last executing test programs: 5m32.808019036s ago: executing program 3 (id=32): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x6, 0x51}}, 0xa) 5m32.476233559s ago: executing program 3 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 5m32.159898186s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000008000000e27f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5m31.899121835s ago: executing program 3 (id=45): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvbJL+1qZQiopIoAcrtZs28UcFwXoULRb0XpdkGmo23ZLdlCYW2h7sxYsUQcSC+Ad491j8B/wrClooUoIevERmM9tsk938XM3W+Xxgsu/NzObNmzfv7Xd2ZpkACmsk+1OKeDFuxddJxOG2ZYORLxxZXm/x8Y2JbEpiaemTP5JI8nmt9ZP89WCeeSEifvky4mRpbbn1+YXpSrWazub50cbM1dH6/MKpyzOVqXQqvTI2Pn72zfGxd95+q2d1fe3CX999fP+Ds18dX/z2p4dH7iZxLg7ly9rrsQO32jMjMZLvk6E4t2rFMz0orJ8ku70BbMtA3s+HIhsDDsdA3uuB/7+bEbEEFFSi/0NBteKA1rl9j86DnxmP3l8+AVpb/8Hl70ZiX/Pc6MBi8tSZUXa+O9yD8rMyfv793t1sim7fQwwsv9zsQXkALbduR8TpwcG141+Sj3/bd7r55fH6VpdRtM8f2E33s/jn9U7xT+lJ/BMd4p+DHfrudmzc/0sPe1BMV1n8927H+PfJ0DU8kOeea8Z8Q8mly9X0dEQ8HxEnYmhvll/ves7ZxQdL3Za1x3/ZlJXfigXz7Xg4uPfp90xWGpWd1Lndo9sRL63Ev0msGf/3NWPd1e2f7Y8LmyzjWHrvlW7LNq5/u95HwEs/Rrzasf1Xrmgl61+fHG0eD6Oto2KtP+8c+7Vb+Vurf+9l7X9g/foPJ+3Xa+tbL+OHfX+n3ZZt9/jfk3zaTO/J512vNBqzZyL2JB+tnT+28t5WvrV+Vv8Tx9cf/zod//sj4rNN1v/O0TtdV+2H9p/cUvtvPfHgwy++71b+5tr/jWbqRD5nM+PfZjdwJ/sOAAAAAAAA+k0pIg5FUio/SZdK5fLy/R1H40CpWqs3Tl6qzV2ZjOZvZYdjqNS60n04vx8i8vsfhtvujxhblR+PiCMR8c3A/ma+PFGrTu525QEAAAAAAAAAAAAAAAAAAKBPHOzy+//Mb83nTh3a5S0E/lUe+Q3FtWH/78WTnoC+5PMfiqtL/zcsQAHo6FBc+j8Ul/4PxaX/Q3Hp/1Bc+j8AAAAAAAAAAAAAAAAAAAAAAAAAAAD01IXz57NpafHxjYksP3ltfm66du3UZFqfLs/MTZQnarNXy1O12lQ1LU/UZjb6f9Va7eqZsZi7PtpI643R+vzCxZna3JXGxcszlan0Yjr0n9QKAAAAAAAAAAAAAAAAAAAAni31+YXpSrWazkp0TbwXu70Zn7+8k7cnnVs5aavgsm0VMdgvzdQ/iYF8f/bL9mwrsYuDEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs8k8AAAD//xJaL7k=") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 5m31.159991696s ago: executing program 3 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) writev(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 5m29.98851297s ago: executing program 3 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) modify_ldt$write2(0x11, 0x0, 0x0) 5m29.533557044s ago: executing program 32 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) modify_ldt$write2(0x11, 0x0, 0x0) 2m11.020300425s ago: executing program 5 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x0, 0x0, 0x4}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5, 0x0, r5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) close(r8) sendmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m9.572462019s ago: executing program 5 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x10b, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) 2m9.393986227s ago: executing program 5 (id=1965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e000000100"/32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m9.235322224s ago: executing program 5 (id=1967): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@norecovery}, {@nobh}]}, 0x9, 0x67b, &(0x7f00000007c0)="$eJzs3c9vG1kdAPDvOHaSJgvOVgjYCxsJoa0Em2yyu6hCSGzFtarKjxsXQpNWpW5TJUGQUolEKhcQ4sIBiRMHyn9BK3HlwJUDFw4IVYoQ6oGiQozGnol/xY6T+Ec2+XykaeaHZ94bu1+/N8/vzQRwYc2n/xQi3oqIh0lEuWlbMbKN8/XXvfzX41vplES1+q1/JvH4J8lO87GS7O9stvP/ypH8uRBxeaIz3c3tR/dWKpW1jWx5cev+w8XN7Ufv3r2/cmftztqD5S8vX/3wgw+vLr13qvOrZtL560++/8Pyz25853e/eZ0s/f6vN5L4KPazvKXn1b7v1KlSTt+z+Tz9V421hdq/V0957LPi3+XaR93yViXF8eWH47mdxXkpIj4T5ZiIxodXjp9+Y6yZA4aqmjTKSOCiSY6O/1LnqunhZAYYobwekF/bH3Yd3Kkw5FoJMAp71+oNAPXYL0VEHv/FettgTNfaBmZeJtHcrJNExOla5urSNP70xxtP0im6tMMBw7Gzmzfdtpf/SS0252K6tjTzspDG/7N8v0LTlH4vfLP9wOX+0p9vWxb/MDo7uxHx2az8n4yj4v9Ae/x/74Tpi38AAAAAAAAYnOfXIuJLh/X/Kxz0/5ls6/+TZGP8PhpA+vNtYwNbf/9LUy68aEoWGKC9axFf7ej/+9/m3sFzE9nv/J+o9QcoFW7fray9FxGfjIgrUZpKl5daD9vSQfjdX1z+dbf0m/v/pVOaft4XMDvUi2LbQNzVla2VwZw9XGx7uxGvav1/387WtPb/Scv/pKP/78+/ngb4wz7TuPyFpzdbVvy98fVwdPwDw1L9bcQ7h47/aVS3k97351is1QcW81pBp8/9+Jd/6Ja++IfxScv/md7xP5XU79dTikplbWPzeMdPr+Df3y5Wu20/af1/Mvn2RH781I9WtrY2liImk+ud65db9y8d7xTg3MjjIY+XNP6vfL5H+1+SNOr/TXF4KSJ2+kzz0/uzfztYaGvFU/7D+KTxv9q7/J9Lmu/Xd/RM3kyQrZmO5adzz7oVuzf7Kv8/qJXpV7I12v+gWef9OPqK1GPX5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAyJ4c9EYkhYWD+UJhYSFiNiI+FTOFyvrm1hdvr//gwWq6rfX5/+X6cpI//3+uaXm5bfn9iHgzIn41cam2vHBrvbI67pMHAAAAAAAAAAAAAAAAAACAM2K2Nua/OtU+/j/1j4lx5w4YumL2V7zDxVM88Z7VqYFmBBi5k8c/8HHXf/yXhpoPYPS6x/+r19WakWYHGKGD+P/uePMBjN4Jr//9XADngPY/uKj6bNObHnY+gHHou/zfG24+AAAAAACAgXjz7ed/SSJi5yuXalNqMtumsz+cb4VxZwAYmyP68E6OKh/A6BXXx50DYFxc4wPJwdx/Dh3sf0jv//36fQGSoeYLAAAAAAAAAAAAAGh4563W8f/F/sb/vzGq/AHDU4jo8QhvffvhPOsx/v+w4PfILzhHuj/6o5+yP+mvhuDRQXAmGf8PNMrx3UO3dy/Ckx7tBwAAAAAAAAAAAADAQE0/urdSqaxtbG6PZ2YqIk66+9eOek3+dPNxnmD7zM7KSBONnYihp7V/1GvyD+J4Ry6d4v/GWZ5JIv1Uer0b+S04BpBo6YS7j+frCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6PT/AAAA//9e4y3q") 2m8.792163577s ago: executing program 5 (id=1972): gettid() r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000800)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"/15], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "6035ae734de721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x38}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) keyctl$KEYCTL_MOVE(0x4, r3, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 2m8.682765466s ago: executing program 5 (id=1975): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x7d93, &(0x7f0000000380)={0x0, 0xffd5, 0x800, 0x82, 0x255}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r3, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1m53.501132429s ago: executing program 33 (id=1975): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x7d93, &(0x7f0000000380)={0x0, 0xffd5, 0x800, 0x82, 0x255}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r3, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 8.268742846s ago: executing program 1 (id=2444): gettid() syz_clone(0x20810200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x10}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getcwd(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) syz_io_uring_setup(0x4175, &(0x7f0000000240)={0x0, 0xbf56, 0x2, 0x2, 0x2d0}, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000600)=""/207) io_submit(r7, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 7.332527673s ago: executing program 1 (id=2453): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}}, 0x40) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x810}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5.945247938s ago: executing program 1 (id=2471): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 5.830939191s ago: executing program 7 (id=2472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.626064992s ago: executing program 7 (id=2476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 4.51097269s ago: executing program 7 (id=2484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getuid() 4.202941561s ago: executing program 7 (id=2488): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) 4.018664796s ago: executing program 7 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6a6, &(0x7f0000000e40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x670, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x4, 0xc18, 0xa000010, [{0x3, 0x1f, "adc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c060286000079c67091ecb309bc3607cc4f731686381c2ab65ec1fd6441cddf9cc3010837d0bc576b97ca438056094843b673e1db01ef535eb34d1bd788dd968ab5d99a00e9de173cd0190e2ef734230c3ab4479cfb77596190726b9b610e85b893033cf5e9847dd0b54fa5797c0f00d1f9322c71b8c453f7eb1e395a3b71e52897d09b1d16814f1d8f7b07094205f66b8065bb827f8dae965d41d38596a49e8dbef3f078f4a1dd87e289f690af08a1102177ddc612ed3f9318465412f323526ee23bd46b12bbbd821827314665bd0c8671220e"}, {0x3, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a708073"}, {0x2, 0x99, "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"}]}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x80, 0x119, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT=r8, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="8e945eb49f90ec481848f5eb1d8b83b68cd50617da3e4e88fbf1930cc5ebefb5c3ae3646e6ac7b5d68879bb0994530e52f1adb8bf52ac4942bdd13c3b461668a561cad0c7cda39f10d695d85258e165f8210e2640ffd046efa00d4556b3cd8837a13ea938f947d006cb6ee622d8fe393aff9264814523d0bb9dab21a9dbe6b", @ANYRES64, @ANYRESDEC=r7], 0x48) mq_open(&(0x7f0000000ac0)='eth0\x00\xdd\xad\xff=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9%\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xcfL\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe9XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xa2@\xeb\x18\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4\x80\x00\x00\x00a\xdf\xb5\xd9\xe4\x01\xea|.\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9J\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x9e\xef\x9b\x97\xcb\xc6\x89\xba\x8e\xf2\xfb\xd5\a\xcb\xf6\xf7{\xec\xf0@\xc2\xb2\xbcAQx\xa4\x12\xf8\x9cji\"\xf7\x1a\xbd\xac\xde\xf4\x9b\xd7#\xab\\q\xd6\xdf#>}\x97\xd0U\xe4\x9e+|\xb1MT\xa0\x1bf\v9\xcdx\xab\x83\x87\xd3q3\xbeL\xd2\x1f6\x1ffL\x9eM\x0f?\'\xc3YB0\x80!\xe9Y\xf1:\xeeX\xf7G\x85K\xbb\xbdijaA\x00&\x0e\xb3\x99\xbc9\xee\x8f\aVy!d^\r\xd1\x9b\xd5\x06\xbc$\xc9[\x8e[', 0x1, 0x50, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r9 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x1, 0x2d6}) io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653b, 0x0, 0x1, 0xd4, 0x0, r9}) io_setup(0x2, &(0x7f0000000100)=0x0) io_destroy(r10) 3.296712513s ago: executing program 0 (id=2498): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 2.924587303s ago: executing program 6 (id=2502): r0 = syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6a6f639489314a7a8edab552aea7839df64e9f6f6d70"], 0x3, 0x54c, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x38f}}, {@abort}]}, 0xff, 0x5d8, &(0x7f0000001480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4040, 0x0) r3 = openat(r1, &(0x7f0000000b80)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd22, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r10 = dup(r9) r11 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, 0x0) 2.385744639s ago: executing program 4 (id=2505): capset(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000280)=ANY=[], 0x0) 2.383037237s ago: executing program 2 (id=2506): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e40316", @ANYRES16=r0], 0x40c}}, 0x0) 2.222453878s ago: executing program 2 (id=2507): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="410302070402e50512c71dcc80b3c4f576ebda506287a4ebf7e50102"], 0x1c) 2.110136322s ago: executing program 4 (id=2508): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1.839371572s ago: executing program 2 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.838906008s ago: executing program 6 (id=2510): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="8f52eb24cc808000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 1.813785213s ago: executing program 7 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r6, 0x0, 0x80000001}, 0x18) r7 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff020000000000000000000000000001", @ANYBLOB="99e1"], 0xfce) 1.785405258s ago: executing program 4 (id=2512): r0 = socket(0x22, 0x2, 0x24) getsockname$packet(r0, 0x0, 0x0) 1.657557862s ago: executing program 6 (id=2513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/33, 0x21}, {0x0}], 0x2, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.651768817s ago: executing program 2 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.512630207s ago: executing program 4 (id=2515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.497870592s ago: executing program 0 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 1.481746613s ago: executing program 2 (id=2517): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.434506223s ago: executing program 1 (id=2518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) 1.349492808s ago: executing program 4 (id=2519): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}}, 0x40) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x810}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.304803361s ago: executing program 0 (id=2520): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 1.232612158s ago: executing program 6 (id=2521): socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rmdir(&(0x7f0000000040)='./control\x00') 1.174789854s ago: executing program 1 (id=2522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000800) 1.068906673s ago: executing program 1 (id=2523): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3, {0x7, 0x0, 0x0, 0xfffe, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x3, 0xfffffffd, 0xffffba09, 0x8, 0xffffffff, 0x2, 0x6, 0x0, 0x4, 0x5, 0x34, 0x2, 0x4, 0xfffffe00, 0x9, 0xffff8000, 0xfffffff8, 0xe5, 0x53aee169, 0xcdb, 0x7, 0xfffffffb, 0x6b5, 0x4, 0x7, 0x3, 0x9, 0x7, 0x3, 0x0, 0x7, 0x3ff, 0x5, 0x1, 0x2, 0x2, 0x3, 0x8, 0xd, 0x1, 0x7, 0x40, 0x7f, 0x8001, 0x4, 0xf, 0xd, 0x5, 0x1, 0x1, 0x400, 0x7, 0x1ff, 0x9, 0x3, 0x0, 0x100, 0x1, 0x9, 0x1b2, 0x2, 0x8, 0x1000, 0xc, 0x8, 0x6, 0x10, 0x6, 0x3, 0x8, 0x0, 0x5, 0x4, 0x9, 0x5f64, 0x80000000, 0x1, 0x7, 0x19b, 0x1e5e, 0x0, 0x5ff, 0x3, 0x2, 0x28, 0x32, 0x9, 0x3, 0x6e3a, 0xfed4, 0xfffffba4, 0x4, 0xdb, 0x4, 0x8, 0x7, 0x4, 0x2, 0x8, 0xfffffff8, 0x7fff, 0x7fff, 0x8, 0x7, 0x7, 0x535b046b, 0x80000001, 0x2, 0x81, 0x80, 0x0, 0x8000, 0x1, 0x2, 0xff, 0x7ff, 0xbc7e, 0x37, 0x1, 0x10000, 0x2, 0x5724, 0x3, 0x4, 0x2, 0x8, 0x6a, 0xb1, 0x2, 0x9, 0x100, 0xff, 0x8, 0x40, 0x8001, 0x4, 0x9, 0xfffff0a0, 0xfffffffb, 0x705, 0x9, 0x7, 0x800, 0xb2, 0x9, 0x6, 0x5, 0x3, 0x1, 0x7, 0x2, 0x7, 0xcc96, 0xb, 0x5, 0x800, 0x1, 0xce, 0x8, 0x9, 0x0, 0x6, 0xe6a8, 0x9, 0x1fa00, 0x61, 0x9, 0x25b, 0x8, 0x6667, 0x20c, 0x6, 0x6, 0x8, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x2, 0x9, 0xffffffff, 0x4, 0x76ac, 0x8, 0x1005, 0x59a, 0xc35, 0x7, 0x8, 0x4, 0x3, 0x2, 0x2, 0x7fff, 0x8, 0x6, 0x2, 0xff, 0xf3c1, 0x2, 0x2, 0x9, 0x65, 0xf7d0, 0x34, 0x5, 0x4, 0x3094, 0x76, 0x10000, 0x797d991, 0xff, 0xffff, 0x200, 0x6, 0x9, 0x7, 0x0, 0xf, 0xd, 0x79, 0x8bdd, 0x9, 0x8, 0x0, 0x101, 0x0, 0x4, 0x0, 0x8000, 0x5, 0x5, 0x3, 0xa, 0x200, 0x9, 0xfffffff9, 0x9a2, 0x8, 0xe1, 0x8, 0x5, 0x10000, 0x9, 0x264, 0x3, 0x400, 0xfffffffd, 0x6, 0x7, 0x3, 0x6, 0xfffffff8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 956.545453ms ago: executing program 0 (id=2524): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 945.141469ms ago: executing program 2 (id=2525): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 216.06445ms ago: executing program 0 (id=2526): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 214.576793ms ago: executing program 4 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") 176.122088ms ago: executing program 6 (id=2528): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c048) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, 0x0, 0x0) 2.256771ms ago: executing program 0 (id=2529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 6 (id=2530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) set_mempolicy(0x3, 0x0, 0x8) kernel console output (not intermixed with test programs): 59] smc: adding ib device syz2 with port count 1 [ 236.282322][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.284618][ T9659] smc: ib device syz2 port 1 has no pnetid [ 236.289562][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.306891][ T9649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.325814][ T9649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.333286][ T9649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.339614][ T9649] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 236.352407][ T9649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.361984][ T9649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.367059][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.375031][ T9649] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.375128][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.459250][ T9649] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.997416][ T9683] loop2: detected capacity change from 0 to 512 [ 237.029991][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 237.067861][ T9690] netlink: 'syz.4.1387': attribute type 4 has an invalid length. [ 237.284733][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 237.324165][ T9695] netlink: 'syz.4.1390': attribute type 12 has an invalid length. [ 237.348643][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 237.359195][ T9695] netlink: 'syz.4.1390': attribute type 12 has an invalid length. [ 237.493889][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.730250][ T9708] loop0: detected capacity change from 0 to 1024 [ 237.776110][ T9708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.868658][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.996357][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.372976][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.395850][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.403019][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.404328][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 238.415194][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.739873][ T9389] veth0_vlan: entered promiscuous mode [ 238.792357][ T9389] veth1_vlan: entered promiscuous mode [ 238.898951][ T9389] veth0_macvtap: entered promiscuous mode [ 238.943393][ T9389] veth1_macvtap: entered promiscuous mode [ 238.992443][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.037849][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.074453][ T7647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.096953][ T7647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.144966][ T7647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.173031][ T7647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.569114][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.610825][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.746001][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.770976][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.970499][ T9767] syzkaller0: entered promiscuous mode [ 239.990645][ T9767] syzkaller0: entered allmulticast mode [ 240.463234][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.322085][ T9797] tipc: Enabled bearer , priority 0 [ 241.355311][ T9797] syzkaller0: MTU too low for tipc bearer [ 241.372631][ T9797] tipc: Disabling bearer [ 241.925968][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 241.925991][ T31] audit: type=1326 audit(1765312640.837:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 241.971745][ T9822] loop7: detected capacity change from 0 to 7 [ 241.979711][ T31] audit: type=1326 audit(1765312640.867:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 241.981417][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.004384][ T31] audit: type=1326 audit(1765312640.867:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.011585][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.037079][ T31] audit: type=1326 audit(1765312640.867:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.074336][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.084026][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.100414][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.110077][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.118538][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.121378][ T31] audit: type=1326 audit(1765312640.867:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.128159][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.160663][ T31] audit: type=1326 audit(1765312640.867:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.161968][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.183796][ T31] audit: type=1326 audit(1765312640.867:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.192517][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.263048][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.272687][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.290746][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.300375][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.310312][ T9822] ldm_validate_partition_table(): Disk read failed. [ 242.318159][ T31] audit: type=1326 audit(1765312640.867:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.318196][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.350029][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.358177][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.367827][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.396310][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 242.405964][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 242.418558][ T9822] Dev loop7: unable to read RDB block 0 [ 242.433540][ T9822] loop7: unable to read partition table [ 242.455059][ T9822] loop7: partition table beyond EOD, truncated [ 242.461476][ T9822] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 242.533101][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.573595][ T31] audit: type=1326 audit(1765312641.487:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.672825][ T31] audit: type=1326 audit(1765312641.487:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 242.703633][ T9834] loop0: detected capacity change from 0 to 1024 [ 242.772085][ T9834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.851708][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.963821][ T9838] syzkaller0: entered promiscuous mode [ 242.989822][ T9838] syzkaller0: entered allmulticast mode [ 243.073774][ T9854] netlink: 'syz.6.1440': attribute type 1 has an invalid length. [ 243.492963][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.462842][ T9909] loop1: detected capacity change from 0 to 164 [ 245.851819][ T9914] syzkaller0: entered promiscuous mode [ 245.871597][ T9914] syzkaller0: entered allmulticast mode [ 246.471735][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1465'. [ 247.552083][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 247.860604][ T9949] IPVS: Error connecting to the multicast addr [ 248.110702][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1475'. [ 248.139296][ T9963] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1478'. [ 249.508936][ T9973] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1481'. [ 249.593979][ T9973] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 249.779292][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 249.779313][ T31] audit: type=1326 audit(1765312648.687:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 249.873809][ T31] audit: type=1326 audit(1765312648.717:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 249.980011][ T31] audit: type=1326 audit(1765312648.717:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 250.076078][ T31] audit: type=1326 audit(1765312648.727:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 250.101701][ T31] audit: type=1326 audit(1765312648.987:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 250.151837][ T31] audit: type=1326 audit(1765312648.987:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 250.191656][ T9997] syzkaller0: entered promiscuous mode [ 250.209547][ T9997] syzkaller0: entered allmulticast mode [ 250.333949][ T9992] syzkaller0: entered promiscuous mode [ 250.342803][ T9992] syzkaller0: entered allmulticast mode [ 250.482548][T10015] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.762817][ T31] audit: type=1326 audit(1765312649.667:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 250.829041][ T31] audit: type=1326 audit(1765312649.697:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3524f8df90 code=0x7ffc0000 [ 250.878919][ T31] audit: type=1326 audit(1765312649.697:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3524f90f77 code=0x7ffc0000 [ 250.905483][ T31] audit: type=1326 audit(1765312649.697:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 250.945283][T10023] loop4: detected capacity change from 0 to 1024 [ 250.970099][T10023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.037640][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.101387][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 252.524323][T10045] netlink: 'syz.6.1505': attribute type 1 has an invalid length. [ 252.831772][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 253.311563][T10071] loop4: detected capacity change from 0 to 1024 [ 253.338844][T10071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.403803][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.357188][T10077] syzkaller0: entered promiscuous mode [ 254.362695][T10077] syzkaller0: entered allmulticast mode [ 254.472218][T10077] tipc: Started in network mode [ 254.477892][T10077] tipc: Node identity 428e7831ee0e, cluster identity 4711 [ 254.487655][T10077] tipc: Enabled bearer , priority 0 [ 254.529707][T10077] loop2: detected capacity change from 0 to 512 [ 254.590635][T10077] EXT4-fs (loop2): too many log groups per flexible block group [ 254.648219][T10077] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 254.663421][T10079] syzkaller0: entered promiscuous mode [ 254.668918][T10079] syzkaller0: entered allmulticast mode [ 254.675597][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 254.738758][T10098] loop0: detected capacity change from 0 to 1024 [ 254.747781][T10098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.754793][T10077] EXT4-fs (loop2): mount failed [ 254.759758][T10098] ext4: Unknown parameter 'seclabel' [ 255.330632][T10076] tipc: Resetting bearer [ 255.354936][T10076] tipc: Disabling bearer [ 255.608835][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 255.859430][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 256.104948][T10133] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 257.144120][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 257.144141][ T31] audit: type=1326 audit(1765312656.057:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.265477][ T31] audit: type=1326 audit(1765312656.057:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.307491][ T31] audit: type=1326 audit(1765312656.057:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.327208][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1535'. [ 257.330648][ T31] audit: type=1326 audit(1765312656.057:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.366928][ T31] audit: type=1326 audit(1765312656.057:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.389893][ T31] audit: type=1326 audit(1765312656.057:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.415548][ T31] audit: type=1326 audit(1765312656.057:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.438920][ T31] audit: type=1326 audit(1765312656.057:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.461651][ T31] audit: type=1326 audit(1765312656.057:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.487194][ T31] audit: type=1326 audit(1765312656.057:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 257.573418][T10155] syzkaller0: entered promiscuous mode [ 257.579861][T10155] syzkaller0: entered allmulticast mode [ 257.681920][T10162] loop5: detected capacity change from 0 to 512 [ 257.705870][T10162] EXT4-fs (loop5): too many log groups per flexible block group [ 257.719002][T10162] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 257.727621][T10162] EXT4-fs (loop5): mount failed [ 257.795057][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 257.806063][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 257.886075][T10170] bridge_slave_0: left allmulticast mode [ 257.891799][T10170] bridge_slave_0: left promiscuous mode [ 257.899001][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.915103][T10170] bridge_slave_1: left allmulticast mode [ 257.920752][T10170] bridge_slave_1: left promiscuous mode [ 257.926644][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.939441][T10170] bond0: (slave bond_slave_0): Releasing backup interface [ 257.951186][T10170] bond0: (slave bond_slave_1): Releasing backup interface [ 257.973571][T10170] team0: Port device team_slave_0 removed [ 257.988634][T10170] team0: Port device team_slave_1 removed [ 257.997373][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.006467][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.017870][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.026326][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.045748][T10170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.129209][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 258.159605][T10174] netlink: 'syz.1.1546': attribute type 4 has an invalid length. [ 258.412199][T10184] sd 0:0:1:0: device reset [ 258.599450][T10190] loop2: detected capacity change from 0 to 512 [ 259.364562][T10205] netlink: 'syz.4.1557': attribute type 8 has an invalid length. [ 259.964099][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1559'. [ 260.137687][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.144178][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.326680][T10231] loop2: detected capacity change from 0 to 512 [ 260.376850][T10231] EXT4-fs (loop2): too many log groups per flexible block group [ 260.401430][T10231] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 260.419878][T10236] loop6: detected capacity change from 0 to 512 [ 260.421608][T10231] EXT4-fs (loop2): mount failed [ 260.447173][T10236] EXT4-fs: inline encryption not supported [ 260.476865][T10236] EXT4-fs: Ignoring removed i_version option [ 260.522242][T10236] EXT4-fs (loop6): 1 orphan inode deleted [ 260.540831][T10236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.633371][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 260.667639][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.682494][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1563'. [ 260.702178][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 260.719026][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1564'. [ 260.980891][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1569'. [ 261.832346][T10228] tipc: Enabled bearer , priority 0 [ 261.840436][T10223] syzkaller0: entered promiscuous mode [ 261.846088][T10223] syzkaller0: entered allmulticast mode [ 261.855073][T10211] tipc: Resetting bearer [ 261.884571][T10211] tipc: Disabling bearer [ 262.029626][T10271] loop4: detected capacity change from 0 to 164 [ 262.123185][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 262.154167][T10273] netlink: 'syz.0.1575': attribute type 4 has an invalid length. [ 262.227499][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 262.262249][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'. [ 262.529802][T10301] loop0: detected capacity change from 0 to 128 [ 262.618234][T10301] vfat: Unknown parameter 'GPL' [ 263.070799][T10301] loop0: detected capacity change from 0 to 2048 [ 263.210478][T10301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.293601][T10301] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.344715][T10319] __nla_validate_parse: 2 callbacks suppressed [ 263.344737][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1590'. [ 263.434074][T10301] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 263.515501][T10322] syzkaller0: entered promiscuous mode [ 263.538114][T10322] syzkaller0: entered allmulticast mode [ 263.606203][T10322] tipc: Started in network mode [ 263.613492][T10322] tipc: Node identity d2cc8b7166a2, cluster identity 4711 [ 263.628736][T10322] tipc: Enabled bearer , priority 0 [ 263.681135][T10322] loop6: detected capacity change from 0 to 512 [ 263.717588][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.745876][T10322] EXT4-fs (loop6): too many log groups per flexible block group [ 263.784892][T10322] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 263.817250][T10322] EXT4-fs (loop6): mount failed [ 263.876292][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1594'. [ 263.893246][T10320] tipc: Resetting bearer [ 263.976459][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 264.015125][T10320] tipc: Disabling bearer [ 264.128508][T10342] loop1: detected capacity change from 0 to 512 [ 264.138600][T10341] loop4: detected capacity change from 0 to 512 [ 264.146257][T10342] EXT4-fs: inline encryption not supported [ 264.156539][T10341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.166482][T10342] EXT4-fs: Ignoring removed i_version option [ 264.180104][T10342] EXT4-fs (loop1): 1 orphan inode deleted [ 264.190294][T10342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.226502][T10341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.240644][T10341] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.344244][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.565712][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.659234][T10365] loop5: detected capacity change from 0 to 128 [ 264.686817][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 264.713826][T10365] vfat: Unknown parameter 'GPL' [ 264.733152][T10367] loop1: detected capacity change from 0 to 512 [ 264.755368][T10368] atomic_op ffff88807b8ea998 conn xmit_atomic 0000000000000000 [ 264.824262][T10367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.840559][T10367] ext4 filesystem being mounted at /308/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.134576][T10379] loop5: detected capacity change from 0 to 2048 [ 265.259632][T10379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.302945][T10379] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.505758][T10387] syz.0.1611 (10387) used greatest stack depth: 15968 bytes left [ 265.564524][T10379] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.667841][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.725519][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 265.899405][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.906439][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'. [ 265.948948][T10397] syzkaller0: entered promiscuous mode [ 265.990015][T10397] syzkaller0: entered allmulticast mode [ 266.031750][T10401] loop0: detected capacity change from 0 to 512 [ 266.072581][T10397] tipc: Enabled bearer , priority 0 [ 266.104045][T10401] EXT4-fs: inline encryption not supported [ 266.110027][T10401] EXT4-fs: Ignoring removed i_version option [ 266.137412][T10397] loop4: detected capacity change from 0 to 512 [ 266.175716][T10401] EXT4-fs (loop0): 1 orphan inode deleted [ 266.214393][T10401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.248838][T10397] EXT4-fs (loop4): too many log groups per flexible block group [ 266.306592][T10397] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 266.343279][T10397] EXT4-fs (loop4): mount failed [ 266.374092][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 266.383325][T10412] netlink: 'syz.5.1618': attribute type 12 has an invalid length. [ 266.392505][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 266.424792][T10394] tipc: Resetting bearer [ 266.435416][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.463085][T10412] netlink: 'syz.5.1618': attribute type 12 has an invalid length. [ 266.475716][T10394] tipc: Disabling bearer [ 266.738149][T10414] syzkaller0: entered promiscuous mode [ 266.743883][T10414] syzkaller0: entered allmulticast mode [ 266.771872][T10425] loop4: detected capacity change from 0 to 164 [ 266.883171][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 266.883192][ T31] audit: type=1326 audit(1765312665.787:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 266.973152][ T31] audit: type=1326 audit(1765312665.787:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 267.037348][ T31] audit: type=1326 audit(1765312665.787:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 267.118836][ T31] audit: type=1326 audit(1765312665.787:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 267.187829][T10434] vfat: Unknown parameter 'GPL' [ 267.231475][ T31] audit: type=1326 audit(1765312665.787:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 267.270502][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 267.308173][ T31] audit: type=1326 audit(1765312666.177:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 267.392832][ T31] audit: type=1326 audit(1765312666.177:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 267.491393][ T31] audit: type=1326 audit(1765312666.177:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 267.542036][T10445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.551341][ T31] audit: type=1326 audit(1765312666.177:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 267.576861][ T31] audit: type=1326 audit(1765312666.177:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 267.605441][T10445] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.661069][T10453] EXT4-fs: inline encryption not supported [ 267.689592][T10453] EXT4-fs: Ignoring removed i_version option [ 267.695793][T10445] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.756110][T10453] EXT4-fs (loop4): 1 orphan inode deleted [ 267.765586][T10453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.899436][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.960379][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1635'. [ 267.974399][T10458] netlink: 'syz.5.1635': attribute type 12 has an invalid length. [ 269.378441][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1635'. [ 269.403177][T10458] netlink: 'syz.5.1635': attribute type 12 has an invalid length. [ 269.696376][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.930038][T10481] set_capacity_and_notify: 3 callbacks suppressed [ 269.930060][T10481] loop2: detected capacity change from 0 to 164 [ 270.355739][T10490] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1645'. [ 270.527738][T10494] loop2: detected capacity change from 0 to 512 [ 270.545271][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1647'. [ 270.689395][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1647'. [ 270.702050][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 270.753830][T10494] EXT4-fs: inline encryption not supported [ 270.757799][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1647'. [ 270.759812][T10494] EXT4-fs: Ignoring removed i_version option [ 270.800354][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 270.811294][T10498] netlink: 'syz.0.1649': attribute type 12 has an invalid length. [ 270.825422][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 270.834728][T10498] netlink: 'syz.0.1649': attribute type 12 has an invalid length. [ 270.858201][T10494] EXT4-fs (loop2): 1 orphan inode deleted [ 270.874747][T10494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.066378][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1647'. [ 271.077447][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.100054][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1647'. [ 271.283254][T10504] loop4: detected capacity change from 0 to 1024 [ 271.356632][T10504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.469112][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.765117][T10525] serio: Serial port ttyS3 [ 272.049409][T10534] netlink: 'gtp': attribute type 13 has an invalid length. [ 272.295504][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.303230][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.393139][T10549] netlink: 'syz.1.1665': attribute type 12 has an invalid length. [ 272.468892][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.498871][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.786069][ T31] audit: type=1326 audit(1765312671.697:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 272.838680][ T5922] syz1: Port: 1 Link DOWN [ 272.843352][ T31] audit: type=1326 audit(1765312671.697:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 272.888498][ T8816] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.888544][T10549] netlink: 'syz.1.1665': attribute type 12 has an invalid length. [ 272.920731][ T8816] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.953761][ T8816] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.954400][ T31] audit: type=1326 audit(1765312671.697:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 272.998611][ T8816] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.026612][ T31] audit: type=1326 audit(1765312671.697:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.045156][ T8816] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.084643][ T8816] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.104956][ T8816] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.118526][ T31] audit: type=1326 audit(1765312671.727:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.131430][ T8816] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.180939][ T6773] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.204360][ T6773] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.238954][ T31] audit: type=1326 audit(1765312671.727:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.245217][T10566] vlan0: entered allmulticast mode [ 273.298066][ T31] audit: type=1326 audit(1765312671.777:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.344148][ T31] audit: type=1326 audit(1765312671.777:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.374749][ T31] audit: type=1326 audit(1765312671.777:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.398941][ T6773] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.410289][ T31] audit: type=1326 audit(1765312671.777:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 273.433487][ T6773] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.625054][T10579] netlink: 'syz.0.1677': attribute type 30 has an invalid length. [ 273.817186][T10587] random: crng reseeded on system resumption [ 273.905432][T10586] loop1: detected capacity change from 0 to 512 [ 273.920728][T10586] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 273.928959][T10586] FAT-fs (loop1): Filesystem has been set read-only [ 273.965303][T10586] syzkaller0: entered allmulticast mode [ 273.979104][T10586] syzkaller0: entered promiscuous mode [ 274.014737][T10586] syzkaller0 (unregistering): left allmulticast mode [ 274.021820][T10586] syzkaller0 (unregistering): left promiscuous mode [ 274.094814][T10598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.140680][T10602] netlink: 'syz.5.1685': attribute type 12 has an invalid length. [ 274.160400][T10602] netlink: 'syz.5.1685': attribute type 12 has an invalid length. [ 274.206353][T10604] loop0: detected capacity change from 0 to 1024 [ 274.241512][T10604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.406499][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.464425][T10619] __nla_validate_parse: 8 callbacks suppressed [ 274.464447][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1691'. [ 274.639277][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 274.679441][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1698'. [ 274.690399][T10627] bridge1: entered promiscuous mode [ 274.698159][T10627] bridge1: entered allmulticast mode [ 274.901049][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 274.925090][T10642] netlink: 'syz.0.1703': attribute type 12 has an invalid length. [ 274.935435][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 274.955351][T10642] netlink: 'syz.0.1703': attribute type 12 has an invalid length. [ 275.097293][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1706'. [ 275.109375][T10647] loop6: detected capacity change from 0 to 2048 [ 275.292061][T10647] loop6: p1 < > p4 [ 275.308939][T10647] loop6: p4 size 8388608 extends beyond EOD, truncated [ 275.582833][ T6747] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 275.604851][T10663] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 275.731863][T10656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.748054][T10656] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 275.763066][ T6747] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.785403][ T6747] usb 1-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 275.797069][T10656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.797247][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 275.809573][ T6747] usb 1-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 275.821522][T10656] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 275.835034][T10656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.841347][T10656] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 275.885356][ T6747] usb 1-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=84.40 [ 275.917624][T10656] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 275.923635][ T6747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.931634][ T6747] usb 1-1: Product: syz [ 275.935872][T10656] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 275.944101][ T6747] usb 1-1: Manufacturer: Э [ 275.948633][ T6747] usb 1-1: SerialNumber: syz [ 275.954090][T10656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.959991][T10656] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 276.001354][T10679] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 276.135748][T10679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.727064][T10656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.827552][T10656] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 276.861342][T10695] wg1 speed is unknown, defaulting to 1000 [ 276.930670][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.052352][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.204331][T10695] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 277.235761][T10701] loop2: detected capacity change from 0 to 512 [ 277.423316][T10701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.500692][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.531713][T10701] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.573149][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.603415][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.646314][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.680709][T10696] EXT4-fs error (device loop2): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.2.1720: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 277.716932][T10720] syzkaller0: entered promiscuous mode [ 277.727911][ T6747] usb 1-1: USB disconnect, device number 2 [ 277.751545][T10720] syzkaller0: entered allmulticast mode [ 277.764484][T10696] EXT4-fs error (device loop2): ext4_get_first_dir_block:3538: inode #12: comm syz.2.1720: directory missing '.' [ 277.809480][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.818817][T10720] tipc: Enabled bearer , priority 0 [ 277.844814][T10695] wg1 speed is unknown, defaulting to 1000 [ 277.861510][T10720] loop4: detected capacity change from 0 to 512 [ 277.910597][T10720] EXT4-fs (loop4): too many log groups per flexible block group [ 277.933860][T10720] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 277.953047][T10720] EXT4-fs (loop4): mount failed [ 277.993283][T10719] tipc: Resetting bearer [ 277.996502][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.045900][T10719] tipc: Disabling bearer [ 278.074787][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 278.074806][ T31] audit: type=1326 audit(1765312676.987:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.152972][ T31] audit: type=1326 audit(1765312677.017:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.208187][T10737] batadv_slave_0: entered promiscuous mode [ 278.223220][ T31] audit: type=1326 audit(1765312677.017:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.286630][ T31] audit: type=1326 audit(1765312677.017:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.367479][ T31] audit: type=1326 audit(1765312677.017:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.453606][ T31] audit: type=1326 audit(1765312677.017:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.507840][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 278.525888][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.540170][T10751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.550280][ T31] audit: type=1326 audit(1765312677.017:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.602013][ T31] audit: type=1326 audit(1765312677.017:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.634197][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.657345][T10751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.669157][ T31] audit: type=1326 audit(1765312677.017:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.701216][ T31] audit: type=1326 audit(1765312677.017:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 278.795062][T10759] loop5: detected capacity change from 0 to 1024 [ 278.801722][T10753] tipc: Enabling of bearer rejected, failed to enable media [ 278.841658][T10759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.077886][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.138036][T10779] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1749'. [ 279.148425][T10776] loop2: detected capacity change from 0 to 512 [ 279.166663][T10776] ext4: Unknown parameter 'mask' [ 279.194905][T10776] loop2: detected capacity change from 0 to 512 [ 279.212127][T10776] EXT4-fs: Ignoring removed orlov option [ 279.234957][T10776] EXT4-fs: Mount option(s) incompatible with ext2 [ 279.383067][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.390847][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.047019][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 280.210599][ T7653] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.253113][ T7653] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.357085][ T7653] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.373036][ T7653] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.382829][T10822] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1765'. [ 280.390951][ T7653] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.410157][T10824] loop0: detected capacity change from 0 to 512 [ 280.427156][ T7653] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.455985][T10824] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.502872][T10824] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 280.510446][ T7653] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.555355][ T7653] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.565113][T10824] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 280.576886][T10824] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 280.585799][T10824] System zones: 0-2, 18-18, 34-35 [ 280.595128][T10824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.647505][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 280.673842][T10837] loop5: detected capacity change from 0 to 164 [ 280.685987][T10835] netlink: 'syz.4.1769': attribute type 4 has an invalid length. [ 280.692343][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.754421][T10837] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 280.794727][T10837] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 280.812285][T10837] Symlink component flag not implemented [ 280.826776][T10837] Symlink component flag not implemented [ 280.842685][T10837] Symlink component flag not implemented (7) [ 280.872940][T10837] Symlink component flag not implemented (116) [ 280.927634][T10844] loop0: detected capacity change from 0 to 164 [ 281.114832][T10856] 9p: Bad value for 'rfdno' [ 281.148993][T10859] netlink: 'syz.0.1780': attribute type 1 has an invalid length. [ 281.188709][T10862] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1781'. [ 281.646836][T10887] loop0: detected capacity change from 0 to 2048 [ 281.716364][T10887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.731245][T10887] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.965987][T10902] loop2: detected capacity change from 0 to 1024 [ 282.011214][T10902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.462939][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.532231][T10879] team0 (unregistering): Port device team_slave_0 removed [ 282.576049][T10879] team0 (unregistering): Port device team_slave_1 removed [ 282.989298][T10922] loop4: detected capacity change from 0 to 1024 [ 283.023917][T10922] EXT4-fs: Ignoring removed orlov option [ 283.036021][ T6780] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 345: padding at end of block bitmap is not set [ 283.078706][T10922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.093816][ T6780] EXT4-fs (loop0): Remounting filesystem read-only [ 283.104258][T10928] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 283.138734][T10928] loop5: detected capacity change from 0 to 512 [ 283.153823][T10928] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.287408][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 283.287429][ T31] audit: type=1800 audit(1765312682.197:1039): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1804" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 283.375309][T10928] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 283.450767][T10928] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1809: bg 0: block 248: padding at end of block bitmap is not set [ 283.455094][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.142599][T10928] Quota error (device loop5): write_blk: dquota write failed [ 284.172963][T10928] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 284.203333][T10928] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1809: Failed to acquire dquot type 1 [ 284.275295][T10928] EXT4-fs (loop5): 1 truncate cleaned up [ 284.285038][T10928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 284.289116][T10940] wg1 speed is unknown, defaulting to 1000 [ 284.370477][T10928] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.1809: deleted inode referenced: 12 [ 284.470352][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 284.826502][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.849066][T10957] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1815'. [ 284.927725][T10960] loop1: detected capacity change from 0 to 1024 [ 284.971473][T10960] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 284.986288][T10960] EXT4-fs (loop1): mount failed [ 285.256151][ T31] audit: type=1326 audit(1765312684.157:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.0.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 285.301213][ T31] audit: type=1326 audit(1765312684.157:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.0.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 285.349651][ T31] audit: type=1326 audit(1765312684.157:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.0.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 285.381978][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 285.391533][T10974] netlink: 'syz.0.1823': attribute type 12 has an invalid length. [ 285.392928][T10952] netlink: 'syz.5.1815': attribute type 29 has an invalid length. [ 285.418722][T10955] netlink: 'syz.5.1815': attribute type 29 has an invalid length. [ 285.427118][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 285.437081][T10974] netlink: 'syz.0.1823': attribute type 12 has an invalid length. [ 285.960655][ T31] audit: type=1326 audit(1765312684.867:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 286.071161][ T31] audit: type=1326 audit(1765312684.907:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 286.094824][ T31] audit: type=1326 audit(1765312684.907:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 286.118103][ T31] audit: type=1326 audit(1765312684.907:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2ff8f749 code=0x7ffc0000 [ 287.263230][T11023] loop0: detected capacity change from 0 to 1024 [ 287.302306][T11023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.524453][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.965315][T11046] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 288.191381][T11057] loop6: detected capacity change from 0 to 1024 [ 288.510430][T11057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.654558][T11080] 9p: Bad value for 'wfdno' [ 288.656320][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.660576][T11080] atomic_op ffff888027856998 conn xmit_atomic 0000000000000000 [ 289.980037][T11086] team0 (unregistering): Port device team_slave_0 removed [ 289.991045][T11086] team0 (unregistering): Port device team_slave_1 removed [ 290.577790][T11121] loop0: detected capacity change from 0 to 2048 [ 290.679147][T11121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.737181][T11081] wg1 speed is unknown, defaulting to 1000 [ 291.039160][T11133] loop5: detected capacity change from 0 to 1024 [ 291.102403][T11133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.330674][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.530260][ T6792] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 291.556079][ T6792] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 291.569096][ T6792] EXT4-fs (loop0): This should not happen!! Data will be lost [ 291.569096][ T6792] [ 291.608076][ T6792] EXT4-fs (loop0): Total free blocks count 0 [ 291.621866][ T6792] EXT4-fs (loop0): Free/Dirty block details [ 291.703411][ T6792] EXT4-fs (loop0): free_blocks=2415919504 [ 291.709664][ T6792] EXT4-fs (loop0): dirty_blocks=208 [ 291.719244][ T6792] EXT4-fs (loop0): Block reservation details [ 291.973650][ T6792] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 292.005083][ T7651] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 293.624309][T11178] tipc: Enabling of bearer rejected, failed to enable media [ 293.931682][T11197] syzkaller0: entered promiscuous mode [ 293.955334][T11197] syzkaller0: entered allmulticast mode [ 294.074703][T11197] tipc: Enabled bearer , priority 0 [ 294.110952][T11197] loop5: detected capacity change from 0 to 512 [ 294.137366][T11197] EXT4-fs (loop5): too many log groups per flexible block group [ 294.137615][T11197] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 294.137718][T11197] EXT4-fs (loop5): mount failed [ 294.175649][T11196] tipc: Resetting bearer [ 294.234830][T11196] tipc: Disabling bearer [ 294.365907][T11212] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 294.554260][T11212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.701006][T11228] netlink: 'syz.1.1913': attribute type 4 has an invalid length. [ 294.732429][T11228] netlink: 'syz.1.1913': attribute type 4 has an invalid length. [ 294.793636][T11234] TCP: TCP_TX_DELAY enabled [ 297.461244][T11294] veth0_to_team: entered promiscuous mode [ 297.810612][T11304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1941'. [ 297.980595][ T31] kauditd_printk_skb: 91 callbacks suppressed [ 297.980648][ T31] audit: type=1326 audit(1765312696.877:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.6.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 298.401820][ T31] audit: type=1326 audit(1765312696.877:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.6.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 298.633325][ T31] audit: type=1326 audit(1765312697.547:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 298.673386][T11322] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.690325][T11318] loop1: detected capacity change from 0 to 512 [ 298.720221][ T31] audit: type=1326 audit(1765312697.547:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 298.813663][ T31] audit: type=1326 audit(1765312697.547:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 298.839535][T11318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.862930][T11318] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.893758][ T31] audit: type=1326 audit(1765312697.547:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 298.900093][T11315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.916755][ T31] audit: type=1326 audit(1765312697.547:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 298.958608][ T31] audit: type=1326 audit(1765312697.557:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 299.013758][T11318] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1948: corrupted inode contents [ 299.022951][ T31] audit: type=1326 audit(1765312697.557:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 299.048926][T11318] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1948: mark_inode_dirty error [ 299.139425][T11318] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1948: corrupted inode contents [ 299.164360][ T31] audit: type=1326 audit(1765312697.557:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.1.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 299.281193][T11315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.289481][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.360293][T11336] loop6: detected capacity change from 0 to 4096 [ 299.388333][T11336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.742330][T11315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.879390][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.204976][T11362] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1959'. [ 300.234708][T11359] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 300.236536][T11315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.146986][T11371] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 301.212614][T11359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.308021][T11375] netlink: 'syz.5.1963': attribute type 29 has an invalid length. [ 301.358713][T11366] bond2: (slave dummy0): making interface the new active one [ 301.370473][T11366] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 301.530714][T11379] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1965'. [ 301.675916][T11372] bond2 (unregistering): (slave dummy0): Releasing active interface [ 301.712256][T11372] bond2 (unregistering): Released all slaves [ 301.725748][T11386] loop5: detected capacity change from 0 to 1024 [ 301.743845][T11390] serio: Serial port ttyS3 [ 301.759139][T11386] EXT4-fs: Ignoring removed nobh option [ 301.770368][T11386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.780636][T11386] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 301.782024][T11371] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 301.821978][T11386] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.1967: inode #4294967295: comm syz.5.1967: iget: illegal inode # [ 301.902636][T11386] EXT4-fs (loop5): no journal found [ 301.927139][T11386] EXT4-fs (loop5): can't get journal size [ 301.937454][ T8816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.949689][T11386] EXT4-fs (loop5): failed to initialize system zone (-22) [ 301.957352][T11386] EXT4-fs (loop5): mount failed [ 302.088125][T11382] syzkaller0: entered promiscuous mode [ 302.110437][T11382] syzkaller0: entered allmulticast mode [ 302.321836][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 302.430822][T11414] loop4: detected capacity change from 0 to 164 [ 302.476439][T11414] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 302.504321][T11414] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 302.512963][T11414] Symlink component flag not implemented [ 302.532008][T11414] Symlink component flag not implemented [ 302.552893][T11414] Symlink component flag not implemented (7) [ 302.569122][T11414] Symlink component flag not implemented (116) [ 303.073596][T11427] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 304.237077][T11433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1983'. [ 304.886057][ T7647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.023556][T11418] team0 (unregistering): Port device team_slave_0 removed [ 305.039137][T11418] team0 (unregistering): Port device team_slave_1 removed [ 305.092159][T11427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 305.109428][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'. [ 305.129141][ T6780] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.175188][ T6780] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.677978][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'. [ 305.727677][T11457] loop2: detected capacity change from 0 to 164 [ 305.965658][T11461] syzkaller0: entered promiscuous mode [ 305.971357][T11466] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1997'. [ 305.979238][T11468] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 305.999867][T11461] syzkaller0: entered allmulticast mode [ 306.463207][T11476] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 306.645069][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 306.671375][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 306.713164][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'. [ 306.761027][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 306.761049][ T31] audit: type=1326 audit(1765312705.667:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 306.799809][ T31] audit: type=1326 audit(1765312705.667:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 306.830830][ T31] audit: type=1326 audit(1765312705.667:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 306.855476][ T31] audit: type=1326 audit(1765312705.667:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 306.918829][ T31] audit: type=1326 audit(1765312705.667:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 306.983587][ T31] audit: type=1326 audit(1765312705.667:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 307.016930][ T31] audit: type=1326 audit(1765312705.667:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 307.048717][ T31] audit: type=1326 audit(1765312705.667:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 307.080958][ T31] audit: type=1326 audit(1765312705.667:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 307.110505][ T31] audit: type=1326 audit(1765312705.667:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.1.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 309.600000][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'. [ 309.667927][T11513] atomic_op ffff888095f4b998 conn xmit_atomic 0000000000000000 [ 310.446421][T11533] loop2: detected capacity change from 0 to 128 [ 310.548336][T11535] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2027'. [ 310.602592][T11540] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 311.150619][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2035'. [ 311.333267][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.453436][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.453436][ T6766] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 311.540593][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.540593][ T6766] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 311.554474][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.554474][ T6766] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 311.572992][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.572992][ T6766] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 311.601861][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.601861][ T6766] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 311.648032][T11566] netlink: 'syz.4.2038': attribute type 4 has an invalid length. [ 311.660060][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.660060][ T6766] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 311.688268][T11566] netlink: 'syz.4.2038': attribute type 4 has an invalid length. [ 311.706573][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.706573][ T6766] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 311.790905][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.790905][ T6766] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 311.850960][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.850960][ T6766] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 311.883074][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2040'. [ 311.905622][ T6766] kworker/u8:26: attempt to access beyond end of device [ 311.905622][ T6766] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 311.925720][T11570] netlink: 'syz.6.2040': attribute type 4 has an invalid length. [ 312.322034][T11587] tipc: Enabling of bearer rejected, failed to enable media [ 312.720474][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2050'. [ 312.763264][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 312.763285][ T31] audit: type=1326 audit(1765312711.647:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 312.919487][ T31] audit: type=1326 audit(1765312711.647:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 312.950478][T11604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 313.025343][ T31] audit: type=1326 audit(1765312711.647:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.059663][T11610] loop2: detected capacity change from 0 to 1024 [ 313.115334][ T31] audit: type=1326 audit(1765312711.647:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.139417][T11610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.186417][ T31] audit: type=1326 audit(1765312711.647:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.209170][ T31] audit: type=1326 audit(1765312711.667:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.211587][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.240758][ T31] audit: type=1326 audit(1765312711.777:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.323080][ T31] audit: type=1326 audit(1765312711.777:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 313.403728][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 313.416166][T11623] netlink: 'syz.0.2058': attribute type 4 has an invalid length. [ 313.426866][ T31] audit: type=1326 audit(1765312711.777:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3524fc2005 code=0x7ffc0000 [ 313.522039][ T31] audit: type=1326 audit(1765312711.807:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 314.278650][T11649] loop2: detected capacity change from 0 to 128 [ 314.306425][T11649] vfat: Unknown parameter 'GPL' [ 314.309511][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2066'. [ 314.530091][T11656] loop2: detected capacity change from 0 to 2048 [ 314.713707][T11656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.776502][T11656] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.823648][T11656] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 315.274365][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.612490][T11685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2074'. [ 316.008865][T11696] syzkaller0: entered promiscuous mode [ 316.021186][T11704] netlink: 'syz.2.2082': attribute type 10 has an invalid length. [ 316.044561][T11696] syzkaller0: entered allmulticast mode [ 316.050675][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2082'. [ 316.092126][T11702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.193365][T11704] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.274857][ T5901] wg1 speed is unknown, defaulting to 1000 [ 316.281944][T11709] loop6: detected capacity change from 0 to 128 [ 316.334872][T11709] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 316.347858][T11709] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.635418][T11717] loop1: detected capacity change from 0 to 128 [ 316.659195][T11717] vfat: Unknown parameter 'GPL' [ 316.671282][ T9389] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.981926][T11726] loop1: detected capacity change from 0 to 2048 [ 317.068328][T11726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.128077][T11726] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.267130][T11726] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 317.326295][T11736] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 317.703419][T11742] loop6: detected capacity change from 0 to 1024 [ 317.748937][T11742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.786447][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.795588][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.803849][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.844171][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.855187][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.875011][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.882326][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.889884][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.905597][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.914264][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.004738][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.973163][ T5838] Bluetooth: hci6: command tx timeout [ 320.936189][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.003967][T11777] loop6: detected capacity change from 0 to 512 [ 321.040047][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 321.049894][T11777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.124108][T11777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.172121][T11777] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.256307][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 321.256329][ T31] audit: type=1800 audit(1765312720.167:1266): pid=11777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2109" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 321.358892][T11743] wg1 speed is unknown, defaulting to 1000 [ 321.582166][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.588608][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.988660][T11743] chnl_net:caif_netlink_parms(): no params data found [ 322.057648][ T5838] Bluetooth: hci6: command tx timeout [ 322.185507][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.562969][T11804] netlink: 'syz.6.2115': attribute type 4 has an invalid length. [ 322.591250][T11804] netlink: 'syz.6.2115': attribute type 4 has an invalid length. [ 322.600607][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.623618][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.630900][T11743] bridge_slave_0: entered allmulticast mode [ 322.638846][T11806] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 322.660442][T11743] bridge_slave_0: entered promiscuous mode [ 322.724275][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.733709][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.741010][T11743] bridge_slave_1: entered allmulticast mode [ 322.791291][T11743] bridge_slave_1: entered promiscuous mode [ 323.023029][T11814] loop1: detected capacity change from 0 to 764 [ 323.048983][T11814] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 323.071746][T11816] loop2: detected capacity change from 0 to 128 [ 323.089153][T11814] Symlink component flag not implemented [ 323.095975][T11816] vfat: Unknown parameter 'GPL' [ 323.111169][T11814] Symlink component flag not implemented (7) [ 323.139521][T11812] syzkaller0: entered promiscuous mode [ 323.179891][T11812] syzkaller0: entered allmulticast mode [ 323.220893][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.261940][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.110090][T11820] loop2: detected capacity change from 0 to 2048 [ 324.185729][T11820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.233200][ T5838] Bluetooth: hci6: command tx timeout [ 324.261965][T11820] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.349542][T11820] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.411722][T11840] loop4: detected capacity change from 0 to 8192 [ 326.056350][T11743] team0: Port device team_slave_0 added [ 326.076743][T11743] team0: Port device team_slave_1 added [ 326.256674][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.293937][ T5842] Bluetooth: hci6: command tx timeout [ 326.294572][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.355941][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.481240][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 326.490775][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.493491][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.519388][T11849] netlink: 'syz.4.2132': attribute type 12 has an invalid length. [ 326.552906][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.609787][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.626615][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 326.661812][T11849] netlink: 'syz.4.2132': attribute type 12 has an invalid length. [ 326.988638][T11743] hsr_slave_0: entered promiscuous mode [ 327.004242][T11867] loop2: detected capacity change from 0 to 512 [ 327.031610][T11743] hsr_slave_1: entered promiscuous mode [ 327.048516][T11743] debugfs: 'hsr0' already exists in 'hsr' [ 327.056202][T11743] Cannot create hsr debugfs directory [ 328.403602][T11876] syzkaller0: entered promiscuous mode [ 328.423513][T11876] syzkaller0: entered allmulticast mode [ 328.535401][T11889] loop6: detected capacity change from 0 to 4096 [ 328.598143][T11889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.800583][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.238997][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'. [ 329.269956][T11912] netlink: 'syz.4.2151': attribute type 12 has an invalid length. [ 329.714322][T11916] 9p: Bad value for 'rfdno' [ 331.365783][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'. [ 331.377555][T11912] netlink: 'syz.4.2151': attribute type 12 has an invalid length. [ 331.665959][T11743] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.679439][T11743] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.690324][T11743] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.706133][T11743] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.884585][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.935500][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.965489][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.972655][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.015259][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.022427][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.546486][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.880375][T11743] veth0_vlan: entered promiscuous mode [ 332.896213][T11743] veth1_vlan: entered promiscuous mode [ 332.947995][ T7648] bridge_slave_1: left allmulticast mode [ 332.953904][ T7648] bridge_slave_1: left promiscuous mode [ 332.959633][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.968910][ T7648] bridge_slave_0: left allmulticast mode [ 332.974896][ T7648] bridge_slave_0: left promiscuous mode [ 332.980788][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.298206][ T7648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.308530][ T7648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.318174][ T7648] bond0 (unregistering): Released all slaves [ 333.348611][T11743] veth0_macvtap: entered promiscuous mode [ 333.364416][T11743] veth1_macvtap: entered promiscuous mode [ 333.397002][ T7648] tipc: Left network mode [ 333.401488][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.427083][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.458557][ T6759] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.468144][ T6759] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.478103][ T6759] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.488100][ T6759] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.629744][ T6759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.640258][ T6759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.696774][ T6759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.706003][ T6759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.780630][ T7648] hsr_slave_0: left promiscuous mode [ 333.789800][ T7648] hsr_slave_1: left promiscuous mode [ 333.795952][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.804051][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.027799][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.035167][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.144995][T11950] loop2: detected capacity change from 0 to 764 [ 392.154456][T11955] netlink: 'syz.1.2161': attribute type 4 has an invalid length. [ 392.171597][T11950] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 392.245071][T11953] tipc: Enabling of bearer rejected, failed to enable media [ 392.252953][T11955] netlink: 'syz.1.2161': attribute type 4 has an invalid length. [ 392.263420][T11950] Symlink component flag not implemented [ 392.269114][T11950] Symlink component flag not implemented (7) [ 392.544506][T11971] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2163'. [ 392.666411][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 392.684924][T11977] syzkaller0: entered promiscuous mode [ 392.690418][T11981] netlink: 'syz.0.2168': attribute type 12 has an invalid length. [ 392.690426][T11977] syzkaller0: entered allmulticast mode [ 392.715569][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 392.734444][T11981] netlink: 'syz.0.2168': attribute type 12 has an invalid length. [ 392.736567][T11986] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2170'. [ 395.851728][T12009] loop2: detected capacity change from 0 to 764 [ 395.864178][T12009] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 395.879053][T12009] Symlink component flag not implemented [ 395.885389][T12009] Symlink component flag not implemented (7) [ 396.767778][T11995] wg1 speed is unknown, defaulting to 1000 [ 396.786987][ T31] audit: type=1326 audit(1765312795.687:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 396.836606][ T31] audit: type=1326 audit(1765312795.727:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 396.859205][ T31] audit: type=1326 audit(1765312795.727:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 396.888679][T12027] loop2: detected capacity change from 0 to 1024 [ 396.939336][T12029] loop6: detected capacity change from 0 to 128 [ 397.002501][T12027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.055813][ T31] audit: type=1326 audit(1765312795.967:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.095485][ T31] audit: type=1326 audit(1765312796.007:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.303054][T12038] 9p: Could not find request transport: fd0x0000000000000005 [ 397.335916][ T31] audit: type=1326 audit(1765312796.007:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.345758][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.358907][ T31] audit: type=1326 audit(1765312796.007:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.389898][ T31] audit: type=1326 audit(1765312796.007:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.462753][ T31] audit: type=1326 audit(1765312796.007:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.544952][ T31] audit: type=1326 audit(1765312796.117:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 397.605579][T12049] loop4: detected capacity change from 0 to 764 [ 397.619164][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2196'. [ 397.628343][T12050] netlink: 'syz.6.2196': attribute type 12 has an invalid length. [ 397.677800][ T6785] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.686874][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2196'. [ 397.697294][T12049] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 397.746974][T12050] netlink: 'syz.6.2196': attribute type 12 has an invalid length. [ 397.764147][T12049] Symlink component flag not implemented [ 397.769873][T12049] Symlink component flag not implemented (7) [ 397.780399][ T8005] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.819688][T12056] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2193'. [ 397.861560][T12056] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 397.922470][ T8005] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.922530][ T8005] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.697499][T12067] loop2: detected capacity change from 0 to 128 [ 398.773801][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 398.872349][T12063] syzkaller0: entered promiscuous mode [ 398.886388][T12063] syzkaller0: entered allmulticast mode [ 399.303866][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'. [ 399.313291][T12100] netlink: 'syz.0.2212': attribute type 12 has an invalid length. [ 399.391937][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2210'. [ 400.145827][T12108] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2213'. [ 400.738323][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'. [ 400.789671][T12100] netlink: 'syz.0.2212': attribute type 12 has an invalid length. [ 400.896788][T12111] loop1: detected capacity change from 0 to 1024 [ 400.968255][T12111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.089949][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.106393][T12125] IPv6: Can't replace route, no match found [ 401.399922][T12141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2226'. [ 401.497518][T12143] loop7: detected capacity change from 0 to 512 [ 401.527487][T12143] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.597142][T12143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.609791][T12143] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.704239][T12151] loop2: detected capacity change from 0 to 512 [ 401.741681][T12151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.798981][T12151] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2231: invalid indirect mapped block 4294967295 (level 0) [ 401.810542][T11743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.848225][T12151] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2231: invalid indirect mapped block 4294967295 (level 1) [ 401.916730][T12151] EXT4-fs (loop2): 1 orphan inode deleted [ 401.922580][T12151] EXT4-fs (loop2): 1 truncate cleaned up [ 401.930458][T12151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.024697][T12151] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 402.059685][T12172] loop7: detected capacity change from 0 to 1024 [ 402.108875][T12172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.241449][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.284904][T11743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.513319][T12185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2242'. [ 403.826361][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 403.826385][ T31] audit: type=1326 audit(1765312801.757:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 403.864969][ T31] audit: type=1326 audit(1765312801.757:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 404.840865][ T31] audit: type=1326 audit(1765312801.757:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 404.864183][ T31] audit: type=1326 audit(1765312801.757:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 405.164697][ T31] audit: type=1326 audit(1765312801.757:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 405.791406][T12201] wg1 speed is unknown, defaulting to 1000 [ 406.359187][ T31] audit: type=1326 audit(1765312805.267:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 406.399117][ T31] audit: type=1326 audit(1765312805.287:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 406.518756][ T31] audit: type=1326 audit(1765312805.287:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 406.613217][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2261'. [ 406.626703][ T31] audit: type=1326 audit(1765312805.297:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 406.672259][T12239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2262'. [ 406.689506][ T31] audit: type=1326 audit(1765312805.357:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 408.269801][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 408.279833][T12283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2279'. [ 408.543842][T12252] wg1 speed is unknown, defaulting to 1000 [ 408.603100][T12277] wg1 speed is unknown, defaulting to 1000 [ 409.000116][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 409.000138][ T31] audit: type=1326 audit(1765312807.897:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.147378][ T31] audit: type=1326 audit(1765312807.897:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.176902][ T31] audit: type=1326 audit(1765312807.897:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.199939][ T31] audit: type=1326 audit(1765312808.007:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e743c2005 code=0x7ffc0000 [ 409.233034][ T31] audit: type=1326 audit(1765312808.017:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.278130][ T31] audit: type=1326 audit(1765312808.017:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.308265][ T31] audit: type=1326 audit(1765312808.147:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.0.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 409.916722][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'. [ 410.488050][T12346] 9pnet_fd: Insufficient options for proto=fd [ 410.739463][T12358] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2309'. [ 411.120811][T12376] autofs4:pid:12376:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 411.163815][T12375] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 411.174174][T12376] autofs4:pid:12376:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 411.521418][T12388] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2321'. [ 411.701408][T12391] netlink: 'syz.2.2324': attribute type 4 has an invalid length. [ 411.740417][T12391] netlink: 'syz.2.2324': attribute type 4 has an invalid length. [ 411.763239][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2325'. [ 412.060721][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2327'. [ 412.249766][T12414] loop7: detected capacity change from 0 to 128 [ 412.320257][T12414] bio_check_eod: 101 callbacks suppressed [ 412.320282][T12414] syz.7.2331: attempt to access beyond end of device [ 412.320282][T12414] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 412.369203][T12416] loop4: detected capacity change from 0 to 512 [ 412.371076][T12414] syz.7.2331: attempt to access beyond end of device [ 412.371076][T12414] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 412.431423][T12414] buffer_io_error: 5 callbacks suppressed [ 412.431444][T12414] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 412.447834][T12414] syz.7.2331: attempt to access beyond end of device [ 412.447834][T12414] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 412.450698][T12416] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2332: error while reading EA inode 32 err=-116 [ 412.461782][T12414] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 412.483519][T12414] syz.7.2331: attempt to access beyond end of device [ 412.483519][T12414] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 412.500646][T12414] syz.7.2331: attempt to access beyond end of device [ 412.500646][T12414] loop7: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 412.514568][T12414] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 412.523165][T12414] syz.7.2331: attempt to access beyond end of device [ 412.523165][T12414] loop7: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 412.537310][T12414] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 412.546258][T12414] syz.7.2331: attempt to access beyond end of device [ 412.546258][T12414] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 412.560456][T12414] syz.7.2331: attempt to access beyond end of device [ 412.560456][T12414] loop7: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 412.620095][T12416] EXT4-fs (loop4): Remounting filesystem read-only [ 412.627386][T12416] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 412.653337][T12416] EXT4-fs (loop4): 1 orphan inode deleted [ 412.663726][T12414] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 412.687277][T12416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.763820][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.806599][T12414] syz.7.2331: attempt to access beyond end of device [ 412.806599][T12414] loop7: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 412.869968][T12414] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 412.914518][T12414] syz.7.2331: attempt to access beyond end of device [ 412.914518][T12414] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 412.966076][T12414] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 413.000325][T12414] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 413.041607][T12414] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 413.087028][T12414] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 413.134078][T12430] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2336'. [ 413.799775][T12465] Cannot find del_set index 0 as target [ 413.909051][T12471] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 414.087593][ T31] audit: type=1326 audit(1765312812.997:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 414.173361][ T31] audit: type=1326 audit(1765312812.997:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 414.241361][ T31] audit: type=1326 audit(1765312812.997:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 414.268727][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2363'. [ 415.095110][ T31] audit: type=1326 audit(1765312812.997:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 415.124919][T12493] wg1 speed is unknown, defaulting to 1000 [ 415.176852][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 415.203142][ T31] audit: type=1326 audit(1765312812.997:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3524f8f749 code=0x7ffc0000 [ 415.491016][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 415.530755][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 415.889421][T12525] loop7: detected capacity change from 0 to 128 [ 415.962373][T12525] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 415.981735][T12525] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.049221][T11743] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.310949][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 416.837417][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 417.133073][T12567] loop2: detected capacity change from 0 to 164 [ 417.165320][T12567] ISOFS: unable to read i-node block [ 417.177560][T12567] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 417.339225][T12577] random: crng reseeded on system resumption [ 417.406216][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2399'. [ 417.428488][T12577] loop6: detected capacity change from 0 to 512 [ 417.513226][T12584] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 417.533075][T12584] FAT-fs (loop6): Filesystem has been set read-only [ 417.556678][T12577] syzkaller0: entered allmulticast mode [ 417.563680][T12577] syzkaller0: entered promiscuous mode [ 417.657001][T12577] syzkaller0 (unregistering): left allmulticast mode [ 417.673974][T12577] syzkaller0 (unregistering): left promiscuous mode [ 417.818756][ T31] audit: type=1326 audit(1765312816.727:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 417.843817][ T31] audit: type=1326 audit(1765312816.757:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 418.451754][ T31] audit: type=1326 audit(1765312816.787:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 418.603197][ T31] audit: type=1326 audit(1765312816.787:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 418.737541][ T31] audit: type=1326 audit(1765312816.787:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12599 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7438f749 code=0x7ffc0000 [ 418.744043][T12603] syzkaller0: entered promiscuous mode [ 418.810352][T12607] loop2: detected capacity change from 0 to 512 [ 418.832966][T12603] syzkaller0: entered allmulticast mode [ 418.880671][T12607] EXT4-fs (loop2): too many log groups per flexible block group [ 418.913018][T12607] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 418.928062][T12607] EXT4-fs (loop2): mount failed [ 418.988467][T12618] loop4: detected capacity change from 0 to 1024 [ 419.008128][T12618] EXT4-fs: inline encryption not supported [ 419.086488][T12618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.103607][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 419.201976][T12635] netlink: 'syz.1.2413': attribute type 4 has an invalid length. [ 419.214524][T12637] loop2: detected capacity change from 0 to 764 [ 419.235304][T12637] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 419.251517][T12637] Symlink component flag not implemented [ 419.259429][T12637] Symlink component flag not implemented (7) [ 420.188464][T12618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2411'. [ 420.271635][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.410380][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 420.433446][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2420'. [ 420.749171][T12670] loop6: detected capacity change from 0 to 128 [ 420.806129][T12674] loop1: detected capacity change from 0 to 764 [ 420.836556][T12674] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 420.889201][T12674] Symlink component flag not implemented [ 420.896740][T12670] bio_check_eod: 5 callbacks suppressed [ 420.896758][T12670] syz.6.2428: attempt to access beyond end of device [ 420.896758][T12670] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 420.949370][T12674] Symlink component flag not implemented (7) [ 420.961302][T12670] syz.6.2428: attempt to access beyond end of device [ 420.961302][T12670] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 420.977058][T12670] syz.6.2428: attempt to access beyond end of device [ 420.977058][T12670] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 420.992862][T12670] syz.6.2428: attempt to access beyond end of device [ 420.992862][T12670] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 420.997256][T12679] syzkaller0: entered promiscuous mode [ 421.042480][T12679] syzkaller0: entered allmulticast mode [ 421.055758][T12670] syz.6.2428: attempt to access beyond end of device [ 421.055758][T12670] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 421.123479][T12670] syz.6.2428: attempt to access beyond end of device [ 421.123479][T12670] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 421.143297][T12670] syz.6.2428: attempt to access beyond end of device [ 421.143297][T12670] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 421.193048][T12670] syz.6.2428: attempt to access beyond end of device [ 421.193048][T12670] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 421.237612][T12670] syz.6.2428: attempt to access beyond end of device [ 421.237612][T12670] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 421.264320][T12698] loop1: detected capacity change from 0 to 1024 [ 421.271588][T12698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.279580][T12670] syz.6.2428: attempt to access beyond end of device [ 421.279580][T12670] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 421.331569][T12698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.452487][T12708] netlink: 'syz.7.2438': attribute type 4 has an invalid length. [ 422.425130][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.561905][T12707] team0 (unregistering): Port device team_slave_0 removed [ 422.572556][T12707] team0 (unregistering): Port device team_slave_1 removed [ 422.596628][T12707] team0 (unregistering): Port device bond0 removed [ 422.605044][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 422.605060][ T31] audit: type=1326 audit(1765312821.517:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.648865][ T31] audit: type=1326 audit(1765312821.517:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.671871][ T31] audit: type=1326 audit(1765312821.517:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.697830][ T31] audit: type=1326 audit(1765312821.517:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.749041][ T31] audit: type=1326 audit(1765312821.517:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.857605][ T31] audit: type=1326 audit(1765312821.687:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 422.931122][ T31] audit: type=1326 audit(1765312821.687:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 423.020770][ T31] audit: type=1326 audit(1765312821.687:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 423.072271][ T31] audit: type=1326 audit(1765312821.687:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 423.232747][ T31] audit: type=1326 audit(1765312821.687:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cb8f749 code=0x7ffc0000 [ 424.062069][T12753] netlink: 'syz.2.2454': attribute type 4 has an invalid length. [ 424.125462][T12753] netlink: 'syz.2.2454': attribute type 4 has an invalid length. [ 424.264909][T12758] loop6: detected capacity change from 0 to 1024 [ 424.335700][T12758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.407910][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.561174][T12780] loop6: detected capacity change from 0 to 512 [ 424.617107][T12780] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 424.650356][T12780] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 424.678077][T12780] EXT4-fs (loop6): 1 truncate cleaned up [ 424.705735][T12780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.757975][T12784] loop7: detected capacity change from 0 to 512 [ 424.788755][T12784] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 424.798061][T12784] EXT4-fs (loop7): mount failed [ 424.960628][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2469'. [ 425.099188][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2472'. [ 425.133359][T12802] netlink: 'syz.0.2473': attribute type 4 has an invalid length. [ 425.134812][T12802] netlink: 'syz.0.2473': attribute type 4 has an invalid length. [ 425.577468][ T9389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.044367][T12807] team0 (unregistering): Port device team_slave_0 removed [ 426.063482][T12807] team0 (unregistering): Port device team_slave_1 removed [ 426.067038][T12824] loop1: detected capacity change from 0 to 512 [ 426.139744][T12824] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 426.336558][T12824] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 426.402280][T12824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2471: bg 0: block 248: padding at end of block bitmap is not set [ 426.463598][T12824] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2471: Failed to acquire dquot type 1 [ 426.606940][T12824] EXT4-fs (loop1): 1 truncate cleaned up [ 426.667384][T12824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 426.706627][T12840] netlink: 'syz.4.2486': attribute type 4 has an invalid length. [ 426.713683][T12842] netlink: 'syz.6.2487': attribute type 4 has an invalid length. [ 426.757985][T12842] netlink: 'syz.6.2487': attribute type 4 has an invalid length. [ 426.897920][T12853] IPv6: addrconf: prefix option has invalid lifetime [ 426.904781][T12853] IPv6: addrconf: prefix option has invalid lifetime [ 427.368319][T12853] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.392580][T12873] serio: Serial port ttyS3 [ 427.484612][T12818] wg1 speed is unknown, defaulting to 1000 [ 427.694959][T12853] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.945162][T12853] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.079866][T12889] loop6: detected capacity change from 0 to 736 [ 428.093707][T12889] iso9660: Unknown parameter 'joc1JzڵRNomp' [ 428.126254][ T31] kauditd_printk_skb: 101 callbacks suppressed [ 428.126276][ T31] audit: type=1326 audit(1765312827.037:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 428.126831][ T31] audit: type=1326 audit(1765312827.037:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc1a598f749 code=0x7ffc0000 [ 428.127140][ T31] audit: type=1326 audit(1765312827.037:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a598f783 code=0x7ffc0000 [ 428.134893][ T31] audit: type=1326 audit(1765312827.047:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1a598e1ff code=0x7ffc0000 [ 428.156343][ T31] audit: type=1326 audit(1765312827.067:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc1a598f7d7 code=0x7ffc0000 [ 428.157440][ T31] audit: type=1326 audit(1765312827.067:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a598df90 code=0x7ffc0000 [ 428.157878][ T31] audit: type=1326 audit(1765312827.067:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a598f34b code=0x7ffc0000 [ 428.190764][T12889] loop6: detected capacity change from 0 to 1024 [ 428.191085][ T31] audit: type=1326 audit(1765312827.097:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1a598e3aa code=0x7ffc0000 [ 428.191269][ T31] audit: type=1326 audit(1765312827.097:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1a598e3aa code=0x7ffc0000 [ 428.191484][ T31] audit: type=1326 audit(1765312827.097:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc1a598de97 code=0x7ffc0000 [ 428.193562][T12889] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 428.250014][T12889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.261270][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 428.262627][T12853] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.278057][T12894] netlink: 'syz.4.2504': attribute type 4 has an invalid length. [ 428.278554][T12894] netlink: 'syz.4.2504': attribute type 4 has an invalid length. [ 428.283158][T12891] netlink: 'syz.2.2503': attribute type 4 has an invalid length. [ 428.598840][ T6789] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.710298][ T6789] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.873015][T12906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2508'. [ 428.885560][ T7646] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.885624][ T7646] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.933349][T12907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.200919][T12912] delete_channel: no stack [ 429.440663][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 429.517434][T12929] netlink: 'syz.2.2517': attribute type 4 has an invalid length. [ 429.536037][T12929] netlink: 'syz.2.2517': attribute type 4 has an invalid length. [ 430.795356][T12960] loop4: detected capacity change from 0 to 512 [ 430.855532][T12960] [ 430.857897][T12960] ====================================================== [ 430.864906][T12960] WARNING: possible circular locking dependency detected [ 430.872001][T12960] syzkaller #0 Not tainted [ 430.876410][T12960] ------------------------------------------------------ [ 430.883414][T12960] syz.4.2527/12960 is trying to acquire lock: [ 430.889460][T12960] ffff88802c0deb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1ca/0x350 [ 430.899472][T12960] [ 430.899472][T12960] but task is already holding lock: [ 430.906813][T12960] ffff888076b68a68 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x6e0 [ 430.916660][T12960] [ 430.916660][T12960] which lock already depends on the new lock. [ 430.916660][T12960] [ 430.927042][T12960] [ 430.927042][T12960] the existing dependency chain (in reverse order) is: [ 430.936305][T12960] [ 430.936305][T12960] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 430.943864][T12960] down_write+0x96/0x1f0 [ 430.948632][T12960] ext4_destroy_inline_data+0x28/0xe0 [ 430.954519][T12960] ext4_do_writepages+0x4e6/0x4500 [ 430.960147][T12960] ext4_writepages+0x203/0x350 [ 430.965419][T12960] do_writepages+0x32e/0x550 [ 430.970533][T12960] __writeback_single_inode+0x133/0x1240 [ 430.976686][T12960] writeback_sb_inodes+0x93a/0x1870 [ 430.982397][T12960] wb_writeback+0x42b/0xaa0 [ 430.987410][T12960] wb_workfn+0x3f9/0xed0 [ 430.992174][T12960] process_scheduled_works+0xad1/0x1770 [ 430.998232][T12960] worker_thread+0x8a0/0xda0 [ 431.003332][T12960] kthread+0x711/0x8a0 [ 431.007916][T12960] ret_from_fork+0x599/0xb30 [ 431.013013][T12960] ret_from_fork_asm+0x1a/0x30 [ 431.018294][T12960] [ 431.018294][T12960] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 431.026719][T12960] __lock_acquire+0x15a6/0x2cf0 [ 431.032087][T12960] lock_acquire+0x117/0x340 [ 431.037099][T12960] percpu_down_read_internal+0x48/0x1c0 [ 431.043153][T12960] ext4_writepages+0x1ca/0x350 [ 431.048426][T12960] do_writepages+0x32e/0x550 [ 431.053531][T12960] __writeback_single_inode+0x133/0x1240 [ 431.059677][T12960] writeback_single_inode+0x493/0xc70 [ 431.065555][T12960] write_inode_now+0x160/0x1d0 [ 431.070825][T12960] iput+0xa77/0x1030 [ 431.075243][T12960] ext4_xattr_block_set+0x1fce/0x2ac0 [ 431.081136][T12960] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 431.087535][T12960] __ext4_expand_extra_isize+0x30d/0x400 [ 431.093675][T12960] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 431.099650][T12960] ext4_evict_inode+0x79c/0xe60 [ 431.105026][T12960] evict+0x5f4/0xae0 [ 431.109432][T12960] ext4_orphan_cleanup+0xc20/0x1460 [ 431.115144][T12960] ext4_fill_super+0x58a1/0x6160 [ 431.120593][T12960] get_tree_bdev_flags+0x40e/0x4d0 [ 431.126213][T12960] vfs_get_tree+0x92/0x2a0 [ 431.131138][T12960] do_new_mount+0x302/0xa10 [ 431.136155][T12960] __se_sys_mount+0x313/0x410 [ 431.141352][T12960] do_syscall_64+0xfa/0xf80 [ 431.146377][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.152786][T12960] [ 431.152786][T12960] other info that might help us debug this: [ 431.152786][T12960] [ 431.162998][T12960] Possible unsafe locking scenario: [ 431.162998][T12960] [ 431.170431][T12960] CPU0 CPU1 [ 431.175779][T12960] ---- ---- [ 431.181129][T12960] lock(&ei->xattr_sem); [ 431.185459][T12960] lock(&sbi->s_writepages_rwsem); [ 431.193171][T12960] lock(&ei->xattr_sem); [ 431.200014][T12960] rlock(&sbi->s_writepages_rwsem); [ 431.205295][T12960] [ 431.205295][T12960] *** DEADLOCK *** [ 431.205295][T12960] [ 431.213421][T12960] 3 locks held by syz.4.2527/12960: [ 431.218619][T12960] #0: ffff8880509280e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xaa0 [ 431.228779][T12960] #1: ffff888050928610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x26f/0xe60 [ 431.238213][T12960] #2: ffff888076b68a68 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x6e0 [ 431.248605][T12960] [ 431.248605][T12960] stack backtrace: [ 431.254839][T12960] CPU: 0 UID: 0 PID: 12960 Comm: syz.4.2527 Not tainted syzkaller #0 PREEMPT(full) [ 431.254873][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.254887][T12960] Call Trace: [ 431.254897][T12960] [ 431.254907][T12960] dump_stack_lvl+0x189/0x250 [ 431.254941][T12960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.254970][T12960] ? __pfx__printk+0x10/0x10 [ 431.255006][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255033][T12960] ? print_lock_name+0xde/0x100 [ 431.255068][T12960] print_circular_bug+0x2e2/0x300 [ 431.255101][T12960] check_noncircular+0x12e/0x150 [ 431.255133][T12960] __lock_acquire+0x15a6/0x2cf0 [ 431.255159][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255185][T12960] ? __lock_acquire+0x6b6/0x2cf0 [ 431.255210][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255239][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255269][T12960] ? ext4_writepages+0x1ca/0x350 [ 431.255292][T12960] lock_acquire+0x117/0x340 [ 431.255314][T12960] ? ext4_writepages+0x1ca/0x350 [ 431.255345][T12960] percpu_down_read_internal+0x48/0x1c0 [ 431.255367][T12960] ? ext4_writepages+0x1ca/0x350 [ 431.255390][T12960] ext4_writepages+0x1ca/0x350 [ 431.255413][T12960] ? is_bpf_text_address+0x26/0x2b0 [ 431.255435][T12960] ? __pfx_ext4_writepages+0x10/0x10 [ 431.255464][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255491][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255518][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 431.255551][T12960] ? __pfx_ext4_writepages+0x10/0x10 [ 431.255574][T12960] do_writepages+0x32e/0x550 [ 431.255614][T12960] __writeback_single_inode+0x133/0x1240 [ 431.255643][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 431.255677][T12960] writeback_single_inode+0x493/0xc70 [ 431.255703][T12960] write_inode_now+0x160/0x1d0 [ 431.255724][T12960] ? __pfx_write_inode_now+0x10/0x10 [ 431.255764][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255793][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 431.255827][T12960] iput+0xa77/0x1030 [ 431.255873][T12960] ext4_xattr_block_set+0x1fce/0x2ac0 [ 431.255925][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.255955][T12960] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 431.255993][T12960] ? ext4_xattr_block_find+0x2d4/0x350 [ 431.256031][T12960] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 431.256074][T12960] __ext4_expand_extra_isize+0x30d/0x400 [ 431.256100][T12960] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 431.256136][T12960] ext4_evict_inode+0x79c/0xe60 [ 431.256163][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256195][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 431.256221][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256249][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256275][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 431.256307][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 431.256335][T12960] evict+0x5f4/0xae0 [ 431.256360][T12960] ? __pfx_evict+0x10/0x10 [ 431.256380][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256406][T12960] ? _raw_spin_unlock+0x28/0x50 [ 431.256432][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256458][T12960] ? iput+0xcc6/0x1030 [ 431.256491][T12960] ext4_orphan_cleanup+0xc20/0x1460 [ 431.256527][T12960] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 431.256557][T12960] ? ext4_register_li_request+0x640/0x720 [ 431.256583][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256609][T12960] ? errseq_check_and_advance+0x66/0x120 [ 431.256633][T12960] ext4_fill_super+0x58a1/0x6160 [ 431.256669][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 431.256692][T12960] ? snprintf+0xda/0x120 [ 431.256716][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256742][T12960] ? set_blocksize+0x21e/0x500 [ 431.256778][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256807][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256833][T12960] ? sb_set_blocksize+0x155/0x240 [ 431.256859][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.256885][T12960] ? setup_bdev_super+0x4c1/0x5b0 [ 431.256910][T12960] get_tree_bdev_flags+0x40e/0x4d0 [ 431.256933][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 431.256957][T12960] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 431.256981][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257010][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257038][T12960] vfs_get_tree+0x92/0x2a0 [ 431.257062][T12960] do_new_mount+0x302/0xa10 [ 431.257089][T12960] ? apparmor_capable+0x137/0x1a0 [ 431.257120][T12960] ? __pfx_do_new_mount+0x10/0x10 [ 431.257147][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257173][T12960] ? ns_capable+0x8a/0xf0 [ 431.257197][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257223][T12960] ? kmem_cache_free+0x197/0x620 [ 431.257252][T12960] __se_sys_mount+0x313/0x410 [ 431.257284][T12960] ? __pfx___se_sys_mount+0x10/0x10 [ 431.257316][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257342][T12960] ? __x64_sys_mount+0x20/0xc0 [ 431.257372][T12960] do_syscall_64+0xfa/0xf80 [ 431.257405][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.257427][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.257453][T12960] ? exc_page_fault+0xab/0x100 [ 431.257483][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.257506][T12960] RIP: 0033:0x7f3524f90eea [ 431.257527][T12960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.257546][T12960] RSP: 002b:00007f3525ed7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.257570][T12960] RAX: ffffffffffffffda RBX: 00007f3525ed7ef0 RCX: 00007f3524f90eea [ 431.257587][T12960] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3525ed7eb0 [ 431.257604][T12960] RBP: 0000200000000180 R08: 00007f3525ed7ef0 R09: 0000000000800718 [ 431.257620][T12960] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 431.257636][T12960] R13: 00007f3525ed7eb0 R14: 000000000000046f R15: 0000200000000200 [ 431.257661][T12960] [ 431.919701][T12970] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2530'. [ 431.947259][T12960] ------------[ cut here ]------------ [ 431.953064][T12960] EA inode 11 i_nlink=2 [ 431.953081][T12960] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#1: syz.4.2527/12960 [ 431.965123][T12960] Modules linked in: [ 431.969020][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.4.2527 Not tainted syzkaller #0 PREEMPT(full) [ 431.978459][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.988581][T12960] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 431.995218][T12960] Code: 74 08 4c 89 ef e8 84 88 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 20 56 cd 08 44 89 [ 432.015058][T12960] RSP: 0018:ffffc90003e9f100 EFLAGS: 00010246 [ 432.021134][T12960] RAX: 0000000000000000 RBX: 1ffff1100a8c52f9 RCX: dffffc0000000000 [ 432.029149][T12960] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8f8801b0 [ 432.037151][T12960] RBP: ffffc90003e9f1f8 R08: ffff8880546297cf R09: 1ffff1100a8c52f9 [ 432.045422][T12960] R10: dffffc0000000000 R11: ffffed100a8c52fa R12: ffffffff8f8801b0 [ 432.053624][T12960] R13: 000000000000000b R14: 1ffff1100a8c52c4 R15: ffff888054629620 [ 432.061896][T12960] FS: 00007f3525ed86c0(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 432.071090][T12960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.077710][T12960] CR2: 0000000005ffffe8 CR3: 0000000027179000 CR4: 0000000000350ef0 [ 432.085699][T12960] Call Trace: [ 432.088971][T12960] [ 432.091895][T12960] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 432.097740][T12960] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 432.104101][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.109744][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.115436][T12960] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 432.120902][T12960] ext4_xattr_set_entry+0xabb/0x1e20 [ 432.126245][T12960] ext4_xattr_ibody_set+0x254/0x6a0 [ 432.131468][T12960] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 432.137478][T12960] __ext4_expand_extra_isize+0x30d/0x400 [ 432.143242][T12960] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 432.148727][T12960] ext4_evict_inode+0x79c/0xe60 [ 432.153625][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.159569][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 432.165268][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.170924][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.176975][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 432.182190][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 432.187800][T12960] evict+0x5f4/0xae0 [ 432.191709][T12960] ? __pfx_evict+0x10/0x10 [ 432.196157][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.201798][T12960] ? _raw_spin_unlock+0x28/0x50 [ 432.206682][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.212317][T12960] ? iput+0xcc6/0x1030 [ 432.216438][T12960] ext4_orphan_cleanup+0xc20/0x1460 [ 432.221658][T12960] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 432.227361][T12960] ? ext4_register_li_request+0x640/0x720 [ 432.233127][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.238770][T12960] ? errseq_check_and_advance+0x66/0x120 [ 432.244431][T12960] ext4_fill_super+0x58a1/0x6160 [ 432.249399][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.254741][T12960] ? snprintf+0xda/0x120 [ 432.258992][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.264860][T12960] ? set_blocksize+0x21e/0x500 [ 432.269623][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.275523][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.281189][T12960] ? sb_set_blocksize+0x155/0x240 [ 432.286281][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.291909][T12960] ? setup_bdev_super+0x4c1/0x5b0 [ 432.296994][T12960] get_tree_bdev_flags+0x40e/0x4d0 [ 432.302092][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.307394][T12960] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 432.313077][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.318724][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.324392][T12960] vfs_get_tree+0x92/0x2a0 [ 432.328815][T12960] do_new_mount+0x302/0xa10 [ 432.333464][T12960] ? apparmor_capable+0x137/0x1a0 [ 432.338497][T12960] ? __pfx_do_new_mount+0x10/0x10 [ 432.343584][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.349228][T12960] ? ns_capable+0x8a/0xf0 [ 432.353580][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.359208][T12960] ? kmem_cache_free+0x197/0x620 [ 432.364375][T12960] __se_sys_mount+0x313/0x410 [ 432.369048][T12960] ? __pfx___se_sys_mount+0x10/0x10 [ 432.374521][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.380166][T12960] ? __x64_sys_mount+0x20/0xc0 [ 432.384946][T12960] do_syscall_64+0xfa/0xf80 [ 432.389453][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.395655][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.401312][T12960] ? exc_page_fault+0xab/0x100 [ 432.406093][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.411972][T12960] RIP: 0033:0x7f3524f90eea [ 432.416398][T12960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.436037][T12960] RSP: 002b:00007f3525ed7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.444464][T12960] RAX: ffffffffffffffda RBX: 00007f3525ed7ef0 RCX: 00007f3524f90eea [ 432.452420][T12960] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3525ed7eb0 [ 432.460435][T12960] RBP: 0000200000000180 R08: 00007f3525ed7ef0 R09: 0000000000800718 [ 432.468775][T12960] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 432.477107][T12960] R13: 00007f3525ed7eb0 R14: 000000000000046f R15: 0000200000000200 [ 432.485336][T12960] [ 432.488349][T12960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.495619][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.4.2527 Not tainted syzkaller #0 PREEMPT(full) [ 432.504971][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.515007][T12960] Call Trace: [ 432.518270][T12960] [ 432.521182][T12960] dump_stack_lvl+0x99/0x250 [ 432.525772][T12960] ? __asan_memcpy+0x40/0x70 [ 432.530359][T12960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.535547][T12960] ? __pfx__printk+0x10/0x10 [ 432.540150][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.545782][T12960] vpanic+0x237/0x6d0 [ 432.549755][T12960] ? __pfx_vpanic+0x10/0x10 [ 432.554256][T12960] ? is_bpf_text_address+0x292/0x2b0 [ 432.559547][T12960] ? is_bpf_text_address+0x26/0x2b0 [ 432.564737][T12960] panic+0xb9/0xc0 [ 432.568453][T12960] ? __pfx_panic+0x10/0x10 [ 432.572874][T12960] __warn+0x317/0x4b0 [ 432.576852][T12960] __report_bug+0x288/0x500 [ 432.581375][T12960] ? __pfx___report_bug+0x10/0x10 [ 432.586484][T12960] ? __ext4_get_inode_loc+0x69a/0x1040 [ 432.591971][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.597609][T12960] ? ext4_fc_track_inode+0x133/0xb20 [ 432.602893][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.608524][T12960] ? set_normalized_timespec64+0xf0/0x1a0 [ 432.614239][T12960] ? __ext4_journal_get_write_access+0x84/0x570 [ 432.620492][T12960] report_bug_entry+0x16a/0x220 [ 432.625351][T12960] ? ext4_xattr_inode_update_ref+0x4dc/0x570 [ 432.631325][T12960] ? ext4_xattr_inode_update_ref+0x4e1/0x570 [ 432.637297][T12960] handle_bug+0xca/0x200 [ 432.641556][T12960] exc_invalid_op+0x1a/0x50 [ 432.646064][T12960] asm_exc_invalid_op+0x1a/0x20 [ 432.650908][T12960] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 432.657498][T12960] Code: 74 08 4c 89 ef e8 84 88 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 20 56 cd 08 44 89 [ 432.677102][T12960] RSP: 0018:ffffc90003e9f100 EFLAGS: 00010246 [ 432.683176][T12960] RAX: 0000000000000000 RBX: 1ffff1100a8c52f9 RCX: dffffc0000000000 [ 432.691140][T12960] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8f8801b0 [ 432.699100][T12960] RBP: ffffc90003e9f1f8 R08: ffff8880546297cf R09: 1ffff1100a8c52f9 [ 432.707070][T12960] R10: dffffc0000000000 R11: ffffed100a8c52fa R12: ffffffff8f8801b0 [ 432.715035][T12960] R13: 000000000000000b R14: 1ffff1100a8c52c4 R15: ffff888054629620 [ 432.723013][T12960] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 432.728821][T12960] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 432.735144][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.740778][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.746410][T12960] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 432.751870][T12960] ext4_xattr_set_entry+0xabb/0x1e20 [ 432.757180][T12960] ext4_xattr_ibody_set+0x254/0x6a0 [ 432.762398][T12960] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 432.768305][T12960] __ext4_expand_extra_isize+0x30d/0x400 [ 432.773937][T12960] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 432.779414][T12960] ext4_evict_inode+0x79c/0xe60 [ 432.784272][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.789912][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 432.795278][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.800912][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.806546][T12960] ? do_raw_spin_unlock+0x122/0x240 [ 432.811748][T12960] ? __pfx_ext4_evict_inode+0x10/0x10 [ 432.817118][T12960] evict+0x5f4/0xae0 [ 432.821006][T12960] ? __pfx_evict+0x10/0x10 [ 432.825407][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.831035][T12960] ? _raw_spin_unlock+0x28/0x50 [ 432.835886][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.841514][T12960] ? iput+0xcc6/0x1030 [ 432.845676][T12960] ext4_orphan_cleanup+0xc20/0x1460 [ 432.850880][T12960] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 432.856869][T12960] ? ext4_register_li_request+0x640/0x720 [ 432.862587][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.868231][T12960] ? errseq_check_and_advance+0x66/0x120 [ 432.873964][T12960] ext4_fill_super+0x58a1/0x6160 [ 432.878911][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.884183][T12960] ? snprintf+0xda/0x120 [ 432.888420][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.894048][T12960] ? set_blocksize+0x21e/0x500 [ 432.898821][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.904449][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.910074][T12960] ? sb_set_blocksize+0x155/0x240 [ 432.915084][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.920708][T12960] ? setup_bdev_super+0x4c1/0x5b0 [ 432.925724][T12960] get_tree_bdev_flags+0x40e/0x4d0 [ 432.930826][T12960] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.936104][T12960] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 432.941731][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.947357][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.952987][T12960] vfs_get_tree+0x92/0x2a0 [ 432.957400][T12960] do_new_mount+0x302/0xa10 [ 432.961896][T12960] ? apparmor_capable+0x137/0x1a0 [ 432.966918][T12960] ? __pfx_do_new_mount+0x10/0x10 [ 432.971936][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.977561][T12960] ? ns_capable+0x8a/0xf0 [ 432.981887][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.987511][T12960] ? kmem_cache_free+0x197/0x620 [ 432.992446][T12960] __se_sys_mount+0x313/0x410 [ 432.997122][T12960] ? __pfx___se_sys_mount+0x10/0x10 [ 433.002316][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.007938][T12960] ? __x64_sys_mount+0x20/0xc0 [ 433.012697][T12960] do_syscall_64+0xfa/0xf80 [ 433.017199][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.023253][T12960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.028880][T12960] ? exc_page_fault+0xab/0x100 [ 433.033641][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.039526][T12960] RIP: 0033:0x7f3524f90eea [ 433.043927][T12960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.063520][T12960] RSP: 002b:00007f3525ed7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.071925][T12960] RAX: ffffffffffffffda RBX: 00007f3525ed7ef0 RCX: 00007f3524f90eea [ 433.079885][T12960] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3525ed7eb0 [ 433.087842][T12960] RBP: 0000200000000180 R08: 00007f3525ed7ef0 R09: 0000000000800718 [ 433.095801][T12960] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 433.103760][T12960] R13: 00007f3525ed7eb0 R14: 000000000000046f R15: 0000200000000200 [ 433.111729][T12960] [ 433.115015][T12960] Kernel Offset: disabled [ 433.119323][T12960] Rebooting in 86400 seconds..