1089': attribute type 7 has an invalid length. [ 277.285254][ T27] audit: type=1326 audit(1765124936.555:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 277.308898][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 277.560237][ T27] audit: type=1326 audit(1765124936.555:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 278.887039][ T7803] loop3: detected capacity change from 0 to 128 [ 279.469717][ T27] audit: type=1326 audit(1765124936.555:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 279.736064][ T27] audit: type=1326 audit(1765124936.565:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 279.782164][ T27] audit: type=1326 audit(1765124936.565:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 279.864980][ T7820] loop4: detected capacity change from 0 to 128 [ 280.009338][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1097'. [ 280.102500][ T7823] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 280.212830][ T7828] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1102'. [ 281.562426][ T7841] loop0: detected capacity change from 0 to 164 [ 281.704844][ T7841] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 281.823417][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 281.823434][ T27] audit: type=1326 audit(1765124941.625:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 281.986708][ T27] audit: type=1326 audit(1765124941.665:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.149718][ T27] audit: type=1326 audit(1765124941.665:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.172137][ T27] audit: type=1326 audit(1765124941.665:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.349781][ T27] audit: type=1326 audit(1765124941.665:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.395895][ T27] audit: type=1326 audit(1765124941.675:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.422741][ T27] audit: type=1326 audit(1765124941.675:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.482489][ T7856] loop0: detected capacity change from 0 to 1024 [ 282.524500][ T27] audit: type=1326 audit(1765124941.685:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 282.623483][ T7856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.725132][ T7866] tmpfs: Bad value for 'mpol' [ 282.734700][ T7867] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.838435][ T7846] wg1 speed is unknown, defaulting to 1000 [ 282.846037][ T7846] bridge0 speed is unknown, defaulting to 1000 [ 284.632596][ T7903] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.383459][ T7909] loop3: detected capacity change from 0 to 8192 [ 285.494684][ T7909] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.602900][ T7928] netlink: 'syz.1.1135': attribute type 13 has an invalid length. [ 287.025748][ T7933] loop3: detected capacity change from 0 to 512 [ 287.311025][ T7933] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 287.329463][ T7933] EXT4-fs (loop3): orphan cleanup on readonly fs [ 287.373529][ T7933] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 287.391851][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.398719][ T7933] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm +}[@: mark_inode_dirty error [ 287.414798][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.421903][ T7933] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 287.437129][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.444205][ T7933] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm +}[@: mark_inode_dirty error [ 287.458209][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.466271][ T7933] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 287.482101][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.488775][ T7933] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 287.498612][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.505217][ T7933] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 287.519543][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.526120][ T7933] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm +}[@: mark_inode_dirty error [ 287.548294][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.554907][ T7933] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 287.564580][ T7933] EXT4-fs (loop3): Remounting filesystem read-only [ 287.578101][ T7933] EXT4-fs (loop3): 1 truncate cleaned up [ 287.629209][ T4577] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 287.671002][ T4577] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:24: Failed to release dquot type 1 [ 287.701354][ T7929] 9pnet_fd: Insufficient options for proto=fd [ 287.729555][ T4577] EXT4-fs (loop3): Remounting filesystem read-only [ 287.738217][ T7933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.749671][ T7933] EXT4-fs (loop3): unmounting filesystem. [ 287.770516][ T27] audit: type=1326 audit(1765124947.575:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 287.823846][ T27] audit: type=1326 audit(1765124947.575:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 287.946048][ T27] audit: type=1326 audit(1765124947.605:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.009177][ T27] audit: type=1326 audit(1765124947.605:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.036194][ T27] audit: type=1326 audit(1765124947.605:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.232090][ T27] audit: type=1326 audit(1765124947.605:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.311900][ T27] audit: type=1326 audit(1765124947.605:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.382053][ T27] audit: type=1326 audit(1765124947.605:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.438956][ T27] audit: type=1326 audit(1765124947.605:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 288.512034][ T7948] loop5: detected capacity change from 0 to 164 [ 288.543271][ T7948] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 288.917422][ T7951] loop4: detected capacity change from 0 to 1024 [ 288.939093][ T7951] EXT4-fs: Ignoring removed nobh option [ 288.956232][ T7951] EXT4-fs: Ignoring removed bh option [ 288.975470][ T7951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.358738][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 289.365663][ T7951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.511450][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 290.278316][ T7928] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.292480][ T7928] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.301733][ T7928] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.312007][ T7928] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.549946][ T7930] wg1 speed is unknown, defaulting to 1000 [ 290.556967][ T7930] bridge0 speed is unknown, defaulting to 1000 [ 290.601759][ T22] bridge0 speed is unknown, defaulting to 1000 [ 290.608891][ T4373] wg1 speed is unknown, defaulting to 1000 [ 290.616775][ T7963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.928375][ T7990] device wireguard0 entered promiscuous mode [ 292.336270][ T7997] loop0: detected capacity change from 0 to 764 [ 295.055602][ T8009] loop4: detected capacity change from 0 to 164 [ 295.164153][ T8009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 295.187340][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 295.187357][ T27] audit: type=1326 audit(1765124954.985:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.292422][ T27] audit: type=1326 audit(1765124955.025:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.420259][ T27] audit: type=1326 audit(1765124955.025:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.520501][ T27] audit: type=1326 audit(1765124955.025:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.535866][ T8021] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.601378][ T27] audit: type=1326 audit(1765124955.025:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.812919][ T27] audit: type=1326 audit(1765124955.035:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.836866][ T27] audit: type=1326 audit(1765124955.035:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 295.873802][ T27] audit: type=1326 audit(1765124955.035:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 296.181812][ T27] audit: type=1326 audit(1765124955.035:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 296.580906][ T27] audit: type=1326 audit(1765124955.035:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.5.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 296.818539][ T8043] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 296.818539][ T8043] program syz.4.1168 not setting count and/or reply_len properly [ 296.870158][ T8045] program syz.5.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.153494][ T8055] loop5: detected capacity change from 0 to 164 [ 297.190841][ T8055] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 297.267754][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 297.272820][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.448007][ T8082] loop5: detected capacity change from 0 to 256 [ 298.466834][ T8082] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 299.431839][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880583dcc00: rx timeout, send abort [ 299.440779][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583dcc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.131021][ T8093] program syz.0.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.241622][ T8098] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 302.293189][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 302.293205][ T27] audit: type=1326 audit(1765124962.095:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.443172][ T27] audit: type=1326 audit(1765124962.135:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.527162][ T8105] loop0: detected capacity change from 0 to 164 [ 302.556905][ T27] audit: type=1326 audit(1765124962.155:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.582424][ T8105] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 302.629417][ T27] audit: type=1326 audit(1765124962.155:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.749718][ T27] audit: type=1326 audit(1765124962.155:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.821270][ T27] audit: type=1326 audit(1765124962.165:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.852070][ T27] audit: type=1326 audit(1765124962.165:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 302.893748][ T27] audit: type=1326 audit(1765124962.165:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 304.151358][ T8127] siw: device registration error -23 [ 304.988987][ T8139] program syz.3.1199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.004875][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 305.087330][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 305.132043][ T27] audit: type=1326 audit(1765124964.935:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 305.233411][ T27] audit: type=1326 audit(1765124964.975:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 305.403463][ T8153] loop4: detected capacity change from 0 to 164 [ 305.468473][ T8153] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 305.955815][ T8164] loop0: detected capacity change from 0 to 2048 [ 305.974459][ T8166] serio: Serial port ptm0 [ 306.024921][ T8164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.049003][ T8164] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.122199][ T8164] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1208: bg 0: block 345: padding at end of block bitmap is not set [ 306.205830][ T8164] EXT4-fs (loop0): Remounting filesystem read-only [ 306.338532][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 307.453012][ T8193] program syz.5.1218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.737871][ T8150] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 309.173807][ T8150] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.182932][ T8150] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.192537][ T8150] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.211175][ T8150] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.551938][ T8225] program syz.4.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.398607][ T8247] wg1 speed is unknown, defaulting to 1000 [ 313.405453][ T8247] bridge0 speed is unknown, defaulting to 1000 [ 314.233108][ T8262] loop5: detected capacity change from 0 to 164 [ 314.329528][ T8262] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 317.186590][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193085][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.727315][ T8306] loop0: detected capacity change from 0 to 164 [ 317.778747][ T8306] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 318.337538][ T8302] wg1 speed is unknown, defaulting to 1000 [ 318.383685][ T8302] bridge0 speed is unknown, defaulting to 1000 [ 325.380074][ T8360] wg1 speed is unknown, defaulting to 1000 [ 325.412137][ T8360] bridge0 speed is unknown, defaulting to 1000 [ 327.002107][ T8390] siw: device registration error -23 [ 328.242712][ T8390] wg1 speed is unknown, defaulting to 1000 [ 328.249637][ T8390] bridge0 speed is unknown, defaulting to 1000 [ 330.773845][ T8420] wg1 speed is unknown, defaulting to 1000 [ 330.803296][ T8420] bridge0 speed is unknown, defaulting to 1000 [ 336.671766][ T8468] wg1 speed is unknown, defaulting to 1000 [ 336.678702][ T8468] bridge0 speed is unknown, defaulting to 1000 [ 337.232700][ T8504] loop5: detected capacity change from 0 to 164 [ 337.297702][ T8504] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.512110][ T8542] loop0: detected capacity change from 0 to 164 [ 340.614886][ T8542] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.813809][ T8533] wg1 speed is unknown, defaulting to 1000 [ 340.847934][ T8533] bridge0 speed is unknown, defaulting to 1000 [ 346.039466][ T8581] syz.5.1356[8581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.039575][ T8581] syz.5.1356[8581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.059159][ T8581] loop5: detected capacity change from 0 to 512 [ 346.627428][ T8581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 346.802108][ T8581] EXT4-fs (loop5): 1 truncate cleaned up [ 346.808035][ T8581] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 349.109601][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 349.149703][ T8585] wg1 speed is unknown, defaulting to 1000 [ 349.156570][ T8585] bridge0 speed is unknown, defaulting to 1000 [ 350.257971][ T8619] loop5: detected capacity change from 0 to 164 [ 350.335274][ T8619] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.866385][ T8625] loop3: detected capacity change from 0 to 1024 [ 352.880582][ T8625] EXT4-fs: Ignoring removed oldalloc option [ 352.891057][ T8625] EXT4-fs: Ignoring removed oldalloc option [ 352.900831][ T8625] EXT4-fs: Ignoring removed bh option [ 352.920527][ T8625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.997695][ T8625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.251774][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 353.667317][ T8646] loop3: detected capacity change from 0 to 164 [ 353.702335][ T8646] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 355.026808][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 355.259374][ T8657] wg1 speed is unknown, defaulting to 1000 [ 355.278064][ T8657] bridge0 speed is unknown, defaulting to 1000 [ 357.152187][ T8678] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.461586][ T8684] loop3: detected capacity change from 0 to 164 [ 357.529736][ T8684] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 359.884447][ T8698] loop5: detected capacity change from 0 to 2048 [ 360.119130][ T8698] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.212819][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 360.212883][ T27] audit: type=1800 audit(1765125020.015:1169): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1403" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 360.639566][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 360.954568][ T8724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 361.025225][ T8711] wg1 speed is unknown, defaulting to 1000 [ 361.035510][ T8711] bridge0 speed is unknown, defaulting to 1000 [ 363.050727][ T8752] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 365.080584][ T8754] wg1 speed is unknown, defaulting to 1000 [ 365.113952][ T8754] bridge0 speed is unknown, defaulting to 1000 [ 366.752635][ T8789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.015425][ T8797] loop4: detected capacity change from 0 to 164 [ 367.054970][ T8797] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 367.724173][ T8799] wg1 speed is unknown, defaulting to 1000 [ 367.749919][ T8799] bridge0 speed is unknown, defaulting to 1000 [ 368.937335][ T8830] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 368.970428][ T8827] loop4: detected capacity change from 0 to 164 [ 369.207721][ T8827] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 370.801308][ T8833] wg1 speed is unknown, defaulting to 1000 [ 370.825625][ T8833] bridge0 speed is unknown, defaulting to 1000 [ 370.860984][ T8857] loop0: detected capacity change from 0 to 2048 [ 370.929957][ T8857] Alternate GPT is invalid, using primary GPT. [ 370.955754][ T8857] loop0: p2 p3 p7 [ 371.384469][ T8865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 372.169034][ T6915] udevd[6915]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 372.192386][ T7127] udevd[7127]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 372.244481][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 374.606965][ T27] audit: type=1326 audit(1765125034.235:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 374.668041][ T8892] wg1 speed is unknown, defaulting to 1000 [ 374.683588][ T27] audit: type=1326 audit(1765125034.265:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 374.713175][ T8892] bridge0 speed is unknown, defaulting to 1000 [ 374.765388][ T8904] loop4: detected capacity change from 0 to 512 [ 374.787571][ T27] audit: type=1326 audit(1765125034.265:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 374.855780][ T8904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.932463][ T27] audit: type=1326 audit(1765125034.265:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 374.996038][ T27] audit: type=1326 audit(1765125034.265:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.018633][ T27] audit: type=1326 audit(1765125034.265:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.041262][ T27] audit: type=1326 audit(1765125034.265:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.063815][ T27] audit: type=1326 audit(1765125034.265:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.086442][ T27] audit: type=1326 audit(1765125034.265:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.087836][ T8904] EXT4-fs (loop4): 1 truncate cleaned up [ 375.109228][ T27] audit: type=1326 audit(1765125034.265:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 375.186879][ T8904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 375.218422][ T8904] EXT4-fs (loop4): unmounting filesystem. [ 375.523772][ T8914] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.855306][ T8928] loop5: detected capacity change from 0 to 1024 [ 376.986091][ T8928] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 377.332490][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 378.194010][ T8944] wg1 speed is unknown, defaulting to 1000 [ 378.331571][ T8944] bridge0 speed is unknown, defaulting to 1000 [ 378.551237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557633][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.485925][ T8962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 379.732768][ T8966] loop4: detected capacity change from 0 to 164 [ 379.743471][ T8966] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 383.212410][ T8995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 383.375360][ T9001] loop5: detected capacity change from 0 to 164 [ 383.409375][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 383.409392][ T27] audit: type=1326 audit(1765125043.215:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.450494][ T9001] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 383.547892][ T27] audit: type=1326 audit(1765125043.215:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.665378][ T27] audit: type=1326 audit(1765125043.215:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.767033][ T27] audit: type=1326 audit(1765125043.215:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.821285][ T27] audit: type=1326 audit(1765125043.215:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.926888][ T27] audit: type=1326 audit(1765125043.215:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 383.966785][ T27] audit: type=1326 audit(1765125043.215:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 384.000980][ T27] audit: type=1326 audit(1765125043.215:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 385.482787][ T27] audit: type=1326 audit(1765125043.265:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 385.618678][ T27] audit: type=1326 audit(1765125043.265:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 385.864852][ T9033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 385.959350][ T9026] wg1 speed is unknown, defaulting to 1000 [ 385.966642][ T9026] bridge0 speed is unknown, defaulting to 1000 [ 386.272020][ T9043] loop5: detected capacity change from 0 to 164 [ 386.348444][ T9043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 390.587056][ T9063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 391.171699][ T9081] loop4: detected capacity change from 0 to 1024 [ 391.218424][ T9081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.265976][ T9081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 391.344978][ T9083] loop3: detected capacity change from 0 to 164 [ 391.383025][ T9081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.403854][ T9083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 391.552493][ T9076] wg1 speed is unknown, defaulting to 1000 [ 391.567613][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 391.617826][ T9076] bridge0 speed is unknown, defaulting to 1000 [ 392.867452][ T9106] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 394.070796][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.076974][ T9129] wg1 speed is unknown, defaulting to 1000 [ 394.084014][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.092249][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.101157][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.108961][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 394.193229][ T9137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 394.304439][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.814322][ T9129] bridge0 speed is unknown, defaulting to 1000 [ 395.484585][ T9136] wg1 speed is unknown, defaulting to 1000 [ 395.543516][ T9136] bridge0 speed is unknown, defaulting to 1000 [ 395.578850][ T9153] loop3: detected capacity change from 0 to 164 [ 395.601936][ T4297] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.647760][ T9153] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.686133][ T4297] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.937973][ T4297] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.964539][ T4297] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.208011][ T4297] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.258886][ T4297] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.374020][ T4297] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.386968][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 396.418815][ T4297] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.962754][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 397.013482][ T4297] tipc: Disabling bearer [ 397.042041][ T4297] tipc: Left network mode [ 397.939114][ T9176] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 397.957486][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.964640][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.013728][ T9136] device bridge_slave_0 entered promiscuous mode [ 398.165941][ T9188] loop5: detected capacity change from 0 to 164 [ 398.227010][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.234477][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.265911][ T9136] device bridge_slave_1 entered promiscuous mode [ 398.302135][ T9188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 398.405889][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.466916][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 398.515189][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.660966][ T9136] team0: Port device team_slave_0 added [ 398.690833][ T9136] team0: Port device team_slave_1 added [ 400.415072][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 400.415089][ T27] audit: type=1326 audit(1765125060.215:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 400.547067][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 400.559017][ T27] audit: type=1326 audit(1765125060.215:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 400.588555][ T27] audit: type=1326 audit(1765125060.215:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 400.631929][ T27] audit: type=1326 audit(1765125060.215:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 400.660013][ T27] audit: type=1326 audit(1765125060.215:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 400.685989][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.699401][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.736005][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.764916][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.785792][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.870314][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.792907][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078b04800: rx timeout, send abort [ 401.802515][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078b04800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 401.828718][ T9136] device hsr_slave_0 entered promiscuous mode [ 401.843834][ T9136] device hsr_slave_1 entered promiscuous mode [ 401.877763][ T9136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.888127][ T9136] Cannot create hsr debugfs directory [ 401.894198][ T9229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 402.083246][ T9216] wg1 speed is unknown, defaulting to 1000 [ 402.161259][ T9216] bridge0 speed is unknown, defaulting to 1000 [ 402.251380][ T9239] loop3: detected capacity change from 0 to 164 [ 402.263927][ T9239] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.202340][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 405.937074][ T4297] device hsr_slave_0 left promiscuous mode [ 405.974804][ T4297] device hsr_slave_1 left promiscuous mode [ 405.997052][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.044637][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.122889][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.140819][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.173497][ T4297] device bridge_slave_1 left promiscuous mode [ 406.184803][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.202556][ T4297] device bridge_slave_0 left promiscuous mode [ 406.211780][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.265359][ T4297] device veth1_macvtap left promiscuous mode [ 406.276452][ T4297] device veth0_macvtap left promiscuous mode [ 406.283367][ T4297] device veth1_vlan left promiscuous mode [ 406.290038][ T4297] device veth0_vlan left promiscuous mode [ 407.961667][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.004278][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.379587][ T4297] bond0 (unregistering): Released all slaves [ 408.462609][ T9136] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 408.472448][ T9136] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 408.482709][ T9136] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 408.492949][ T9136] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.545794][ T9256] wg1 speed is unknown, defaulting to 1000 [ 408.552941][ T9256] bridge0 speed is unknown, defaulting to 1000 [ 408.604536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d03800: rx timeout, send abort [ 408.690694][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055d03800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 408.694160][ T9269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 408.882114][ T9296] loop3: detected capacity change from 0 to 164 [ 408.954815][ T9296] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.244351][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.289433][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.297829][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.332757][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.467625][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.482133][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.517105][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.524272][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.532287][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.544906][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.563939][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.571174][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.600972][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.618844][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.680247][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.717464][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.766535][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.800131][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.896614][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.938520][ T9136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.949190][ T9136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.787655][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.795817][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.878366][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.918305][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.922787][ T9330] loop3: detected capacity change from 0 to 164 [ 410.947777][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.960880][ T9330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 410.977927][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.995084][ T9332] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 411.835775][ T9340] wg1 speed is unknown, defaulting to 1000 [ 411.874078][ T9340] bridge0 speed is unknown, defaulting to 1000 [ 412.117554][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.135214][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.348876][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.600978][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058523c00: rx timeout, send abort [ 412.609622][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058523c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 413.333531][ T9378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 413.607207][ T9385] loop5: detected capacity change from 0 to 164 [ 413.644193][ T9385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 414.142869][ T27] audit: type=1326 audit(1765125073.945:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 414.216829][ T27] audit: type=1326 audit(1765125073.975:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 414.341152][ T27] audit: type=1326 audit(1765125073.975:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 414.437631][ T27] audit: type=1326 audit(1765125073.975:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 414.461013][ T27] audit: type=1326 audit(1765125073.975:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 414.489781][ T27] audit: type=1326 audit(1765125073.975:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 415.390622][ T9419] loop3: detected capacity change from 0 to 1024 [ 415.436478][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.445949][ T9419] EXT4-fs: Ignoring removed orlov option [ 415.483754][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.558308][ T9136] device veth0_vlan entered promiscuous mode [ 415.608577][ T9136] device veth1_vlan entered promiscuous mode [ 415.716941][ T9419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 415.737500][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.755370][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.786427][ T27] audit: type=1800 audit(1765125075.585:1208): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 415.853308][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 415.884095][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 415.892000][ T27] audit: type=1804 audit(1765125075.635:1209): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1653" name="/newroot/319/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 416.032372][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 416.074457][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.118504][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.155353][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.193637][ T9136] device veth0_macvtap entered promiscuous mode [ 416.205689][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 416.279315][ T9136] device veth1_macvtap entered promiscuous mode [ 416.374562][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.415345][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.471603][ T27] audit: type=1326 audit(1765125076.275:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 416.475143][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.533868][ T27] audit: type=1326 audit(1765125076.295:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 416.564420][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 416.575038][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 416.598177][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 416.628126][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.670685][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.707931][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.765138][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.786092][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.805925][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.898621][ T9136] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.932525][ T9136] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.976255][ T9136] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.986432][ T9136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.793138][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.838664][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.864628][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.035153][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.059974][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.100623][ T9470] loop3: detected capacity change from 0 to 164 [ 418.117654][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.159590][ T9470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 420.752812][ T9510] loop3: detected capacity change from 0 to 164 [ 420.824638][ T9510] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 421.079066][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 421.079082][ T27] audit: type=1326 audit(1765125080.885:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9514 comm="syz.4.1684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x0 [ 421.305719][ T9536] loop6: detected capacity change from 0 to 128 [ 421.424287][ T27] audit: type=1326 audit(1765125081.225:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7193d865e7 code=0x7ffc0000 [ 421.953244][ T27] audit: type=1326 audit(1765125081.265:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7193d2b829 code=0x7ffc0000 [ 422.325539][ T27] audit: type=1326 audit(1765125081.265:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7193d865e7 code=0x7ffc0000 [ 422.347982][ T27] audit: type=1326 audit(1765125081.265:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7193d2b829 code=0x7ffc0000 [ 422.370463][ T27] audit: type=1326 audit(1765125081.265:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 422.392959][ T27] audit: type=1326 audit(1765125081.265:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 422.417077][ T27] audit: type=1326 audit(1765125081.265:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 422.439684][ T27] audit: type=1326 audit(1765125081.295:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 422.462184][ T27] audit: type=1326 audit(1765125081.295:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 422.933650][ T9548] loop4: detected capacity change from 0 to 8192 [ 425.525740][ T9595] loop4: detected capacity change from 0 to 512 [ 425.567814][ T9595] ext4: Unknown parameter 'seclabel' [ 425.685430][ T6915] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.841157][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1714'. [ 428.670538][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 428.670555][ T27] audit: type=1326 audit(1765125088.475:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 428.782800][ T27] audit: type=1326 audit(1765125088.525:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 428.905057][ T27] audit: type=1326 audit(1765125088.525:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 428.990594][ T27] audit: type=1326 audit(1765125088.525:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 429.094468][ T27] audit: type=1326 audit(1765125088.525:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 429.190939][ T27] audit: type=1326 audit(1765125088.525:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 429.234448][ T27] audit: type=1326 audit(1765125088.525:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 429.272602][ T27] audit: type=1326 audit(1765125088.525:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 431.084411][ T27] audit: type=1326 audit(1765125090.885:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 431.162397][ T27] audit: type=1326 audit(1765125090.885:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 431.495722][ T9711] loop6: detected capacity change from 0 to 164 [ 431.543270][ T9711] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.653488][ T9716] loop4: detected capacity change from 0 to 1024 [ 431.738840][ T9716] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 431.750024][ T9716] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 431.769832][ T9716] JBD2: no valid journal superblock found [ 431.990750][ T9716] EXT4-fs (loop4): error loading journal [ 433.105171][ T9729] program syz.3.1750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.640155][ T9749] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 435.669719][ T9765] program syz.4.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.547518][ T9788] netlink: 'syz.3.1773': attribute type 10 has an invalid length. [ 436.631304][ T9788] team0: Port device dummy0 added [ 438.691233][ T9804] program syz.5.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.156363][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 439.156377][ T27] audit: type=1326 audit(1765125098.955:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.164802][ T9828] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 439.204128][ T9827] loop5: detected capacity change from 0 to 164 [ 439.235152][ T9827] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 439.263721][ T27] audit: type=1326 audit(1765125098.965:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.355157][ T27] audit: type=1326 audit(1765125098.965:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.449738][ T27] audit: type=1326 audit(1765125098.965:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.574882][ T27] audit: type=1326 audit(1765125098.965:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.697788][ T27] audit: type=1326 audit(1765125098.965:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.778862][ T27] audit: type=1326 audit(1765125098.965:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.839363][ T27] audit: type=1326 audit(1765125098.965:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.946428][ T27] audit: type=1326 audit(1765125098.965:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 439.966315][ T9843] program syz.5.1792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.970773][ T27] audit: type=1326 audit(1765125098.965:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 440.004700][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011100][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.183579][ T9859] loop3: detected capacity change from 0 to 164 [ 441.275852][ T9859] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 442.190501][ T9872] loop3: detected capacity change from 0 to 256 [ 442.204982][ T9872] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 443.100493][ T9878] program syz.5.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.960775][ T9889] loop5: detected capacity change from 0 to 128 [ 444.564866][ T9900] loop3: detected capacity change from 0 to 164 [ 444.623318][ T9903] syz.4.1814[9903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.623749][ T9903] syz.4.1814[9903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.687262][ T9903] loop4: detected capacity change from 0 to 512 [ 444.729108][ T9903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.984500][ T9903] EXT4-fs (loop4): 1 truncate cleaned up [ 444.990407][ T9903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.656821][ T9900] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 448.080447][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 448.317248][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 448.317264][ T27] audit: type=1326 audit(1765125108.125:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 448.593836][ T27] audit: type=1326 audit(1765125108.165:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 448.846924][ T27] audit: type=1326 audit(1765125108.205:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.010924][ T27] audit: type=1326 audit(1765125108.225:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.160626][ T27] audit: type=1326 audit(1765125108.225:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.183185][ T27] audit: type=1326 audit(1765125108.225:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.216230][ T27] audit: type=1326 audit(1765125108.225:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.337443][ T27] audit: type=1326 audit(1765125108.225:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.495844][ T27] audit: type=1326 audit(1765125108.225:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.543867][ T9939] loop5: detected capacity change from 0 to 512 [ 449.585730][ T27] audit: type=1326 audit(1765125108.225:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 449.921026][ T9939] journal_path: Lookup failure for './bus' [ 450.159873][ T9939] EXT4-fs: error: could not find journal device path [ 450.519840][ T9957] loop5: detected capacity change from 0 to 512 [ 450.561715][ T9963] netlink: 'syz.6.1831': attribute type 10 has an invalid length. [ 450.568167][ T9959] loop4: detected capacity change from 0 to 164 [ 450.623443][ T9957] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 450.646386][ T9959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 450.667976][ T9957] ext4 filesystem being mounted at /188/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.129934][ T9963] team0 (unregistering): Port device team_slave_0 removed [ 451.169818][ T9963] team0 (unregistering): Port device team_slave_1 removed [ 451.523880][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 451.818715][ T9968] wg1 speed is unknown, defaulting to 1000 [ 451.839155][ T9968] bridge0 speed is unknown, defaulting to 1000 [ 451.938655][T10000] loop3: detected capacity change from 0 to 256 [ 453.376616][T10023] loop4: detected capacity change from 0 to 512 [ 453.810867][T10023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 453.820448][T10023] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.987907][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.059524][T10023] team0: Port device dummy0 removed [ 454.199673][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.208467][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.226047][T10023] device bridge_slave_0 left promiscuous mode [ 454.233220][T10023] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.948607][T10023] device bridge_slave_1 left promiscuous mode [ 454.954913][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.982048][T10023] bond0: (slave bond_slave_0): Releasing backup interface [ 455.002635][T10023] bond0: (slave bond_slave_1): Releasing backup interface [ 455.037957][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 455.037974][ T27] audit: type=1326 audit(1765125114.845:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b38f749 code=0x7ffc0000 [ 455.177083][T10023] team0: Port device team_slave_0 removed [ 455.347008][T10023] team0: Port device team_slave_1 removed [ 455.505618][T10029] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 455.664278][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 457.178522][T10067] loop4: detected capacity change from 0 to 164 [ 457.222130][T10067] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 457.590314][T10076] syz.5.1863[10076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.590802][T10076] syz.5.1863[10076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.208953][T10076] loop5: detected capacity change from 0 to 512 [ 459.404327][T10076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 459.623043][T10076] EXT4-fs (loop5): 1 truncate cleaned up [ 459.628962][T10076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 460.523314][ T27] audit: type=1326 audit(1765125120.305:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 460.743055][ T27] audit: type=1326 audit(1765125120.305:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 461.107152][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 461.319107][T10105] netlink: 'syz.6.1867': attribute type 10 has an invalid length. [ 461.401699][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 461.465825][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1868'. [ 463.279644][T10133] loop6: detected capacity change from 0 to 164 [ 463.364723][T10140] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 463.389135][T10133] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 463.887167][T10142] wg1 speed is unknown, defaulting to 1000 [ 463.894042][T10142] bridge0 speed is unknown, defaulting to 1000 [ 464.473773][T10147] loop6: detected capacity change from 0 to 8192 [ 464.563881][T10147] loop6: p1 < > p2 p3 < p5 p6 > p4 [ 464.585881][T10147] loop6: partition table partially beyond EOD, truncated [ 464.626408][T10147] loop6: p1 start 100663296 is beyond EOD, truncated [ 464.664554][T10147] loop6: p2 size 134217732 extends beyond EOD, truncated [ 464.679525][T10147] loop6: p4 size 14876672 extends beyond EOD, truncated [ 464.707706][T10147] loop6: p5 size 134217732 extends beyond EOD, truncated [ 464.763235][T10147] loop6: p6 size 14876672 extends beyond EOD, truncated [ 465.129316][T10172] loop3: detected capacity change from 0 to 164 [ 465.197400][T10172] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 465.320917][T10178] syz.5.1895 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 465.333889][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 465.334882][ T7127] udevd[7127]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 465.370458][ T6915] udevd[6915]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 465.423754][T10179] udevd[10179]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 465.455985][T10180] udevd[10180]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 465.670390][ T27] audit: type=1326 audit(1765125125.475:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 465.780675][ T27] audit: type=1326 audit(1765125125.475:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 465.871381][ T27] audit: type=1326 audit(1765125125.545:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.011204][ T27] audit: type=1326 audit(1765125125.545:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.106735][ T27] audit: type=1326 audit(1765125125.545:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.158137][T10205] loop6: detected capacity change from 0 to 128 [ 466.196727][ T27] audit: type=1326 audit(1765125125.545:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.314202][T10205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 466.385614][T10205] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.422129][ T27] audit: type=1326 audit(1765125125.555:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.546727][ T27] audit: type=1326 audit(1765125125.555:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee858f749 code=0x7ffc0000 [ 466.596388][T10216] loop4: detected capacity change from 0 to 164 [ 466.642009][ T9136] EXT4-fs (loop6): unmounting filesystem. [ 466.663096][T10216] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 466.746414][T10218] loop3: detected capacity change from 0 to 512 [ 466.780574][T10218] ext4: Unknown parameter 'obj_role' [ 466.887815][T10218] team0: Port device dummy0 removed [ 466.893467][T10218] batman_adv: batadv0: Removing interface: virt_wifi0 [ 467.106397][T10223] nfs4: Bad value for 'source' [ 467.564994][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1916'. [ 467.644319][T10244] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 467.670980][T10244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.603568][T10249] loop4: detected capacity change from 0 to 512 [ 468.682556][T10249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 468.718569][T10249] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.751086][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 468.795743][T10249] netlink: 'syz.4.1918': attribute type 4 has an invalid length. [ 468.854389][T10249] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1918'. [ 468.871872][T10249] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.079633][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 469.193704][T10261] loop6: detected capacity change from 0 to 164 [ 469.228039][T10261] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 469.645365][T10272] netlink: 'syz.3.1924': attribute type 10 has an invalid length. [ 469.672524][T10272] device dummy0 entered promiscuous mode [ 469.699655][T10272] team0: Device dummy0 failed to register rx_handler [ 469.717918][T10275] loop5: detected capacity change from 0 to 1024 [ 469.751264][T10275] EXT4-fs: Ignoring removed orlov option [ 469.803602][T10275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 469.914484][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 470.004016][T10282] loop3: detected capacity change from 0 to 128 [ 470.128826][T10282] syz.3.1927: attempt to access beyond end of device [ 470.128826][T10282] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 470.286439][T10292] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 470.351825][T10294] bond0: (slave caif0): Error: Device type is different from other slaves [ 470.378444][T10294] netlink: 'syz.5.1930': attribute type 10 has an invalid length. [ 470.507705][T10294] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.567072][T10294] bond0: (slave team0): Enslaving as an active interface with an up link [ 470.715204][T10303] loop3: detected capacity change from 0 to 164 [ 470.760137][T10303] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 470.841275][T10306] loop5: detected capacity change from 0 to 512 [ 470.925546][T10306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 470.998033][T10306] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.091746][ T27] audit: type=1800 audit(1765125130.895:1506): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1934" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 471.781385][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 472.652411][T10334] xt_CT: No such helper "pptp" [ 472.985044][T10343] loop3: detected capacity change from 0 to 512 [ 473.073543][T10343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 473.092370][T10346] syz.5.1941[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.092480][T10346] syz.5.1941[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.138831][T10346] loop5: detected capacity change from 0 to 512 [ 473.197384][T10346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.352007][T10346] EXT4-fs (loop5): 1 truncate cleaned up [ 473.357889][T10346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 473.479169][T10343] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.837339][ T27] audit: type=1800 audit(1765125133.615:1507): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1942" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 473.976396][ T27] audit: type=1326 audit(1765125133.715:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.228467][ T27] audit: type=1326 audit(1765125133.725:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.335430][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 474.426992][ T27] audit: type=1326 audit(1765125133.725:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.601727][ T27] audit: type=1326 audit(1765125133.725:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.764965][ T27] audit: type=1326 audit(1765125133.725:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.899571][ T27] audit: type=1326 audit(1765125133.725:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.967436][ T27] audit: type=1326 audit(1765125133.725:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 474.993715][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 474.994465][ T27] audit: type=1326 audit(1765125133.725:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10342 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd9adf8f749 code=0x7ffc0000 [ 475.171512][T10361] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1943'. [ 475.257783][T10366] loop4: detected capacity change from 0 to 164 [ 475.294100][T10366] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.334093][T10368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 475.556677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 475.570887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 475.579793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 476.210587][T10382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.284162][T10382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.329920][T10372] IPVS: sh: FWM 3 0x00000003 - no destination available [ 476.344977][T10382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.392567][T10382] device bridge_slave_0 left promiscuous mode [ 476.435818][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.475810][T10382] device bridge_slave_1 left promiscuous mode [ 476.513893][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.569324][T10382] bond0: (slave bond_slave_0): Releasing backup interface [ 476.619513][T10382] bond0: (slave bond_slave_1): Releasing backup interface [ 476.662155][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.687338][T10382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.716614][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.724220][T10382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.017634][T10401] syz.5.1958[10401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.017742][T10401] syz.5.1958[10401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.182702][T10401] loop5: detected capacity change from 0 to 512 [ 478.572660][T10401] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 478.705157][T10401] EXT4-fs (loop5): 1 truncate cleaned up [ 478.711151][T10401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 480.023515][T10424] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 480.218340][T10429] loop6: detected capacity change from 0 to 164 [ 480.238304][ T6945] EXT4-fs (loop5): unmounting filesystem. [ 480.360518][T10429] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.565805][T10438] netlink: 774 bytes leftover after parsing attributes in process `syz.1.1966'. [ 480.661390][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 481.662665][T10443] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 481.752470][T10443] bond0: (slave dummy0): Releasing backup interface [ 481.791977][T10443] team0: Port device dummy0 added [ 482.320107][T10472] loop4: detected capacity change from 0 to 512 [ 482.525633][T10472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 484.011297][T10472] EXT4-fs (loop4): 1 truncate cleaned up [ 484.017140][T10472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 484.644772][T10480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 484.777249][T10482] loop3: detected capacity change from 0 to 164 [ 484.910923][T10482] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 485.435393][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 485.672213][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 485.672230][ T27] audit: type=1326 audit(1765125145.475:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 485.702980][T10496] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 485.724666][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 485.756083][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 485.782157][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 485.803379][ T27] audit: type=1326 audit(1765125145.475:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 485.811800][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 485.895431][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 485.916726][ T27] audit: type=1326 audit(1765125145.475:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 485.923944][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.008988][ T27] audit: type=1326 audit(1765125145.475:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 486.019332][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.086990][T10515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 486.097350][ T27] audit: type=1326 audit(1765125145.475:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7193d8f749 code=0x7ffc0000 [ 486.109786][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.174963][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 486.197261][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.222037][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.244345][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 486.265598][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.285693][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.311359][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 486.329421][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.349579][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.369628][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.388104][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.399122][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.408731][T10524] loop5: detected capacity change from 0 to 164 [ 486.429429][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.443323][T10524] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 486.443912][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.476791][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.494537][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.507632][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.535628][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.576133][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.614625][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.664133][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 486.789067][T10533] loop6: detected capacity change from 0 to 512 [ 486.864807][T10533] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 486.980917][T10533] EXT4-fs (loop6): 1 truncate cleaned up [ 486.986849][T10533] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 487.748885][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 488.501153][T10543] loop5: detected capacity change from 0 to 8192 [ 488.620130][T10543] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.697127][ T27] audit: type=1326 audit(1765125148.505:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.2002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x0 [ 488.701547][T10551] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 488.743215][ T9136] EXT4-fs (loop6): unmounting filesystem. [ 488.788074][T10551] team0: Device dummy0 failed to register rx_handler [ 488.974380][T10555] loop4: detected capacity change from 0 to 4096 [ 489.038973][T10549] fido_id[10549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 489.091593][T10555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 489.247270][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 489.318042][T10555] team0: Port device dummy0 removed [ 489.349064][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.382622][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.553438][T10576] loop3: detected capacity change from 0 to 512 [ 489.578150][T10576] EXT4-fs (loop3): unable to read superblock [ 489.606159][T10570] team0: Mode changed to "loadbalance" [ 489.823576][T10561] wg1 speed is unknown, defaulting to 1000 [ 489.838667][T10561] bridge0 speed is unknown, defaulting to 1000 [ 490.009790][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 490.930204][T10583] wg1 speed is unknown, defaulting to 1000 [ 490.937168][T10583] bridge0 speed is unknown, defaulting to 1000 [ 491.389014][ T27] audit: type=1326 audit(1765125151.195:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.433909][ T27] audit: type=1326 audit(1765125151.225:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.456948][ T27] audit: type=1326 audit(1765125151.225:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.507134][ T27] audit: type=1326 audit(1765125151.225:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.567450][T10598] loop5: detected capacity change from 0 to 512 [ 491.581276][T10601] loop4: detected capacity change from 0 to 512 [ 491.671491][T10601] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 491.672534][ T27] audit: type=1326 audit(1765125151.235:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.702613][ T27] audit: type=1326 audit(1765125151.235:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.725766][ T27] audit: type=1326 audit(1765125151.235:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.747575][T10598] ------------[ cut here ]------------ [ 491.749232][T10601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 491.754152][T10598] EA inode 11 i_nlink=2 [ 491.773488][ T27] audit: type=1326 audit(1765125151.235:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 491.806912][T10601] System zones: 0-1, 15-15, 18-18, 34-34 [ 491.839583][T10601] EXT4-fs (loop4): orphan cleanup on readonly fs [ 491.876996][T10601] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 491.897105][T10598] WARNING: CPU: 1 PID: 10598 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 491.907709][T10598] Modules linked in: [ 491.911696][T10598] CPU: 1 PID: 10598 Comm: syz.5.2012 Not tainted syzkaller #0 [ 491.919349][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.929547][T10598] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 491.936991][T10598] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 f0 9c ff 49 8b 37 48 c7 c7 80 91 80 8a 89 da e8 c2 da 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 491.956907][T10598] RSP: 0018:ffffc900034df200 EFLAGS: 00010246 [ 491.963037][T10598] RAX: aa731818eade7e00 RBX: 0000000000000002 RCX: 0000000000080000 [ 491.971119][T10598] RDX: ffffc90025feb000 RSI: 00000000000390ef RDI: 00000000000390f0 [ 491.979186][T10598] RBP: ffffc900034df2e8 R08: dffffc0000000000 R09: fffff5200069bdd1 [ 491.987260][T10598] R10: fffff5200069bdd1 R11: 1ffff9200069bdd0 R12: ffffc900034df260 [ 491.995269][T10598] R13: ffff88805491e700 R14: dffffc0000000000 R15: ffff88805491e740 [ 492.003336][T10598] FS: 00007f7ee93a26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 492.012363][T10598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.019029][T10598] CR2: 00007fdad9ae6200 CR3: 0000000076ba2000 CR4: 00000000003506e0 [ 492.027158][T10598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.035258][T10598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.043314][T10598] Call Trace: [ 492.046690][T10598] [ 492.049679][T10598] ? ext4_xattr_block_csum+0x500/0x500 [ 492.055199][T10598] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 492.060777][T10598] ext4_xattr_set_entry+0xb33/0x1e90 [ 492.066143][T10598] ext4_xattr_ibody_set+0x250/0x690 [ 492.071456][T10598] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 492.077485][T10598] __ext4_expand_extra_isize+0x301/0x3e0 [ 492.083182][T10598] __ext4_mark_inode_dirty+0x47f/0x770 [ 492.088769][T10598] ext4_evict_inode+0xa73/0x1100 [ 492.093812][T10598] ? _raw_spin_unlock+0x24/0x40 [ 492.098776][T10598] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 492.104748][T10598] ? do_raw_spin_unlock+0x11d/0x230 [ 492.110062][T10598] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 492.116019][T10598] evict+0x485/0x870 [ 492.120021][T10598] ? __lock_acquire+0x7c50/0x7c50 [ 492.125109][T10598] ? proc_nr_inodes+0x2f0/0x2f0 [ 492.130051][T10598] ? do_raw_spin_unlock+0x11d/0x230 [ 492.135326][T10598] ? _raw_spin_unlock+0x24/0x40 [ 492.136777][ T27] audit: type=1326 audit(1765125151.285:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce798f749 code=0x7ffc0000 [ 492.140240][T10598] ? iput+0x768/0x980 [ 492.140278][T10598] ext4_orphan_cleanup+0xbd3/0x1400 [ 492.140329][T10598] ? ext4_orphan_del+0xb90/0xb90 [ 492.140367][T10598] ? errseq_check_and_advance+0x62/0x120 [ 492.140400][T10598] ext4_fill_super+0x7bdf/0x8150 [ 492.140425][T10598] ? bdev_name+0x2c1/0x3f0 [ 492.192333][T10598] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 492.198681][T10598] ? snprintf+0xd7/0x120 [ 492.202991][T10598] ? preempt_count_add+0x8d/0x190 [ 492.208110][T10598] ? vscnprintf+0x80/0x80 [ 492.212501][T10598] ? set_blocksize+0x1d0/0x470 [ 492.217364][T10598] ? sb_set_blocksize+0xa5/0xe0 [ 492.222271][T10598] get_tree_bdev+0x3f1/0x610 [ 492.226956][T10598] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 492.233350][T10598] vfs_get_tree+0x88/0x270 [ 492.237882][T10598] do_new_mount+0x24a/0xa40 [ 492.242448][T10598] __se_sys_mount+0x2d6/0x3c0 [ 492.247257][T10598] ? __x64_sys_mount+0xc0/0xc0 [ 492.252087][T10598] ? __x64_sys_mount+0x1c/0xc0 [ 492.256972][T10598] do_syscall_64+0x4c/0xa0 [ 492.261454][T10598] ? clear_bhb_loop+0x60/0xb0 [ 492.266186][T10598] ? clear_bhb_loop+0x60/0xb0 [ 492.271004][T10598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.277127][T10598] RIP: 0033:0x7f7ee8590eea [ 492.281598][T10598] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.301405][T10598] RSP: 002b:00007f7ee93a1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 492.309934][T10598] RAX: ffffffffffffffda RBX: 00007f7ee93a1ef0 RCX: 00007f7ee8590eea [ 492.317994][T10598] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7ee93a1eb0 [ 492.326019][T10598] RBP: 0000200000000180 R08: 00007f7ee93a1ef0 R09: 0000000000800700 [ 492.334108][T10598] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 492.342172][T10598] R13: 00007f7ee93a1eb0 R14: 000000000000046f R15: 000000000000002c [ 492.350265][T10598] [ 492.353341][T10598] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 492.360647][T10598] CPU: 1 PID: 10598 Comm: syz.5.2012 Not tainted syzkaller #0 [ 492.368127][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.378198][T10598] Call Trace: [ 492.381492][T10598] [ 492.384438][T10598] dump_stack_lvl+0x168/0x22e [ 492.389144][T10598] ? memcpy+0x3c/0x60 [ 492.393142][T10598] ? show_regs_print_info+0x12/0x12 [ 492.398361][T10598] ? load_image+0x3b0/0x3b0 [ 492.402976][T10598] panic+0x2c9/0x710 [ 492.406894][T10598] ? bpf_jit_dump+0xd0/0xd0 [ 492.411428][T10598] __warn+0x2f8/0x4f0 [ 492.415423][T10598] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 492.421429][T10598] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 492.427433][T10598] report_bug+0x2ba/0x4f0 [ 492.431791][T10598] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 492.437800][T10598] handle_bug+0x3a/0x70 [ 492.442017][T10598] exc_invalid_op+0x16/0x40 [ 492.446642][T10598] asm_exc_invalid_op+0x16/0x20 [ 492.451533][T10598] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 492.458145][T10598] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 f0 9c ff 49 8b 37 48 c7 c7 80 91 80 8a 89 da e8 c2 da 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 492.477785][T10598] RSP: 0018:ffffc900034df200 EFLAGS: 00010246 [ 492.483879][T10598] RAX: aa731818eade7e00 RBX: 0000000000000002 RCX: 0000000000080000 [ 492.491871][T10598] RDX: ffffc90025feb000 RSI: 00000000000390ef RDI: 00000000000390f0 [ 492.499863][T10598] RBP: ffffc900034df2e8 R08: dffffc0000000000 R09: fffff5200069bdd1 [ 492.507855][T10598] R10: fffff5200069bdd1 R11: 1ffff9200069bdd0 R12: ffffc900034df260 [ 492.515841][T10598] R13: ffff88805491e700 R14: dffffc0000000000 R15: ffff88805491e740 [ 492.523857][T10598] ? ext4_xattr_block_csum+0x500/0x500 [ 492.529347][T10598] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 492.534829][T10598] ext4_xattr_set_entry+0xb33/0x1e90 [ 492.540276][T10598] ext4_xattr_ibody_set+0x250/0x690 [ 492.545518][T10598] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 492.551465][T10598] __ext4_expand_extra_isize+0x301/0x3e0 [ 492.557121][T10598] __ext4_mark_inode_dirty+0x47f/0x770 [ 492.562633][T10598] ext4_evict_inode+0xa73/0x1100 [ 492.567594][T10598] ? _raw_spin_unlock+0x24/0x40 [ 492.572560][T10598] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 492.578509][T10598] ? do_raw_spin_unlock+0x11d/0x230 [ 492.583740][T10598] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 492.589654][T10598] evict+0x485/0x870 [ 492.593568][T10598] ? __lock_acquire+0x7c50/0x7c50 [ 492.598623][T10598] ? proc_nr_inodes+0x2f0/0x2f0 [ 492.603574][T10598] ? do_raw_spin_unlock+0x11d/0x230 [ 492.608844][T10598] ? _raw_spin_unlock+0x24/0x40 [ 492.613714][T10598] ? iput+0x768/0x980 [ 492.617722][T10598] ext4_orphan_cleanup+0xbd3/0x1400 [ 492.622965][T10598] ? ext4_orphan_del+0xb90/0xb90 [ 492.627948][T10598] ? errseq_check_and_advance+0x62/0x120 [ 492.633619][T10598] ext4_fill_super+0x7bdf/0x8150 [ 492.638580][T10598] ? bdev_name+0x2c1/0x3f0 [ 492.643041][T10598] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 492.649304][T10598] ? snprintf+0xd7/0x120 [ 492.653564][T10598] ? preempt_count_add+0x8d/0x190 [ 492.658610][T10598] ? vscnprintf+0x80/0x80 [ 492.662957][T10598] ? set_blocksize+0x1d0/0x470 [ 492.667757][T10598] ? sb_set_blocksize+0xa5/0xe0 [ 492.672644][T10598] get_tree_bdev+0x3f1/0x610 [ 492.677264][T10598] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 492.683529][T10598] vfs_get_tree+0x88/0x270 [ 492.687972][T10598] do_new_mount+0x24a/0xa40 [ 492.692494][T10598] __se_sys_mount+0x2d6/0x3c0 [ 492.697189][T10598] ? __x64_sys_mount+0xc0/0xc0 [ 492.701976][T10598] ? __x64_sys_mount+0x1c/0xc0 [ 492.706754][T10598] do_syscall_64+0x4c/0xa0 [ 492.711191][T10598] ? clear_bhb_loop+0x60/0xb0 [ 492.715923][T10598] ? clear_bhb_loop+0x60/0xb0 [ 492.720624][T10598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.726555][T10598] RIP: 0033:0x7f7ee8590eea [ 492.730987][T10598] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.750692][T10598] RSP: 002b:00007f7ee93a1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 492.759125][T10598] RAX: ffffffffffffffda RBX: 00007f7ee93a1ef0 RCX: 00007f7ee8590eea [ 492.767108][T10598] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7ee93a1eb0 [ 492.775099][T10598] RBP: 0000200000000180 R08: 00007f7ee93a1ef0 R09: 0000000000800700 [ 492.783082][T10598] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 492.791065][T10598] R13: 00007f7ee93a1eb0 R14: 000000000000046f R15: 000000000000002c [ 492.799072][T10598] [ 492.802389][T10598] Kernel Offset: disabled [ 492.806910][T10598] Rebooting in 86400 seconds..