last executing test programs: 6m27.552550823s ago: executing program 32 (id=3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20008840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r8, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x8, 0x9, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r9, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7, 0xf252, 0x7, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x9, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1, 0x2, 0x1fe, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x10000, 0x8, 0x9, 0x7, 0x199f, 0x8, 0x5, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x23, 0x0, 0x5, 0x7, 0xfffffffc, 0x20, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x1, 0x400, 0x8001, 0x100003, 0x1, 0x297, 0x5, 0x0, 0x1981, 0x4, 0x100, 0x3, 0x7, 0x0, 0x0, 0x1000001, 0x10, 0x8001, 0x0, 0x5, 0x1, 0xffffffff, 0x5, 0x5, 0x800, 0xffff, 0xa, 0x96, 0x2, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xffffffff, 0x1, 0x8, 0x5, 0x200, 0x3], [0x9, 0xc584, 0x7, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x7, 0x5, 0x9, 0x2, 0x20000005, 0x3, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf22, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0xfffffff8, 0x100fffd, 0x102005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x10401, 0x5], [0x108e, 0x7fffffff, 0x3, 0x3, 0x88, 0x2, 0x1006, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x80000001, 0x65f413f6, 0x4, 0x8, 0x40008a8, 0x2, 0x40, 0x7, 0x26f, 0x4, 0x4, 0x10, 0x1, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x9, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 5m57.53633151s ago: executing program 33 (id=51): pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r11, 0xc018ae85, &(0x7f00000000c0)={0x40000}) close_range(r2, r8, 0x0) 5m19.935828687s ago: executing program 4 (id=140): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x100000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) personality(0x4100001) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 5m19.226989696s ago: executing program 4 (id=144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x93e0, @any, 0x0, 0x3}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x800}, 0xe) 5m18.629782053s ago: executing program 4 (id=146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000bc0)={0x4c, 0x0, &(0x7f0000000a80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4, 0x0, &(0x7f0000000b80)="9ed1ad2a"}) 5m17.358207846s ago: executing program 4 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x8, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 5m16.286700006s ago: executing program 4 (id=153): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) 5m15.58326787s ago: executing program 4 (id=156): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12a2}, 0x94) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 4m59.710473001s ago: executing program 34 (id=156): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12a2}, 0x94) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 4m19.095431516s ago: executing program 7 (id=423): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m17.583919061s ago: executing program 7 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m17.174416288s ago: executing program 7 (id=432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='bcache_alloc_fail\x00', r0, 0x0, 0xa6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 4m15.678995061s ago: executing program 7 (id=440): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 4m14.814630957s ago: executing program 7 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x2c, r2, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 4m13.691446802s ago: executing program 7 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x2c, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m11.650932068s ago: executing program 35 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x2c, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m57.088042531s ago: executing program 6 (id=508): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1) 3m56.429624393s ago: executing program 6 (id=511): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m55.075088758s ago: executing program 6 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0xfe, {0x80}}, 0xc80) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x86343, 0x0) 3m54.159459471s ago: executing program 6 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 3m53.612972837s ago: executing program 6 (id=526): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m52.255517245s ago: executing program 6 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x7fffffa, 0x60f, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @empty}}}}) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZrk6Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtK03U227TabZn8/OJlzzszs/5wNMztnZpgJYGC9FxHXIuJxmqbnI2Isq89lKbZbqbHco4d35xopiTS98c8kkqxu57OSbHoqW+1kRHztyxHfTJ6PW9vcWp6tVMrrWblUX1kr1Ta3LiytzC6WF8ur09NTl2euzFyamexJP09HxNUv/vUH3/3Zl67+6jO3/3Tz7+e+1WjWaDZ/bz9eUH6/ma2uF5rfxd4V1l8y2FGUb/YwM9xuiaHnau695jYBANBe4xj/gxHxyYg4H2MxtP/hLAAAAPAGSj8/Gv9LItL2TnSoBwAAAN4gueY9sEmuGBEjzXwuVyy27uH9cIzkKtVa/dML1Y3V+da9suNRyC0sVcqT2b3C41FIGuWpZv5J+eIz5emIeDsivj823CwX56qV+X6f/AAAAIABcWrP+D8XEf8Za43/AQAAgGNmvN8NAAAAAF47438AAAA4/oz/AQAA4Fj7yvXrjZTuvP96/tbmxnL11oX5cm25uLIxV5yrrq8VF6vVxeYz+1YO+rxKtbr22VjduFOql2v1Um1z6+ZKdWO1fnPpqVdgAwAAAIfo7Y/f/0MSEdufG26mhhPdrdrlYsBRld/NJdm0zWb9x7da078cUqOAQzHU7wYAfZPvdwOAvin0uwFA3yUHzO94885vs+knetseAACg9yY+2vn6f27fNbf3nw0ceTZiGFyu/8Pgal7/7/ZOXgcLcKwUHAHAwHvl6/8HStMXahAAANBzo82U5IrZ6b3RyOWKxYjTzdcCFJKFpUp5MiLeiojfjxU+0ChPNddMDhwzAAAAAAAAAAAAAAAAAAAAAAAAAAAtaZpECgAAABxrEbm/Jb9uPct/Yuzs6LPnB04k/x2L7BWht39844d3Zuv19alG/b926+s/yuov9uMMBgAAAAyEF3qB/844fWccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ojh3bmddJhx//GFiBhvFz8fJ5vTk1GIiJF/J5Hfs14SEUM9iD/c+PORdvGTRrN2Q7aLP9yD+Nv39o0f49m30C7+qR7Eh0F2v7H/udZu+8vFe81p++0vH/FU+WV13v/F7v5vqMP2f7rLGO88+EWpY/x7Ee/k2+9/duInHeKf6TL+N76+tdVpXvqTiIm2vz/JU7FK9ZW1Um1z68LSyuxiebG8Oj09dXnmysylmcnSwlKlnP1tG+N7H/vl4/36P9Ih/vgB/T/bZf///+DOww+1soV28c+daRP/Nz/Nlng+fi777ftUlm/Mn9jJb7fye73789+9u1//5zv0/6D//7ku+3/+q9/5c5eLAgCHoLa5tTxbqZTXj22mMUo/As2QOYKZb/f0A9M0TRvb1Ct8ThJH4WtpZvq9ZwIAAHrtyUF/v1sCAAAAAAAAAAAAAAAAAAAAg+swHif2bMzt3VzSi0doAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xPsBAAD//wdy2V0=") 3m48.849035732s ago: executing program 8 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 3m48.304415774s ago: executing program 8 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000003c0)="580000001500add427323b470c45b4560a067ffffff781004e22030d00fb1a28925aa8002000eaa57b0009191dd1641ea49bf418b5ea1d8f640080020efffeffe809020000ff00048b3a09000000ffffffffffffffffffff", 0x58}], 0x1) 3m47.963513427s ago: executing program 8 (id=555): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r0, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r0, 0x0) 3m47.627339999s ago: executing program 8 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m47.087064331s ago: executing program 8 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 3m46.458467116s ago: executing program 8 (id=561): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 3m36.93567667s ago: executing program 36 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x7fffffa, 0x60f, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @empty}}}}) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3m30.85401308s ago: executing program 37 (id=561): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 30.585438031s ago: executing program 3 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000340)="00d400c2dda5296763eced7acadc", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x18) 30.095700544s ago: executing program 3 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 29.357074433s ago: executing program 3 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x0, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 28.837485283s ago: executing program 3 (id=1554): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 28.2982325s ago: executing program 3 (id=1557): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x100000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) personality(0x4100001) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 27.879033734s ago: executing program 3 (id=1561): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 26.324415063s ago: executing program 38 (id=1561): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 18.367183507s ago: executing program 9 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 17.861816608s ago: executing program 9 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 17.385887197s ago: executing program 9 (id=1605): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) 16.81336396s ago: executing program 9 (id=1608): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0xa) 15.346699065s ago: executing program 9 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 14.86892578s ago: executing program 9 (id=1616): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x7fffffa, 0x60f, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @empty}}}}) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.753470128s ago: executing program 1 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6db6ec49e3ab5510}, {}, {0xb, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x40, 0x2, [@m_nat={0x3c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "7e495428888baf43e28f422e93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x400c084) 5.054324263s ago: executing program 1 (id=1664): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x1, 0x2, 0xf}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf25090000000500080007000000080001000100000005001276002f0000"], 0x2c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) 4.174045321s ago: executing program 5 (id=1668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x1b) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 3.459552738s ago: executing program 5 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 3.395665815s ago: executing program 0 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3.004791917s ago: executing program 0 (id=1673): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2.847125831s ago: executing program 2 (id=1674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) 2.804196014s ago: executing program 5 (id=1675): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 2.595310876s ago: executing program 1 (id=1676): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.473242917s ago: executing program 0 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x0, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.375342561s ago: executing program 2 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000004feffff95"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00'}, 0x2e) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.24072264s ago: executing program 1 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) 2.030828761s ago: executing program 2 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1.885764396s ago: executing program 0 (id=1681): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 1.823076011s ago: executing program 1 (id=1682): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) 1.703080916s ago: executing program 2 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.660924217s ago: executing program 5 (id=1684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r1) 1.35711155s ago: executing program 0 (id=1685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1.251140694s ago: executing program 1 (id=1686): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x1, 0x2, 0xf}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf25090000000500080007000000080001000100000005001276002f0000"], 0x2c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) 1.242647124s ago: executing program 2 (id=1687): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1.150993157s ago: executing program 5 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6db6ec49e3ab5510}, {}, {0xb, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x40, 0x2, [@m_nat={0x3c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "7e495428888baf43e28f422e93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x400c084) 371.765888ms ago: executing program 2 (id=1689): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 344.71018ms ago: executing program 0 (id=1690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 0s ago: executing program 5 (id=1691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x0, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): ng backup interface [ 419.945023][ T3922] bond0 (unregistering): Released all slaves [ 420.215933][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.105980][ T3922] hsr_slave_0: left promiscuous mode [ 421.143732][ T3922] hsr_slave_1: left promiscuous mode [ 421.156202][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.164494][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.251957][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.262910][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.291095][ T8290] loop5: detected capacity change from 0 to 512 [ 421.323260][ T8290] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 421.382163][ T3922] veth1_macvtap: left promiscuous mode [ 421.388003][ T3922] veth0_macvtap: left promiscuous mode [ 421.394096][ T3922] veth1_vlan: left promiscuous mode [ 421.399754][ T3922] veth0_vlan: left promiscuous mode [ 421.486776][ T8290] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.721: bg 0: block 104: invalid block bitmap [ 421.557517][ T8290] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 421.741914][ T8290] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.721: invalid indirect mapped block 1 (level 1) [ 421.812455][ T8290] EXT4-fs (loop5): 1 truncate cleaned up [ 421.826117][ T8290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.292696][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.457987][ T3922] team0 (unregistering): Port device team_slave_1 removed [ 422.495687][ T3922] team0 (unregistering): Port device team_slave_0 removed [ 422.851242][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.860342][ T8287] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 422.874368][ T8287] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 423.072918][ T8303] loop9: detected capacity change from 0 to 512 [ 423.095411][ T8303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.184023][ T8303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.197672][ T8303] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.865244][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.693621][ T30] audit: type=1326 audit(1763607741.744:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.036644][ T30] audit: type=1326 audit(1763607741.874:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.061182][ T30] audit: type=1326 audit(1763607741.874:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.084439][ T30] audit: type=1326 audit(1763607741.874:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.106930][ T30] audit: type=1326 audit(1763607741.904:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.130708][ T30] audit: type=1326 audit(1763607741.904:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.155211][ T30] audit: type=1326 audit(1763607741.904:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.178383][ T30] audit: type=1326 audit(1763607741.904:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 425.753181][ T8332] loop2: detected capacity change from 0 to 764 [ 425.848286][ T8332] Symlink component flag not implemented [ 425.854335][ T8332] Symlink component flag not implemented [ 425.860401][ T8332] Symlink component flag not implemented (129) [ 425.874344][ T8332] Symlink component flag not implemented (6) [ 426.035030][ T8338] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 426.048953][ T8338] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 426.797368][ T8350] random: crng reseeded on system resumption [ 427.264868][ T8355] loop5: detected capacity change from 0 to 512 [ 427.369411][ T8355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 427.382584][ T8355] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.484793][ T8355] EXT4-fs (loop5): shut down requested (2) [ 428.821707][ T8368] overlayfs: failed to resolve './file1/file0': -2 [ 429.131585][ T30] audit: type=1326 audit(1763607746.224:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.9.757" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0 [ 429.474387][ T8376] loop0: detected capacity change from 0 to 1024 [ 429.501719][ T8376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.592335][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.672521][ T30] audit: type=1800 audit(1763607746.774:654): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.758" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 429.795526][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.105753][ T8387] random: crng reseeded on system resumption [ 430.429267][ T30] audit: type=1326 audit(1763607747.514:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7fc00000 [ 430.657160][ T3746] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.797208][ T3746] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.954986][ T3746] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.140948][ T3746] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.330333][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 431.891410][ T8403] overlayfs: failed to resolve './file1/file0': -2 [ 432.130657][ T3746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.189342][ T3746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.243339][ T3746] bond0 (unregistering): Released all slaves [ 432.711060][ T8413] netlink: 'syz.0.769': attribute type 3 has an invalid length. [ 432.748419][ T8414] loop5: detected capacity change from 0 to 1024 [ 432.776499][ T8413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.769'. [ 432.786082][ T8414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.845494][ T30] audit: type=1326 audit(1763607749.944:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 432.886186][ T3746] hsr_slave_0: left promiscuous mode [ 432.920036][ T8414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.925737][ T3746] hsr_slave_1: left promiscuous mode [ 432.942963][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.950868][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.958616][ T30] audit: type=1326 audit(1763607749.974:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 432.981466][ T30] audit: type=1326 audit(1763607749.974:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.003760][ T30] audit: type=1326 audit(1763607749.974:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.026100][ T30] audit: type=1326 audit(1763607749.974:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.053999][ T30] audit: type=1326 audit(1763607749.984:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.078074][ T30] audit: type=1326 audit(1763607749.994:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.100845][ T30] audit: type=1326 audit(1763607749.994:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.112218][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.123108][ T30] audit: type=1326 audit(1763607749.994:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 433.130556][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.252945][ T3746] veth1_macvtap: left promiscuous mode [ 433.258676][ T3746] veth0_macvtap: left promiscuous mode [ 433.268829][ T3746] veth1_vlan: left promiscuous mode [ 433.274571][ T3746] veth0_vlan: left promiscuous mode [ 433.441873][ T8422] random: crng reseeded on system resumption [ 433.667881][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.811265][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 434.291641][ T3746] team0 (unregistering): Port device team_slave_1 removed [ 434.391709][ T3746] team0 (unregistering): Port device team_slave_0 removed [ 434.694893][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.795987][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.904644][ T8436] overlayfs: failed to resolve './file1/file0': -2 [ 435.484982][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 435.485056][ T30] audit: type=1326 audit(1763607752.584:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.541175][ T30] audit: type=1326 audit(1763607752.634:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.563706][ T30] audit: type=1326 audit(1763607752.644:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.713424][ T30] audit: type=1326 audit(1763607752.814:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.766434][ T30] audit: type=1326 audit(1763607752.864:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.789267][ T30] audit: type=1326 audit(1763607752.864:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.817359][ T30] audit: type=1326 audit(1763607752.864:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.841635][ T30] audit: type=1326 audit(1763607752.914:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.863996][ T30] audit: type=1326 audit(1763607752.914:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 435.948198][ T8449] binder: BINDER_SET_CONTEXT_MGR already set [ 435.955036][ T8449] binder: 8448:8449 ioctl 4018620d 80004a80 returned -16 [ 436.068163][ T30] audit: type=1326 audit(1763607752.994:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 436.389967][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'. [ 436.396402][ T8455] loop9: detected capacity change from 0 to 1024 [ 436.472011][ T8455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.570857][ T8455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.782232][ T8468] overlayfs: overlapping lowerdir path [ 436.861783][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.147370][ T8476] netlink: 52 bytes leftover after parsing attributes in process `syz.2.795'. [ 437.710466][ T8486] program syz.0.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.230694][ T8497] loop9: detected capacity change from 0 to 1024 [ 438.240425][ T8497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.370943][ T8497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.590507][ T8503] overlayfs: overlapping lowerdir path [ 438.705747][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.649226][ T8527] loop0: detected capacity change from 0 to 1024 [ 440.670246][ T8527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 440.745580][ T8527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.800577][ T8532] overlayfs: overlapping lowerdir path [ 440.841791][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 440.841863][ T30] audit: type=1800 audit(1763607757.944:775): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.817" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 441.132344][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.505413][ T8544] random: crng reseeded on system resumption [ 442.550201][ T30] audit: type=1326 audit(1763607759.644:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.572644][ T8558] netlink: 'syz.2.828': attribute type 17 has an invalid length. [ 442.572736][ T8558] netlink: 148 bytes leftover after parsing attributes in process `syz.2.828'. [ 442.596703][ T30] audit: type=1326 audit(1763607759.644:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.619289][ T30] audit: type=1326 audit(1763607759.644:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.641677][ T30] audit: type=1326 audit(1763607759.654:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.669372][ T30] audit: type=1326 audit(1763607759.764:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.706920][ T8566] loop0: detected capacity change from 0 to 1024 [ 442.724069][ T30] audit: type=1326 audit(1763607759.804:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.746323][ T30] audit: type=1326 audit(1763607759.804:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.763575][ T8566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.773865][ T30] audit: type=1326 audit(1763607759.804:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.799270][ T30] audit: type=1326 audit(1763607759.844:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 442.884212][ T8566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.920968][ T8561] loop3: detected capacity change from 0 to 512 [ 442.991913][ T8561] EXT4-fs (loop3): orphan cleanup on readonly fs [ 443.026811][ T8561] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.829: bad orphan inode 13 [ 443.052530][ T8561] ext4_test_bit(bit=12, block=18) = 1 [ 443.058093][ T8561] is_bad_inode(inode)=0 [ 443.062857][ T8561] NEXT_ORPHAN(inode)=2130706432 [ 443.069814][ T8561] max_ino=32 [ 443.073137][ T8561] i_nlink=1 [ 443.078436][ T8561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.129776][ T8572] overlayfs: overlapping lowerdir path [ 443.174468][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.238146][ T8561] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.829: deleted inode referenced: 12 [ 443.305282][ T8561] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.829: deleted inode referenced: 12 [ 443.411182][ T8575] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 443.473175][ T8575] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 443.771546][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.303386][ T8595] loop2: detected capacity change from 0 to 512 [ 444.343904][ T8595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 444.396920][ T8595] EXT4-fs (loop2): 1 truncate cleaned up [ 444.414620][ T8595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.803875][ T8604] loop5: detected capacity change from 0 to 1024 [ 444.820912][ T8603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.850614][ T8604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.886363][ T8604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.909540][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.842'. [ 445.019834][ T8603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.155670][ T8603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.287983][ T8603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.324575][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.371935][ T8613] overlayfs: overlapping lowerdir path [ 445.566113][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.594463][ T3627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.621771][ T3627] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.661947][ T3627] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.699446][ T3627] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.971279][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 445.971353][ T30] audit: type=1326 audit(1763607763.074:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.000182][ T30] audit: type=1326 audit(1763607763.074:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.163693][ T30] audit: type=1326 audit(1763607763.144:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.186261][ T30] audit: type=1326 audit(1763607763.144:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.209485][ T30] audit: type=1326 audit(1763607763.144:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.231787][ T30] audit: type=1326 audit(1763607763.144:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.255682][ T30] audit: type=1326 audit(1763607763.144:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.278451][ T30] audit: type=1326 audit(1763607763.144:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.300940][ T30] audit: type=1326 audit(1763607763.154:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.323546][ T30] audit: type=1326 audit(1763607763.154:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 446.576011][ T8632] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 446.589768][ T8632] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 446.931662][ T8641] loop3: detected capacity change from 0 to 512 [ 446.955477][ T8641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.967028][ T8640] loop9: detected capacity change from 0 to 1024 [ 446.969806][ T8640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.028376][ T8640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.054709][ T8641] EXT4-fs (loop3): orphan cleanup on readonly fs [ 447.132256][ T8641] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.858: bg 0: block 248: padding at end of block bitmap is not set [ 447.220363][ T8641] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.858: Failed to acquire dquot type 1 [ 447.270852][ T8641] EXT4-fs (loop3): 1 truncate cleaned up [ 447.288625][ T8651] overlayfs: overlapping lowerdir path [ 447.314731][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 447.400353][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.564798][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.806007][ T8657] loop5: detected capacity change from 0 to 512 [ 447.876445][ T8657] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 447.971943][ T8657] EXT4-fs (loop5): 1 truncate cleaned up [ 447.979840][ T8657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.282713][ T8670] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 448.304383][ T8670] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 448.453400][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.841979][ T8678] loop3: detected capacity change from 0 to 1024 [ 448.874381][ T8678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.033774][ T8678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.395457][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.589495][ T8685] ALSA: seq fatal error: cannot create timer (-19) [ 449.906295][ T8690] loop5: detected capacity change from 0 to 2048 [ 450.018003][ T8690] Alternate GPT is invalid, using primary GPT. [ 450.025607][ T8690] loop5: p1 p2 p3 [ 450.029764][ T8690] loop5: partition table partially beyond EOD, truncated [ 450.842525][ T8706] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 450.864890][ T8706] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 450.909435][ T8707] loop5: detected capacity change from 0 to 512 [ 450.939349][ T8707] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 451.003352][ T8707] EXT4-fs (loop5): 1 truncate cleaned up [ 451.011511][ T8707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.186106][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 451.186187][ T30] audit: type=1326 audit(1763607768.284:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.226747][ T30] audit: type=1326 audit(1763607768.324:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.249810][ T30] audit: type=1326 audit(1763607768.324:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.275359][ T30] audit: type=1326 audit(1763607768.324:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.298265][ T30] audit: type=1326 audit(1763607768.324:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.320554][ T30] audit: type=1326 audit(1763607768.324:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.534449][ T30] audit: type=1326 audit(1763607768.484:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.544979][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.556863][ T30] audit: type=1326 audit(1763607768.494:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.590047][ T30] audit: type=1326 audit(1763607768.494:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 451.606079][ T8719] random: crng reseeded on system resumption [ 451.613053][ T30] audit: type=1326 audit(1763607768.494:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 452.187763][ T8724] tls_set_device_offload: netdev not found [ 453.215785][ T8745] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 453.229377][ T8745] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 453.367203][ T8750] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.494085][ T8750] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.698144][ T8750] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.762597][ T8750] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.797014][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 453.948311][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.968237][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.979549][ T5860] usb 1-1: config 0 has no interfaces? [ 454.042440][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.061486][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.074469][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.092055][ T5860] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 454.101703][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.110070][ T5860] usb 1-1: Product: syz [ 454.114393][ T5860] usb 1-1: Manufacturer: syz [ 454.119331][ T5860] usb 1-1: SerialNumber: syz [ 454.149772][ T5860] usb 1-1: config 0 descriptor?? [ 454.365195][ T5860] usb 1-1: USB disconnect, device number 4 [ 455.320797][ T8784] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 455.334133][ T8784] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 456.247187][ T8804] loop9: detected capacity change from 0 to 128 [ 456.262274][ T8804] vfat: Unknown parameter '0xffffffffffffffff' [ 456.279979][ T8805] loop0: detected capacity change from 0 to 512 [ 456.345742][ T8794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.434335][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.447478][ T8805] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.624287][ T8805] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.921: bg 0: block 18: invalid block bitmap [ 456.912700][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.139350][ T5857] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 457.329616][ T5857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.340214][ T5857] usb 6-1: config 0 has no interfaces? [ 457.375379][ T5857] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 457.385036][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.393468][ T5857] usb 6-1: Product: syz [ 457.397803][ T5857] usb 6-1: Manufacturer: syz [ 457.403009][ T5857] usb 6-1: SerialNumber: syz [ 457.455718][ T5857] usb 6-1: config 0 descriptor?? [ 457.572166][ T8828] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 457.585541][ T8828] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 457.676045][ T1954] usb 6-1: USB disconnect, device number 5 [ 458.444723][ T8842] loop0: detected capacity change from 0 to 512 [ 458.541467][ T8842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 458.554820][ T8842] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.654075][ T8842] EXT4-fs (loop0): shut down requested (2) [ 458.924950][ T8851] program syz.3.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.379411][ T8856] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 459.780832][ T8852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.399489][ T8869] loop3: detected capacity change from 0 to 512 [ 460.420758][ T8866] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 460.433888][ T8866] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 461.101288][ T5857] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 461.294513][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.306431][ T5857] usb 3-1: config 0 has no interfaces? [ 461.373708][ T5857] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 461.383165][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.391578][ T5857] usb 3-1: Product: syz [ 461.395908][ T5857] usb 3-1: Manufacturer: syz [ 461.402584][ T5857] usb 3-1: SerialNumber: syz [ 461.452624][ T5857] usb 3-1: config 0 descriptor?? [ 461.599173][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 461.667081][ T5857] usb 3-1: USB disconnect, device number 2 [ 461.967216][ T8888] overlayfs: missing 'lowerdir' [ 463.069858][ T8898] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 463.083038][ T8898] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 463.835721][ T8901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 463.886490][ T8911] loop2: detected capacity change from 0 to 512 [ 464.008760][ T8911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 464.022178][ T8911] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.130957][ T8911] EXT4-fs (loop2): shut down requested (2) [ 464.314290][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 464.424039][ T8918] overlayfs: missing 'lowerdir' [ 464.826836][ T8930] loop5: detected capacity change from 0 to 512 [ 464.893114][ T8930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 464.933364][ T8930] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.968: Invalid block bitmap block 0 in block_group 0 [ 464.961525][ T8930] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 464.980217][ T8930] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.968: attempt to clear invalid blocks 983261 len 1 [ 465.018204][ T8930] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.968: Invalid inode table block 0 in block_group 0 [ 465.040119][ T1954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 465.053197][ T8930] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 465.064235][ T8930] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 465.098575][ T8930] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.968: Invalid inode table block 0 in block_group 0 [ 465.136126][ T8930] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 465.167680][ T8930] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.968: mark_inode_dirty error [ 465.209163][ T8930] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 465.218297][ T8934] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 465.228414][ T1954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.232319][ T8934] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 465.239092][ T1954] usb 1-1: config 0 has no interfaces? [ 465.252563][ T8937] loop3: detected capacity change from 0 to 512 [ 465.260909][ T8930] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.968: Invalid inode table block 0 in block_group 0 [ 465.265705][ T8937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 465.310400][ T8930] EXT4-fs (loop5): 1 truncate cleaned up [ 465.318330][ T8930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.343126][ T1954] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 465.353443][ T1954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.355704][ T8937] EXT4-fs (loop3): 1 truncate cleaned up [ 465.361870][ T1954] usb 1-1: Product: syz [ 465.361971][ T1954] usb 1-1: Manufacturer: syz [ 465.362064][ T1954] usb 1-1: SerialNumber: syz [ 465.376503][ T1954] usb 1-1: config 0 descriptor?? [ 465.378737][ T8937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.412336][ T8930] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.968: Invalid inode table block 0 in block_group 0 [ 465.435959][ T8930] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 465.614547][ T1954] usb 1-1: USB disconnect, device number 5 [ 465.626356][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.760207][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.981115][ T8945] loop5: detected capacity change from 0 to 512 [ 466.076000][ T8945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 466.089615][ T8945] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.225577][ T8943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.409590][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 466.429840][ T8955] overlayfs: missing 'lowerdir' [ 466.721037][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 466.721114][ T30] audit: type=1326 audit(1763607783.824:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 466.858442][ T30] audit: type=1326 audit(1763607783.954:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 466.881349][ T30] audit: type=1326 audit(1763607783.954:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 466.903710][ T30] audit: type=1326 audit(1763607783.954:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 466.926165][ T30] audit: type=1326 audit(1763607783.954:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 466.953764][ T30] audit: type=1326 audit(1763607783.954:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 466.979340][ T30] audit: type=1326 audit(1763607783.954:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.002024][ T30] audit: type=1326 audit(1763607783.954:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.024421][ T30] audit: type=1326 audit(1763607783.954:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.046862][ T30] audit: type=1326 audit(1763607783.954:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.176815][ T8968] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 467.197530][ T8968] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 467.587738][ T8977] loop2: detected capacity change from 0 to 512 [ 467.666515][ T8977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.729984][ T8977] EXT4-fs (loop2): 1 truncate cleaned up [ 467.737611][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.218850][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.279963][ T8985] loop3: detected capacity change from 0 to 512 [ 468.324967][ T8984] loop0: detected capacity change from 0 to 2048 [ 468.352835][ T8984] EXT4-fs: inline encryption not supported [ 468.398372][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 468.411667][ T8985] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.471631][ T8984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.574506][ T8984] syz_tun: entered allmulticast mode [ 468.586552][ T8995] overlayfs: missing 'lowerdir' [ 468.592119][ T5857] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 468.773251][ T5857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.783944][ T5857] usb 6-1: config 0 has no interfaces? [ 468.834247][ T5857] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 468.844016][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.848947][ T8981] syz_tun: left allmulticast mode [ 468.852355][ T5857] usb 6-1: Product: syz [ 468.861696][ T5857] usb 6-1: Manufacturer: syz [ 468.866451][ T5857] usb 6-1: SerialNumber: syz [ 468.911407][ T8999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.937718][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 468.974661][ T5857] usb 6-1: config 0 descriptor?? [ 469.023774][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.204502][ T5857] usb 6-1: USB disconnect, device number 6 [ 469.470756][ T9008] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 469.484131][ T9008] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 469.943501][ T9018] loop0: detected capacity change from 0 to 512 [ 470.104985][ T9018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.999: bg 0: block 248: padding at end of block bitmap is not set [ 470.154369][ T9018] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.999: Failed to acquire dquot type 1 [ 470.219868][ T9018] EXT4-fs (loop0): 1 truncate cleaned up [ 470.227857][ T9018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.244205][ T9018] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.270459][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.277233][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.978664][ T9039] overlayfs: missing 'lowerdir' [ 471.608142][ T9051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 472.028538][ T9058] loop3: detected capacity change from 0 to 512 [ 472.071641][ T9058] EXT4-fs: inline encryption not supported [ 472.118011][ T9058] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 472.132864][ T9058] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1008: invalid indirect mapped block 2683928664 (level 1) [ 472.182544][ T9058] EXT4-fs (loop3): 1 truncate cleaned up [ 472.190701][ T9058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.444960][ T9058] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1008: Invalid block bitmap block 3 in block_group 0 [ 472.476861][ T9058] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1008: Invalid block bitmap block 3 in block_group 0 [ 472.504672][ T9058] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1008: Invalid block bitmap block 3 in block_group 0 [ 472.547139][ T9066] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 472.571173][ T9066] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 472.738584][ T9018] syz.0.999 (9018) used greatest stack depth: 3096 bytes left [ 473.750939][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.770197][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.259331][ T5860] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 474.430996][ T9123] program syz.3.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.454062][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.464612][ T5860] usb 6-1: config 0 has no interfaces? [ 474.517439][ T5860] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 474.527129][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.535497][ T5860] usb 6-1: Product: syz [ 474.540046][ T5860] usb 6-1: Manufacturer: syz [ 474.544812][ T5860] usb 6-1: SerialNumber: syz [ 474.638616][ T5860] usb 6-1: config 0 descriptor?? [ 474.779910][ T9130] overlayfs: missing 'lowerdir' [ 474.876497][ T5860] usb 6-1: USB disconnect, device number 7 [ 475.681644][ T9138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 475.925158][ T9145] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 475.937674][ T9144] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 475.959957][ T9144] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 476.610780][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 476.831585][ T9161] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 476.841087][ T9161] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.591005][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 477.821624][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.832255][ T5857] usb 4-1: config 0 has no interfaces? [ 477.951203][ T5857] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 477.961829][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.970476][ T5857] usb 4-1: Product: syz [ 477.974809][ T5857] usb 4-1: Manufacturer: syz [ 477.979800][ T5857] usb 4-1: SerialNumber: syz [ 478.066065][ T9174] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1034'. [ 478.081285][ T5857] usb 4-1: config 0 descriptor?? [ 478.300891][ T5857] usb 4-1: USB disconnect, device number 9 [ 478.732279][ T9178] loop2: detected capacity change from 0 to 8192 [ 478.770116][ T9185] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 478.783338][ T9185] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 479.026311][ T9182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 479.388756][ T9194] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 479.398368][ T9194] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 481.310929][ T9224] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 481.324037][ T9224] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 481.871801][ T9232] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 481.887369][ T9232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 482.421379][ T9233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 484.552716][ T9271] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 484.566088][ T9271] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 484.714766][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 484.714839][ T30] audit: type=1326 audit(1763607801.814:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.746170][ T30] audit: type=1326 audit(1763607801.814:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.769594][ T30] audit: type=1326 audit(1763607801.824:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.792277][ T30] audit: type=1326 audit(1763607801.824:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.814935][ T30] audit: type=1326 audit(1763607801.824:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.837422][ T30] audit: type=1326 audit(1763607801.824:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.861117][ T30] audit: type=1326 audit(1763607801.824:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.884045][ T30] audit: type=1326 audit(1763607801.854:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.906907][ T30] audit: type=1326 audit(1763607801.854:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.929454][ T30] audit: type=1326 audit(1763607801.854:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.9.1068" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 484.992368][ T9276] overlayfs: missing 'lowerdir' [ 486.451443][ T9291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.952280][ T5868] kernel read not supported for file /vcs (pid: 5868 comm: kworker/1:5) [ 487.050152][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 487.247764][ T5857] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 487.259406][ T5857] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 487.270131][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 487.281013][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.378783][ T5857] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 487.388235][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 487.397199][ T5857] usb 3-1: Product: syz [ 487.403725][ T5857] usb 3-1: Manufacturer: syz [ 487.452677][ T9307] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 487.465967][ T9307] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 487.560697][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 487.566140][ T5857] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 487.737412][ T9312] loop3: detected capacity change from 0 to 1024 [ 487.777557][ T9312] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 487.806661][ T9312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1083: lblock 2 mapped to illegal pblock 2 (length 1) [ 487.909775][ T9312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1083: lblock 0 mapped to illegal pblock 48 (length 1) [ 487.984117][ T9312] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1083: Failed to acquire dquot type 0 [ 488.019464][ T9312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 488.065306][ T9312] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1083: mark_inode_dirty error [ 488.099260][ T9312] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 488.110157][ T9312] EXT4-fs (loop3): 1 orphan inode deleted [ 488.117875][ T9312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.149637][ T35] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 488.193653][ T35] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 488.391294][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.435465][ T3844] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 488.500993][ T3844] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 0 [ 488.517374][ T5805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 488.570456][ T5805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 488.588677][ T5805] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 488.932717][ T9331] loop5: detected capacity change from 0 to 512 [ 488.949607][ T9331] EXT4-fs: Ignoring removed i_version option [ 488.955842][ T9331] EXT4-fs: Ignoring removed bh option [ 488.987982][ T9331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.002871][ T9331] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.189256][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.281723][ T9337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 489.391766][ T9340] loop5: detected capacity change from 0 to 512 [ 489.450952][ T9340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 489.470832][ T9340] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.637672][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 489.901839][ T9348] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 489.915584][ T9348] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 489.970731][ T5857] usb 3-1: USB disconnect, device number 3 [ 490.257050][ T9356] loop9: detected capacity change from 0 to 128 [ 491.867637][ T9373] loop2: detected capacity change from 0 to 512 [ 491.990772][ T9373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 492.004187][ T9373] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.521461][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 493.104320][ T9383] loop5: detected capacity change from 0 to 512 [ 493.170948][ T9387] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 493.184298][ T9387] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 493.200849][ T9383] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.269350][ T5857] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 493.344672][ T9383] __quota_error: 40 callbacks suppressed [ 493.344747][ T9383] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 493.370133][ T9383] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 493.436256][ T5857] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 493.445409][ T5857] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 493.458302][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.468135][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.579936][ T5857] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 493.589457][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.598076][ T5857] usb 3-1: Product: syz [ 493.602874][ T5857] usb 3-1: Manufacturer: syz [ 493.620593][ T9393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 493.652547][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 493.660224][ T5857] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 493.697460][ T6056] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 494.867060][ T9418] loop5: detected capacity change from 0 to 512 [ 494.940770][ T9418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 494.953976][ T9418] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.102740][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 495.342326][ T9428] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 495.355718][ T9428] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 495.819712][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1126'. [ 495.888191][ T9439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.995704][ T5860] usb 3-1: USB disconnect, device number 4 [ 496.044604][ T9439] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 496.133320][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1126'. [ 496.279670][ T9442] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 496.308292][ T9442] bond1 (unregistering): Released all slaves [ 496.548418][ T9448] loop2: detected capacity change from 0 to 1024 [ 496.596923][ T9448] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 496.608503][ T9448] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 496.710760][ T9446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.713442][ T9448] JBD2: no valid journal superblock found [ 496.733367][ T9448] EXT4-fs (loop2): Could not load journal inode [ 497.458294][ T9458] loop3: detected capacity change from 0 to 8192 [ 497.500116][ T30] audit: type=1326 audit(1763607814.604:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.523166][ T30] audit: type=1326 audit(1763607814.604:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.547124][ T30] audit: type=1326 audit(1763607814.604:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.569975][ T30] audit: type=1326 audit(1763607814.604:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.675060][ T30] audit: type=1326 audit(1763607814.774:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.698373][ T30] audit: type=1326 audit(1763607814.774:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 497.883113][ T5805] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 497.892336][ T5805] FAT-fs (loop3): Filesystem has been set read-only [ 497.919834][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 498.709242][ T5860] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 498.906148][ T5860] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 498.915152][ T5860] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 498.925773][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 498.935028][ T5860] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.011553][ T5860] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.021134][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.029560][ T5860] usb 4-1: Product: syz [ 499.033884][ T5860] usb 4-1: Manufacturer: syz [ 499.071204][ T5860] cdc_wdm 4-1:1.0: skipping garbage [ 499.076740][ T5860] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 499.392594][ T9503] syzkaller0: entered promiscuous mode [ 499.398678][ T9503] syzkaller0: entered allmulticast mode [ 499.505577][ T9503] tipc: Started in network mode [ 499.510901][ T9503] tipc: Node identity ce45d829077f, cluster identity 4711 [ 499.519326][ T9503] tipc: Enabled bearer , priority 0 [ 499.554437][ T9502] tipc: Resetting bearer [ 499.582649][ T9502] tipc: Disabling bearer [ 499.665406][ T9497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 501.565362][ T5857] usb 4-1: USB disconnect, device number 10 [ 501.770209][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 502.087584][ T9545] loop5: detected capacity change from 0 to 128 [ 502.393899][ T9544] serio: Serial port ptm0 [ 502.890201][ T9553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 503.040922][ T5799] Bluetooth: hci6: command 0x0406 tx timeout [ 503.908069][ T30] audit: type=1326 audit(1763607820.994:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 503.933330][ T30] audit: type=1326 audit(1763607820.994:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 503.955900][ T30] audit: type=1326 audit(1763607821.004:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 503.978307][ T30] audit: type=1326 audit(1763607821.004:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.005955][ T30] audit: type=1326 audit(1763607821.004:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.030368][ T30] audit: type=1326 audit(1763607821.014:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.053326][ T30] audit: type=1326 audit(1763607821.074:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.076448][ T30] audit: type=1326 audit(1763607821.074:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.099198][ T30] audit: type=1326 audit(1763607821.084:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.126929][ T30] audit: type=1326 audit(1763607821.174:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 504.327952][ T9567] loop3: detected capacity change from 0 to 256 [ 504.818715][ T9572] loop0: detected capacity change from 0 to 128 [ 504.893589][ T9572] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 505.069651][ T5857] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 505.244642][ T5857] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.254401][ T5857] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 505.265199][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.274458][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.305184][ T5857] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.314696][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.323105][ T5857] usb 3-1: Product: syz [ 505.328900][ T5857] usb 3-1: Manufacturer: syz [ 505.353733][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 505.359368][ T5857] cdc_wdm 3-1:1.0: skipping garbage [ 505.364761][ T5857] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 505.714039][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 506.723124][ T9602] tipc: Started in network mode [ 506.728354][ T9602] tipc: Node identity 080211000001, cluster identity 4711 [ 506.736942][ T9602] tipc: Enabled bearer , priority 0 [ 506.788491][ T9603] binder: 9601:9603 ioctl c0306201 0 returned -14 [ 507.192710][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 507.269800][ T35] Bluetooth: hci1: Frame reassembly failed (-84) [ 507.870808][ T5860] tipc: Node number set to 134418688 [ 507.910545][ T5857] usb 3-1: USB disconnect, device number 5 [ 508.134180][ T9618] serio: Serial port ptm1 [ 508.926869][ T9631] loop9: detected capacity change from 0 to 512 [ 508.937888][ T9631] EXT4-fs: Ignoring removed i_version option [ 508.945569][ T9631] EXT4-fs: Ignoring removed bh option [ 508.962072][ T9629] binder: 9628:9629 ioctl c0306201 0 returned -14 [ 509.017735][ T9631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.075978][ T9631] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.156806][ T9636] tipc: Enabling of bearer rejected, failed to enable media [ 509.279331][ T5810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 509.280577][ T5799] Bluetooth: hci1: command 0x1003 tx timeout [ 509.478850][ T9641] loop5: detected capacity change from 0 to 512 [ 509.538430][ T9641] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1203: inode has both inline data and extents flags [ 509.565291][ T9641] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1203: couldn't read orphan inode 15 (err -117) [ 509.622784][ T9641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.644691][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.694865][ T9641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 509.709927][ T9641] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 509.881680][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.656874][ T9664] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 510.996318][ T9669] binder: 9667:9669 ioctl c0306201 0 returned -14 [ 512.476152][ T9696] 9pnet_fd: Insufficient options for proto=fd [ 512.945587][ T9698] syzkaller0: entered promiscuous mode [ 512.951752][ T9698] syzkaller0: entered allmulticast mode [ 513.077512][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 513.077590][ T30] audit: type=1326 audit(1763607830.174:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.107009][ T30] audit: type=1326 audit(1763607830.174:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.131931][ T30] audit: type=1326 audit(1763607830.194:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.155015][ T30] audit: type=1326 audit(1763607830.194:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.177571][ T30] audit: type=1326 audit(1763607830.194:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.405577][ T30] audit: type=1326 audit(1763607830.374:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.430354][ T30] audit: type=1326 audit(1763607830.374:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.453624][ T30] audit: type=1326 audit(1763607830.434:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.476254][ T30] audit: type=1326 audit(1763607830.434:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 513.498763][ T30] audit: type=1326 audit(1763607830.434:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 514.515065][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 514.981805][ T9730] syzkaller0: entered promiscuous mode [ 514.987695][ T9730] syzkaller0: entered allmulticast mode [ 516.629456][ T9750] 9pnet_fd: Insufficient options for proto=fd [ 517.147345][ T9759] syzkaller0: entered promiscuous mode [ 517.153326][ T9759] syzkaller0: entered allmulticast mode [ 517.260955][ T9766] program syz.0.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.707919][ T9770] loop5: detected capacity change from 0 to 1024 [ 517.772124][ T9770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.809816][ T9770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.851186][ T9770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.830617][ T9799] program syz.9.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.987285][ T9802] syzkaller0: entered promiscuous mode [ 518.993339][ T9802] syzkaller0: entered allmulticast mode [ 519.105247][ T9806] loop0: detected capacity change from 0 to 512 [ 519.174444][ T9806] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.1269: corrupted xattr block 95: invalid header [ 519.197158][ T9806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1269: bg 0: block 7: invalid block bitmap [ 519.216640][ T9806] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 519.226992][ T9806] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.1269: corrupted xattr block 95: invalid header [ 519.249344][ T9806] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 519.260732][ T9806] EXT4-fs (loop0): 1 orphan inode deleted [ 519.268460][ T9806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.580889][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.763572][ T9817] loop2: detected capacity change from 0 to 512 [ 519.901684][ T9817] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1274: inode has both inline data and extents flags [ 519.969488][ T9817] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1274: couldn't read orphan inode 15 (err -117) [ 519.993853][ T9817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.045031][ T9817] ext4: Unknown parameter './file0' [ 520.263000][ T9830] netlink: 19 bytes leftover after parsing attributes in process `syz.9.1277'. [ 520.337763][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.622804][ T9838] program syz.2.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.778129][ T9840] syzkaller0: entered promiscuous mode [ 520.784209][ T9840] syzkaller0: entered allmulticast mode [ 521.360566][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 521.670471][ T9857] loop9: detected capacity change from 0 to 512 [ 521.791947][ T9857] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1291: inode has both inline data and extents flags [ 521.892172][ T9857] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1291: couldn't read orphan inode 15 (err -117) [ 521.951055][ T9857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.004759][ T9857] ext4: Unknown parameter './file0' [ 522.175551][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.310536][ T9876] program syz.5.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.733409][ T9884] syzkaller0: entered promiscuous mode [ 522.748170][ T9884] syzkaller0: entered allmulticast mode [ 522.862619][ T9884] tipc: Started in network mode [ 522.867888][ T9884] tipc: Node identity 0e4ec39f4a7a, cluster identity 4711 [ 522.876926][ T9884] tipc: Enabled bearer , priority 0 [ 522.958655][ T9883] tipc: Resetting bearer [ 523.024706][ T9883] tipc: Disabling bearer [ 523.780779][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 524.233905][ T9905] loop2: detected capacity change from 0 to 512 [ 524.290936][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1309: inode has both inline data and extents flags [ 524.305855][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1309: couldn't read orphan inode 15 (err -117) [ 524.322307][ T9911] program syz.5.1312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.325623][ T9905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.371738][ T9910] loop0: detected capacity change from 0 to 1024 [ 524.377308][ T9905] ext4: Unknown parameter './file0' [ 524.390130][ T9910] EXT4-fs: Ignoring removed orlov option [ 524.471893][ T9910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.534016][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 524.534085][ T30] audit: type=1800 audit(1763607841.634:1226): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1311" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 524.718049][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.018625][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 525.234738][ T9910] +}[@ (9910) used greatest stack depth: 2160 bytes left [ 525.302573][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.394899][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1321'. [ 526.485684][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1321'. [ 526.504237][ T9953] program syz.0.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.970649][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1327'. [ 526.995443][ T9960] loop2: detected capacity change from 0 to 512 [ 527.028931][ T9960] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 527.047830][ T9960] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 527.137016][ T9960] EXT4-fs (loop2): 1 truncate cleaned up [ 527.151471][ T9960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.266814][ T9960] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 527.496278][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.231394][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 528.309493][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 528.330551][ T9992] program syz.3.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.099767][T10019] program syz.2.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.428595][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 530.546535][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 531.701093][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.707806][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.420617][T10059] netlink: 'syz.0.1363': attribute type 13 has an invalid length. [ 532.943223][T10062] loop9: detected capacity change from 0 to 512 [ 533.050105][T10062] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 533.133702][T10062] EXT4-fs (loop9): 1 truncate cleaned up [ 533.141888][T10062] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.284913][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 533.387401][T10068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.532604][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 533.665693][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.508266][T10095] loop5: detected capacity change from 0 to 764 [ 534.566802][T10095] rock: directory entry would overflow storage [ 534.573396][T10095] rock: sig=0x4654, size=5, remaining=4 [ 535.082262][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'. [ 535.635738][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1383'. [ 535.711436][T10112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.821613][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 536.988148][ T30] audit: type=1326 audit(1763607854.084:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.011534][ T30] audit: type=1326 audit(1763607854.084:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.034220][ T30] audit: type=1326 audit(1763607854.084:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.056565][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.063318][ T30] audit: type=1326 audit(1763607854.084:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.087508][ T30] audit: type=1326 audit(1763607854.084:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.110737][ T30] audit: type=1326 audit(1763607854.084:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.133430][ T30] audit: type=1326 audit(1763607854.084:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.155705][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.162189][ T30] audit: type=1326 audit(1763607854.084:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.186404][ T30] audit: type=1326 audit(1763607854.084:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.208683][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.217241][ T30] audit: type=1326 audit(1763607854.294:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.9.1394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 537.239618][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.851101][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1399'. [ 537.928134][T10153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.668574][T10162] loop3: detected capacity change from 0 to 512 [ 538.730187][T10162] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1401: error while reading EA inode 32 err=-116 [ 538.762618][T10162] EXT4-fs (loop3): Remounting filesystem read-only [ 538.770093][T10162] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 538.781064][T10162] EXT4-fs (loop3): 1 orphan inode deleted [ 538.788726][T10162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.810715][T10164] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 538.826564][T10164] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 538.843950][T10162] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.055715][T10172] loop9: detected capacity change from 0 to 1024 [ 539.077347][T10172] EXT4-fs: Ignoring removed nobh option [ 539.084588][T10172] EXT4-fs: Ignoring removed bh option [ 539.153608][T10172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.244822][T10177] loop3: detected capacity change from 0 to 512 [ 539.338104][T10177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.354626][T10177] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.381504][T10172] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 539.415305][T10172] EXT4-fs (loop9): Remounting filesystem read-only [ 539.558686][T10177] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.1407: Directory hole found for htree leaf block 0 [ 539.576896][ T7854] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.593830][T10177] EXT4-fs (loop3): Remounting filesystem read-only [ 539.810664][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.829211][ T9108] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 540.184817][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1413'. [ 540.990399][T10209] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 540.993090][T10209] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 542.728094][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 543.961901][T10252] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 543.976272][T10252] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 544.558263][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 545.458485][T10284] lo: Caught tx_queue_len zero misconfig [ 545.532494][T10286] loop5: detected capacity change from 0 to 512 [ 545.604923][T10286] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1447: inode has both inline data and extents flags [ 545.654034][T10290] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 545.667357][T10290] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 545.718236][T10286] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1447: couldn't read orphan inode 15 (err -117) [ 545.766613][T10286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.852076][T10286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.891749][T10286] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 546.160060][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.360176][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 546.440829][T10301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.570096][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 546.784107][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 546.784180][ T30] audit: type=1326 audit(1763607863.884:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 546.820232][ T30] audit: type=1326 audit(1763607863.884:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 547.213032][T10319] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 547.226517][T10319] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 547.584239][T10325] loop3: detected capacity change from 0 to 512 [ 547.663754][T10325] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1463: inode has both inline data and extents flags [ 547.690300][T10325] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1463: couldn't read orphan inode 15 (err -117) [ 547.760972][T10325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.808892][T10325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.833054][T10325] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 548.143285][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.530925][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 548.624394][T10348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.811687][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 549.348203][T10363] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 549.364620][T10363] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 549.869473][T10376] loop2: detected capacity change from 0 to 512 [ 549.917482][T10376] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1479: inode has both inline data and extents flags [ 549.960377][T10376] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1479: couldn't read orphan inode 15 (err -117) [ 550.027232][T10376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.183086][T10376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.221224][T10376] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 550.444369][T10390] loop3: detected capacity change from 0 to 1024 [ 550.472443][T10390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.505406][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.568261][T10390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.888850][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 550.971809][T10400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.045319][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.088493][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 551.585050][T10413] loop0: detected capacity change from 0 to 128 [ 551.632960][ T30] audit: type=1326 audit(1763607868.734:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.691215][ T30] audit: type=1326 audit(1763607868.754:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.714191][ T30] audit: type=1326 audit(1763607868.754:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.742503][ T30] audit: type=1326 audit(1763607868.764:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.754099][T10413] syz.0.1491: attempt to access beyond end of device [ 551.754099][T10413] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 551.767113][ T30] audit: type=1326 audit(1763607868.764:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.802659][ T30] audit: type=1326 audit(1763607868.764:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.831459][ T30] audit: type=1326 audit(1763607868.764:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.855949][ T30] audit: type=1326 audit(1763607868.774:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 551.882598][T10413] syz.0.1491: attempt to access beyond end of device [ 551.882598][T10413] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 551.980082][T10413] syz.0.1491: attempt to access beyond end of device [ 551.980082][T10413] loop0: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 551.994091][T10413] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 552.006463][T10413] syz.0.1491: attempt to access beyond end of device [ 552.006463][T10413] loop0: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 552.020620][T10413] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 552.043798][ T30] audit: type=1326 audit(1763607869.004:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 552.066648][ T30] audit: type=1326 audit(1763607869.004:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 552.092496][T10421] loop3: detected capacity change from 0 to 512 [ 552.100541][T10413] syz.0.1491: attempt to access beyond end of device [ 552.100541][T10413] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 552.137315][T10413] syz.0.1491: attempt to access beyond end of device [ 552.137315][T10413] loop0: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 552.151452][T10413] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 552.160389][T10413] syz.0.1491: attempt to access beyond end of device [ 552.160389][T10413] loop0: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 552.174103][T10413] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 552.186884][T10413] syz.0.1491: attempt to access beyond end of device [ 552.186884][T10413] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 552.205833][T10413] syz.0.1491: attempt to access beyond end of device [ 552.205833][T10413] loop0: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 552.219971][T10413] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 552.236579][T10413] syz.0.1491: attempt to access beyond end of device [ 552.236579][T10413] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 552.252493][T10413] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 552.276161][T10421] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1495: inode has both inline data and extents flags [ 552.315627][T10421] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1495: couldn't read orphan inode 15 (err -117) [ 552.347434][T10421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.374612][T10413] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 552.383725][T10413] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 552.478300][T10421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 552.517737][T10421] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 552.805087][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.796563][T10451] loop9: detected capacity change from 0 to 7 [ 553.804172][T10451] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.812520][T10451] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.821155][T10451] ldm_validate_partition_table(): Disk read failed. [ 553.828217][T10451] Dev loop9: unable to read RDB block 0 [ 553.834903][T10451] loop9: unable to read partition table [ 553.922442][ T30] audit: type=1326 audit(1763607871.004:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 553.922584][T10452] 9pnet_fd: Insufficient options for proto=fd [ 553.951793][ T30] audit: type=1326 audit(1763607871.024:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 553.975809][ T30] audit: type=1326 audit(1763607871.024:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 553.999092][ T30] audit: type=1326 audit(1763607871.054:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 554.021804][ T30] audit: type=1326 audit(1763607871.054:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 554.103411][T10451] loop9: partition table beyond EOD, truncated [ 554.110297][T10451] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 554.110297][T10451] ) failed (rc=-5) [ 554.315841][T10455] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 554.331411][T10455] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 554.732854][T10460] loop5: detected capacity change from 0 to 512 [ 554.823721][T10460] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1510: inode has both inline data and extents flags [ 554.840403][T10460] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1510: couldn't read orphan inode 15 (err -117) [ 554.951588][T10460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.130816][T10460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 555.166146][T10460] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 555.468467][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.447981][T10495] tipc: Enabling of bearer rejected, already enabled [ 556.659133][T10497] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 556.672490][T10497] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 556.969255][T10501] loop3: detected capacity change from 0 to 512 [ 557.015530][T10501] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1525: inode has both inline data and extents flags [ 557.047531][T10501] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1525: couldn't read orphan inode 15 (err -117) [ 557.088799][T10501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.330871][T10501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 557.389243][T10501] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 557.634919][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.173204][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 558.173277][ T30] audit: type=1326 audit(1763607875.274:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.258775][ T30] audit: type=1326 audit(1763607875.304:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.287610][ T30] audit: type=1326 audit(1763607875.304:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.311976][ T30] audit: type=1326 audit(1763607875.304:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.334726][ T30] audit: type=1326 audit(1763607875.414:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.357330][ T30] audit: type=1326 audit(1763607875.414:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.387043][ T30] audit: type=1326 audit(1763607875.464:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.409661][ T30] audit: type=1326 audit(1763607875.464:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.432093][ T30] audit: type=1326 audit(1763607875.464:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.454626][ T30] audit: type=1326 audit(1763607875.464:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 558.880528][T10531] syzkaller0: entered promiscuous mode [ 558.894921][T10531] syzkaller0: entered allmulticast mode [ 558.995057][T10531] tipc: Started in network mode [ 559.000331][T10531] tipc: Node identity fe4db894c059, cluster identity 4711 [ 559.008851][T10531] tipc: Enabled bearer , priority 0 [ 559.055169][T10529] tipc: Resetting bearer [ 559.134296][T10529] tipc: Disabling bearer [ 559.276637][T10536] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 559.291009][T10536] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 559.758041][T10544] loop0: detected capacity change from 0 to 512 [ 559.843814][T10544] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1540: inode has both inline data and extents flags [ 559.900369][T10544] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1540: couldn't read orphan inode 15 (err -117) [ 559.928541][T10544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.062163][T10544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 560.103343][T10544] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 560.287827][T10552] loop3: detected capacity change from 0 to 512 [ 560.308482][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.383294][T10552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.397071][T10552] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.751415][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.062196][T10567] tipc: Enabling of bearer rejected, already enabled [ 561.230180][T10569] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 561.246177][T10569] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 562.183775][ T9108] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.294318][ T9108] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.423557][ T9108] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.549151][ C1] hrtimer: interrupt took 226985 ns [ 562.554146][ T9108] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.917007][ T9108] bridge_slave_1: left allmulticast mode [ 562.923054][ T9108] bridge_slave_1: left promiscuous mode [ 562.929747][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.970176][ T9108] bridge_slave_0: left allmulticast mode [ 562.976119][ T9108] bridge_slave_0: left promiscuous mode [ 562.991674][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.908178][ T9108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.958431][ T9108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.023050][ T9108] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 564.037498][T10602] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1564'. [ 564.053896][ T9108] bond0 (unregistering): Released all slaves [ 564.076238][ T9108] bond1 (unregistering): Released all slaves [ 564.193090][T10603] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 564.210034][T10603] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 564.385166][ T9108] tipc: Disabling bearer [ 564.431885][ T9108] tipc: Left network mode [ 564.573216][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.587955][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.622743][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.643019][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.655071][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.999549][ T9108] hsr_slave_0: left promiscuous mode [ 565.019621][ T9108] hsr_slave_1: left promiscuous mode [ 565.031427][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.039151][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.095882][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.105881][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.158520][ T9108] veth1_vlan: left promiscuous mode [ 565.164342][ T9108] veth0_vlan: left promiscuous mode [ 565.617514][T10627] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1574'. [ 566.604297][T10635] loop0: detected capacity change from 0 to 1024 [ 566.636189][T10635] EXT4-fs: Ignoring removed oldalloc option [ 566.642710][T10635] EXT4-fs: Ignoring removed bh option [ 566.733979][ T5799] Bluetooth: hci1: command tx timeout [ 566.832008][T10635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.090742][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 567.090823][ T30] audit: type=1804 audit(1763607884.194:1306): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1578" name="/newroot/361/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 567.204043][T10641] syzkaller0: entered promiscuous mode [ 567.209889][T10641] syzkaller0: entered allmulticast mode [ 567.236615][T10641] tipc: Enabled bearer , priority 0 [ 567.250405][T10640] tipc: Resetting bearer [ 567.272288][T10640] tipc: Disabling bearer [ 567.668313][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.836976][T10607] chnl_net:caif_netlink_parms(): no params data found [ 568.799251][ T5799] Bluetooth: hci1: command tx timeout [ 568.822137][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.830128][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.837824][T10607] bridge_slave_0: entered allmulticast mode [ 568.847339][T10607] bridge_slave_0: entered promiscuous mode [ 568.863308][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.871058][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.878736][T10607] bridge_slave_1: entered allmulticast mode [ 568.889836][T10607] bridge_slave_1: entered promiscuous mode [ 569.090476][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1586'. [ 569.133289][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.175495][T10665] tipc: Enabled bearer , priority 10 [ 569.192175][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.353709][T10607] team0: Port device team_slave_0 added [ 569.406330][T10607] team0: Port device team_slave_1 added [ 569.660783][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.668092][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.696377][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.793666][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.800963][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.827879][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.900926][T10676] syzkaller0: entered promiscuous mode [ 569.906601][T10676] syzkaller0: entered allmulticast mode [ 570.083800][T10675] tipc: Enabled bearer , priority 0 [ 570.165336][T10672] tipc: Resetting bearer [ 570.188389][T10672] tipc: Disabling bearer [ 570.243136][T10607] hsr_slave_0: entered promiscuous mode [ 570.255566][T10607] hsr_slave_1: entered promiscuous mode [ 570.882960][ T5799] Bluetooth: hci1: command tx timeout [ 571.129259][ T5857] tipc: Node number set to 3376076841 [ 571.799849][T10607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 571.843258][T10607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 571.897448][T10607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 571.954494][T10698] loop5: detected capacity change from 0 to 512 [ 571.955497][T10607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 571.983688][T10698] EXT4-fs: Ignoring removed orlov option [ 572.032667][T10698] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 572.061932][T10698] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1599: corrupted in-inode xattr: e_value size too large [ 572.119600][T10698] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1599: couldn't read orphan inode 15 (err -117) [ 572.158284][T10698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.478559][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.723734][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.897854][T10607] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.920794][T10713] loop9: detected capacity change from 0 to 128 [ 572.939750][T10711] syzkaller0: entered promiscuous mode [ 572.945508][T10711] syzkaller0: entered allmulticast mode [ 572.959942][ T5799] Bluetooth: hci1: command tx timeout [ 572.984652][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.992302][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.093586][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.101787][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.130677][T10711] tipc: Enabled bearer , priority 0 [ 573.270195][T10709] tipc: Resetting bearer [ 573.354255][T10709] tipc: Disabling bearer [ 573.376662][T10715] loop2: detected capacity change from 0 to 1024 [ 573.421683][T10715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.555826][T10715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.626466][ T30] audit: type=1800 audit(1763607890.714:1307): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1607" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 574.096514][ T7898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.591918][T10737] 9p: Unknown access argument : -22 [ 574.683467][T10607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.051199][T10607] veth0_vlan: entered promiscuous mode [ 575.104174][T10607] veth1_vlan: entered promiscuous mode [ 575.320012][T10607] veth0_macvtap: entered promiscuous mode [ 575.382360][T10607] veth1_macvtap: entered promiscuous mode [ 575.522073][T10607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.602203][T10607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.642995][ T9097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.655533][ T9097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.716524][ T9097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.743805][ T9097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.871912][T10757] loop9: detected capacity change from 0 to 512 [ 576.009931][T10757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.159369][T10757] EXT4-fs (loop9): orphan cleanup on readonly fs [ 576.390706][T10762] syzkaller0: entered promiscuous mode [ 576.398559][T10762] syzkaller0: entered allmulticast mode [ 576.451613][T10757] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1616: bg 0: block 248: padding at end of block bitmap is not set [ 576.513244][T10757] Quota error (device loop9): write_blk: dquota write failed [ 576.521353][T10757] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 576.531872][T10757] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.1616: Failed to acquire dquot type 1 [ 576.570207][T10762] tipc: Enabled bearer , priority 0 [ 576.619789][T10761] tipc: Resetting bearer [ 576.658240][T10757] EXT4-fs (loop9): 1 truncate cleaned up [ 576.716842][T10761] tipc: Disabling bearer [ 576.730109][T10757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.189306][ T30] audit: type=1326 audit(1763607895.274:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.212739][ T30] audit: type=1326 audit(1763607895.274:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.241059][ T30] audit: type=1326 audit(1763607895.274:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.265053][ T30] audit: type=1326 audit(1763607895.274:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.287633][ T30] audit: type=1326 audit(1763607895.274:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.420854][ T30] audit: type=1326 audit(1763607895.464:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.689990][ T30] audit: type=1326 audit(1763607895.784:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.730961][T10793] loop2: detected capacity change from 0 to 8192 [ 578.755008][ T30] audit: type=1326 audit(1763607895.814:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.777885][ T30] audit: type=1326 audit(1763607895.834:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.801299][ T30] audit: type=1326 audit(1763607895.844:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.823636][ T30] audit: type=1326 audit(1763607895.844:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.846192][ T30] audit: type=1326 audit(1763607895.844:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.882281][ T30] audit: type=1326 audit(1763607895.974:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.942449][ T30] audit: type=1326 audit(1763607896.034:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.969358][ T30] audit: type=1326 audit(1763607896.034:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 578.997765][ T30] audit: type=1326 audit(1763607896.034:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 579.613017][T10811] syzkaller0: entered promiscuous mode [ 579.618715][T10811] syzkaller0: entered allmulticast mode [ 579.732675][T10811] tipc: Enabled bearer , priority 0 [ 579.811112][T10810] tipc: Resetting bearer [ 579.844977][T10810] tipc: Disabling bearer [ 580.940977][ T9108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.949254][ T9108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.075158][ T9108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.083779][ T9108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.741358][T10848] tipc: New replicast peer: 255.255.255.255 [ 581.751103][T10848] tipc: Enabled bearer , priority 10 [ 582.602769][T10852] syzkaller0: entered promiscuous mode [ 582.608429][T10852] syzkaller0: entered allmulticast mode [ 582.693803][T10852] tipc: Started in network mode [ 582.702838][T10852] tipc: Node identity babd29bc23df, cluster identity 4711 [ 582.711476][T10852] tipc: Enabled bearer , priority 0 [ 582.815424][T10851] tipc: Resetting bearer [ 582.905784][T10851] tipc: Disabling bearer [ 583.019564][ T5857] tipc: Node number set to 1041545364 [ 585.122167][T10895] syzkaller0: entered promiscuous mode [ 585.127943][T10895] syzkaller0: entered allmulticast mode [ 585.206403][T10895] tipc: Enabled bearer , priority 0 [ 585.227132][T10893] tipc: Resetting bearer [ 585.247897][T10893] tipc: Disabling bearer [ 585.372527][T10898] warning: `syz.1.1664' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 586.157001][T10906] 9pnet_virtio: no channels available for device syz [ 586.280261][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 586.280333][ T30] audit: type=1326 audit(1763607903.384:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.389109][ T30] audit: type=1326 audit(1763607903.424:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.413077][ T30] audit: type=1326 audit(1763607903.424:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.440028][ T30] audit: type=1326 audit(1763607903.424:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.464044][ T30] audit: type=1326 audit(1763607903.424:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.487968][ T30] audit: type=1326 audit(1763607903.424:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.510694][ T30] audit: type=1326 audit(1763607903.424:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.5.1668" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 586.791941][T10912] pimreg: entered allmulticast mode [ 586.860949][T10915] pimreg: left allmulticast mode [ 587.833255][T10930] syzkaller0: entered promiscuous mode [ 587.839408][T10930] syzkaller0: entered allmulticast mode [ 587.921043][T10933] tipc: Enabled bearer , priority 0 [ 587.972978][T10929] tipc: Resetting bearer [ 588.028899][T10929] tipc: Disabling bearer [ 588.562492][T10941] smc: net device bond0 applied user defined pnetid SYZ2 [ 589.789750][T10957] 9pnet_virtio: no channels available for device syz [ 590.131214][T10961] ===================================================== [ 590.138744][T10961] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 590.147155][T10961] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 590.153219][T10961] do_xdp_generic+0xd52/0x1690 [ 590.158172][T10961] tun_get_user+0x45c0/0x6d70 [ 590.163121][T10961] tun_chr_write_iter+0x3e9/0x5c0 [ 590.168366][T10961] vfs_write+0xbe2/0x15d0 [ 590.172924][T10961] __ia32_sys_write+0x1f9/0x4d0 [ 590.177913][T10961] ia32_sys_call+0x35bc/0x4310 [ 590.183034][T10961] __do_fast_syscall_32+0xb0/0x150 [ 590.188333][T10961] do_fast_syscall_32+0x38/0x80 [ 590.193505][T10961] do_SYSENTER_32+0x1f/0x30 [ 590.198197][T10961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.204816][T10961] [ 590.207214][T10961] Uninit was stored to memory at: [ 590.212616][T10961] pskb_expand_head+0x310/0x1610 [ 590.217774][T10961] do_xdp_generic+0xa79/0x1690 [ 590.222818][T10961] tun_get_user+0x45c0/0x6d70 [ 590.227661][T10961] tun_chr_write_iter+0x3e9/0x5c0 [ 590.232966][T10961] vfs_write+0xbe2/0x15d0 [ 590.237426][T10961] __ia32_sys_write+0x1f9/0x4d0 [ 590.242515][T10961] ia32_sys_call+0x35bc/0x4310 [ 590.247465][T10961] __do_fast_syscall_32+0xb0/0x150 [ 590.252896][T10961] do_fast_syscall_32+0x38/0x80 [ 590.257953][T10961] do_SYSENTER_32+0x1f/0x30 [ 590.262757][T10961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.269365][T10961] [ 590.271767][T10961] Uninit was created at: [ 590.276331][T10961] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 590.283129][T10961] kmalloc_reserve+0x22f/0x4b0 [ 590.288064][T10961] __alloc_skb+0x347/0x7d0 [ 590.292747][T10961] alloc_skb_with_frags+0xc5/0xa60 [ 590.298036][T10961] sock_alloc_send_pskb+0xacc/0xc60 [ 590.303553][T10961] tun_get_user+0x1142/0x6d70 [ 590.308390][T10961] tun_chr_write_iter+0x3e9/0x5c0 [ 590.313676][T10961] vfs_write+0xbe2/0x15d0 [ 590.318126][T10961] __ia32_sys_write+0x1f9/0x4d0 [ 590.323215][T10961] ia32_sys_call+0x35bc/0x4310 [ 590.328164][T10961] __do_fast_syscall_32+0xb0/0x150 [ 590.333577][T10961] do_fast_syscall_32+0x38/0x80 [ 590.338619][T10961] do_SYSENTER_32+0x1f/0x30 [ 590.343405][T10961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.350012][T10961] [ 590.352446][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.0.1690 Tainted: G W syzkaller #0 PREEMPT(none) [ 590.363667][T10961] Tainted: [W]=WARN [ 590.367592][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.377881][T10961] ===================================================== [ 590.385110][T10961] Disabling lock debugging due to kernel taint [ 590.391520][T10961] Kernel panic - not syncing: kmsan.panic set ... [ 590.398235][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.0.1690 Tainted: G B W syzkaller #0 PREEMPT(none) [ 590.409367][T10961] Tainted: [B]=BAD_PAGE, [W]=WARN [ 590.414478][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.424659][T10961] Call Trace: [ 590.428131][T10961] [ 590.431149][T10961] __dump_stack+0x26/0x30 [ 590.435664][T10961] dump_stack_lvl+0x53/0x270 [ 590.440426][T10961] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.446408][T10961] dump_stack+0x1e/0x25 [ 590.450726][T10961] vpanic+0x435/0xd30 [ 590.454937][T10961] panic+0x15d/0x160 [ 590.459041][T10961] kmsan_report+0x31c/0x320 [ 590.463719][T10961] ? __msan_warning+0x1b/0x30 [ 590.468539][T10961] ? bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 590.474630][T10961] ? do_xdp_generic+0xd52/0x1690 [ 590.479727][T10961] ? tun_get_user+0x45c0/0x6d70 [ 590.484905][T10961] ? tun_chr_write_iter+0x3e9/0x5c0 [ 590.490248][T10961] ? vfs_write+0xbe2/0x15d0 [ 590.494883][T10961] ? __ia32_sys_write+0x1f9/0x4d0 [ 590.500029][T10961] ? ia32_sys_call+0x35bc/0x4310 [ 590.505390][T10961] ? __do_fast_syscall_32+0xb0/0x150 [ 590.510849][T10961] ? do_fast_syscall_32+0x38/0x80 [ 590.516029][T10961] ? do_SYSENTER_32+0x1f/0x30 [ 590.520873][T10961] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.527538][T10961] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.533508][T10961] ? ___bpf_prog_run+0xea65/0xeba0 [ 590.538788][T10961] ? __bpf_prog_run32+0xc2/0xf0 [ 590.543778][T10961] ? kmsan_get_metadata+0xfb/0x160 [ 590.549040][T10961] __msan_warning+0x1b/0x30 [ 590.553671][T10961] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 590.559628][T10961] do_xdp_generic+0xd52/0x1690 [ 590.564553][T10961] ? tun_get_user+0x40d1/0x6d70 [ 590.569643][T10961] ? filter_irq_stacks+0x49/0x190 [ 590.574862][T10961] ? kmsan_get_metadata+0xfb/0x160 [ 590.580220][T10961] ? tun_get_user+0x453f/0x6d70 [ 590.585305][T10961] tun_get_user+0x45c0/0x6d70 [ 590.590140][T10961] ? stack_depot_save_flags+0x35/0x7b0 [ 590.595736][T10961] ? kmsan_get_metadata+0xfb/0x160 [ 590.600985][T10961] ? kmsan_get_metadata+0xfb/0x160 [ 590.606320][T10961] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 590.612836][T10961] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 590.619142][T10961] tun_chr_write_iter+0x3e9/0x5c0 [ 590.624430][T10961] vfs_write+0xbe2/0x15d0 [ 590.628901][T10961] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 590.634622][T10961] __ia32_sys_write+0x1f9/0x4d0 [ 590.639618][T10961] ia32_sys_call+0x35bc/0x4310 [ 590.644669][T10961] __do_fast_syscall_32+0xb0/0x150 [ 590.649965][T10961] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 590.655950][T10961] do_fast_syscall_32+0x38/0x80 [ 590.660969][T10961] do_SYSENTER_32+0x1f/0x30 [ 590.665642][T10961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.672139][T10961] RIP: 0023:0xf706d539 [ 590.676303][T10961] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 590.697087][T10961] RSP: 002b:00000000f545d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 590.705641][T10961] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 590.713752][T10961] RDX: 000000000000fdef RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 590.721894][T10961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.730046][T10961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 590.738206][T10961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.746305][T10961] [ 590.749832][T10961] Kernel Offset: disabled [ 590.754205][T10961] Rebooting in 86400 seconds..