last executing test programs: 3.789573306s ago: executing program 1 (id=6036): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff7fff, 0x54d, 0x9, 0x6, 0x297d, 0x3]}, &(0x7f0000000080)=0x78) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x648000, 0x20, 0x28}, 0x18) symlink(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002f40)={'nr0\x00', {0x2, 0x4e22, @multicast1}}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x2010, r1, 0x8000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000500"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x15, 0x80000001, 0x1000, r1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xa}, 0x50) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="414601", @ANYRES64], 0x4) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xb7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) syz_io_uring_setup(0x3c58, &(0x7f00000002c0)={0x0, 0x10b21a, 0x20000, 0x8004, 0x18d}, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) 3.384868207s ago: executing program 1 (id=6040): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.373282148s ago: executing program 2 (id=6041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xa9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002b008000a00", @ANYRES32], 0x3c}}, 0x0) 3.332708671s ago: executing program 4 (id=6042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200), 0x0, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.327483881s ago: executing program 1 (id=6043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 3.238417858s ago: executing program 4 (id=6044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81", 0xcb}], 0x1}, 0x0) 3.20839786s ago: executing program 4 (id=6045): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 3.173255103s ago: executing program 2 (id=6046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 3.167468154s ago: executing program 1 (id=6047): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x5, 0x4, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0xe, &(0x7f0000000a00)}, 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") chdir(&(0x7f0000000200)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket(0x1f, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) dup(0xffffffffffffffff) 3.059376152s ago: executing program 2 (id=6049): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") fallocate(0xffffffffffffffff, 0x3, 0x2, 0x8000c62) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000140)=""/159, 0x9f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 3.026609074s ago: executing program 1 (id=6050): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xa9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002b008000a00", @ANYRES32], 0x3c}}, 0x0) 2.817974461s ago: executing program 1 (id=6052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a0001"], 0x110}}, 0x0) 2.615419907s ago: executing program 2 (id=6056): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff7fff, 0x54d, 0x9, 0x6, 0x297d, 0x3]}, &(0x7f0000000080)=0x78) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x648000, 0x20, 0x28}, 0x18) symlink(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002f40)={'nr0\x00', {0x2, 0x4e22, @multicast1}}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x2010, r1, 0x8000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000500"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x15, 0x80000001, 0x1000, r1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xa}, 0x50) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="414601", @ANYRES64], 0x4) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xb7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) syz_io_uring_setup(0x3c58, &(0x7f00000002c0)={0x0, 0x10b21a, 0x20000, 0x8004, 0x18d}, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) 2.602593848s ago: executing program 0 (id=6057): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.455416829s ago: executing program 2 (id=6058): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") fallocate(0xffffffffffffffff, 0x3, 0x2, 0x8000c62) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r6, &(0x7f0000000140)=""/159, 0x9f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.257914124s ago: executing program 4 (id=6059): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[]) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 2.162138932s ago: executing program 3 (id=6061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xa9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002b008000a00", @ANYRES32], 0x3c}}, 0x0) 1.991847805s ago: executing program 0 (id=6062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.942363639s ago: executing program 0 (id=6063): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = io_uring_setup(0x7082, &(0x7f0000000200)={0x0, 0x1ddf9, 0x80, 0x1, 0x33d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x40, 0x10, 0x4, 0x4, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x64, 0x0, 0xe5, 0x326938f67a4318bd, 0x0, @broadcast, @remote, {[@generic={0x1c, 0xb, "18feda20f1d71fe81c"}, @timestamp_prespec={0x44, 0xc, 0xe7, 0x3, 0xa, [{@loopback, 0xb0}]}, @noop, @lsrr={0x83, 0x2b, 0x89, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @private=0xa0100fd]}, @timestamp={0x44, 0x1c, 0x1d, 0x0, 0x1, [0xaf, 0xe70, 0xf9, 0x7, 0x4c, 0x3]}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x3, [{@rand_addr=0x64010102, 0x100}, {@broadcast, 0x80}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xb, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@usrjquota}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") close_range(r0, r0, 0x0) epoll_create1(0x80000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21) pread64(r8, &(0x7f00000002c0)=""/190, 0xbe, 0x200) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 1.719198227s ago: executing program 3 (id=6064): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="e3ffffffffffffff000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 1.696706278s ago: executing program 3 (id=6065): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x5, 0x4, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0xe, &(0x7f0000000a00)}, 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000200)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) dup(0xffffffffffffffff) 1.484588065s ago: executing program 3 (id=6066): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") fallocate(0xffffffffffffffff, 0x3, 0x2, 0x8000c62) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000140)=""/159, 0x9f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.381177002s ago: executing program 4 (id=6067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0026}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.355913595s ago: executing program 0 (id=6068): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="e3ffffffffffffff000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000280), &(0x7f0000000300)=@v3={0x3000000, [{0x5, 0x8}, {0x1, 0x5dc}]}, 0x18, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 1.181539538s ago: executing program 0 (id=6069): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 1.103032855s ago: executing program 2 (id=6070): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x20000ffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Ux\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xb9\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x7) dup(r3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) 768.89928ms ago: executing program 3 (id=6071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 702.152536ms ago: executing program 3 (id=6072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0026}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 419.109868ms ago: executing program 4 (id=6073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0026}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 0s ago: executing program 0 (id=6074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0026}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) kernel console output (not intermixed with test programs): ': attribute type 1 has an invalid length. [ 629.056792][T22942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5522'. [ 629.171545][T22955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.208733][T22955] EXT4-fs (loop3): 1 truncate cleaned up [ 629.287994][T22955] lo speed is unknown, defaulting to 1000 [ 629.350010][T22960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 629.385845][T22960] EXT4-fs (loop4): 1 truncate cleaned up [ 629.391804][T11045] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 629.408365][T22960] EXT4-fs mount: 28 callbacks suppressed [ 629.408386][T22960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.544880][T22960] lo speed is unknown, defaulting to 1000 [ 629.551727][T11080] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 629.551838][T11096] Bluetooth: hci2: command 0x1003 tx timeout [ 629.589110][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.659190][T22965] lo speed is unknown, defaulting to 1000 [ 629.692080][T22967] journal_path: Non-blockdev passed as './bus' [ 629.698289][T22967] EXT4-fs: error: could not find journal device path [ 629.805873][T22972] lo speed is unknown, defaulting to 1000 [ 629.821350][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.855536][T22975] journal_path: Non-blockdev passed as './bus' [ 629.861848][T22975] EXT4-fs: error: could not find journal device path [ 629.961275][T22977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 629.979599][T22979] EXT4-fs: Ignoring removed nobh option [ 629.985243][T22979] EXT4-fs: Ignoring removed bh option [ 629.999674][T22977] EXT4-fs (loop4): 1 truncate cleaned up [ 630.006899][T22977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.022444][T22979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.043622][T22979] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 630.051408][T22979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5533'. [ 630.073399][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.126184][T22977] lo speed is unknown, defaulting to 1000 [ 630.217181][T22993] lo speed is unknown, defaulting to 1000 [ 630.260234][T22997] journal_path: Non-blockdev passed as './bus' [ 630.266647][T22997] EXT4-fs: error: could not find journal device path [ 630.275689][T22999] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 630.298530][T22999] EXT4-fs (loop1): 1 truncate cleaned up [ 630.309074][T22999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.316137][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 630.316153][ T29] audit: type=1326 audit(1765919580.777:32746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 630.351431][ T29] audit: type=1326 audit(1765919580.777:32747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 630.401819][ T29] audit: type=1326 audit(1765919580.787:32748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.403508][T22999] lo speed is unknown, defaulting to 1000 [ 630.425568][ T29] audit: type=1326 audit(1765919580.787:32749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.455033][ T29] audit: type=1326 audit(1765919580.787:32750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 630.478508][ T29] audit: type=1326 audit(1765919580.787:32751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 630.501977][ T29] audit: type=1326 audit(1765919580.787:32752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.525604][ T29] audit: type=1326 audit(1765919580.787:32753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.549245][ T29] audit: type=1326 audit(1765919580.787:32754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.573511][ T29] audit: type=1326 audit(1765919580.787:32755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 630.647327][T23006] syzkaller0: entered promiscuous mode [ 630.653056][T23006] syzkaller0: entered allmulticast mode [ 630.655056][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.681179][T23008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 630.714832][T23008] EXT4-fs (loop3): 1 truncate cleaned up [ 630.734272][T23008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.838030][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.033079][ T8582] Alternate GPT is invalid, using primary GPT. [ 631.039641][ T8582] loop4: p2 p3 p7 [ 631.064099][T23032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5546'. [ 631.114726][T23033] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 631.272721][T23017] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 631.283496][T23008] lo speed is unknown, defaulting to 1000 [ 631.315948][T23024] syzkaller0: entered promiscuous mode [ 631.321463][T23024] syzkaller0: entered allmulticast mode [ 631.336640][ T3003] Alternate GPT is invalid, using primary GPT. [ 631.343106][ T3003] loop4: p2 p3 p7 [ 631.359899][T23044] syzkaller0: entered promiscuous mode [ 631.365484][T23044] syzkaller0: entered allmulticast mode [ 631.436909][T23046] set_capacity_and_notify: 13 callbacks suppressed [ 631.436939][T23046] loop2: detected capacity change from 0 to 512 [ 631.513390][T23046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 631.551282][T23046] EXT4-fs (loop2): 1 truncate cleaned up [ 631.606328][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.615843][T23046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.664543][ T4296] Bluetooth: hci0: Frame reassembly failed (-84) [ 631.710512][T23053] bridge: RTM_NEWNEIGH with invalid ether address [ 631.747261][T23057] syzkaller0: entered promiscuous mode [ 631.752871][T23057] syzkaller0: entered allmulticast mode [ 631.766289][T23046] lo speed is unknown, defaulting to 1000 [ 631.797612][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5549'. [ 631.804180][T23062] loop4: detected capacity change from 0 to 512 [ 631.842440][T23062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 631.860329][T23062] EXT4-fs (loop4): 1 truncate cleaned up [ 631.874309][T23062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.915661][T23068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5557'. [ 631.920520][T23070] loop1: detected capacity change from 0 to 512 [ 631.948231][T23070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 631.967480][T23070] EXT4-fs (loop1): 1 truncate cleaned up [ 631.975392][T23070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.998534][T23073] syzkaller0: entered promiscuous mode [ 632.004190][T23073] syzkaller0: entered allmulticast mode [ 632.016614][T23062] lo speed is unknown, defaulting to 1000 [ 632.057682][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.084714][T23070] lo speed is unknown, defaulting to 1000 [ 632.146580][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 632.155582][T23084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5563'. [ 632.203340][T23084] bridge9: entered promiscuous mode [ 632.208716][T23084] bridge9: entered allmulticast mode [ 632.290913][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.536290][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.560352][T23098] lo speed is unknown, defaulting to 1000 [ 632.600471][T23096] lo speed is unknown, defaulting to 1000 [ 632.618651][T23100] loop4: detected capacity change from 0 to 512 [ 632.651884][T23100] journal_path: Non-blockdev passed as './bus' [ 632.658173][T23100] EXT4-fs: error: could not find journal device path [ 633.009433][T23111] loop1: detected capacity change from 0 to 2048 [ 633.231349][T23111] Alternate GPT is invalid, using primary GPT. [ 633.237791][T23111] loop1: p2 p3 p7 [ 633.315328][ T4295] 0: reclassify loop, rule prio 0, protocol 800 [ 633.631115][T23119] lo speed is unknown, defaulting to 1000 [ 633.711800][T11096] Bluetooth: hci0: command 0x1003 tx timeout [ 633.717925][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 634.070729][T23132] loop1: detected capacity change from 0 to 512 [ 634.088350][T23132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 634.111208][T23132] EXT4-fs (loop1): 1 truncate cleaned up [ 634.122670][T23132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.234068][T23132] lo speed is unknown, defaulting to 1000 [ 634.274338][T23146] loop4: detected capacity change from 0 to 2048 [ 634.300628][ T4284] Bluetooth: hci0: Frame reassembly failed (-84) [ 634.313719][T23146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.327546][T23146] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.5579: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 634.457020][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.551060][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5583'. [ 634.910993][T23167] macvtap2: entered allmulticast mode [ 634.945604][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 634.954871][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 634.977039][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 635.004876][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 635.014167][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 635.027237][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 635.059284][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 635.091986][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.264998][T23185] loop2: detected capacity change from 0 to 2048 [ 635.274337][T23187] loop3: detected capacity change from 0 to 512 [ 635.319346][ T8582] Alternate GPT is invalid, using primary GPT. [ 635.326089][ T8582] loop2: p2 p3 p7 [ 635.336114][T23187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 635.346341][T23190] bridge6: entered promiscuous mode [ 635.351567][T23190] bridge6: entered allmulticast mode [ 635.419585][T23187] EXT4-fs (loop3): 1 truncate cleaned up [ 635.434390][T23192] lo speed is unknown, defaulting to 1000 [ 635.435510][T23185] Alternate GPT is invalid, using primary GPT. [ 635.446627][T23185] loop2: p2 p3 p7 [ 635.478770][T23194] loop4: detected capacity change from 0 to 512 [ 635.485965][T23187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.509372][T23194] journal_path: Non-blockdev passed as './bus' [ 635.515659][T23194] EXT4-fs: error: could not find journal device path [ 635.544356][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 635.544374][ T29] audit: type=1326 audit(1765919842.010:33041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.618754][T23187] lo speed is unknown, defaulting to 1000 [ 635.641136][ T29] audit: type=1326 audit(1765919842.010:33042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.664956][ T29] audit: type=1326 audit(1765919842.010:33043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe6cc86f783 code=0x7ffc0000 [ 635.688551][ T29] audit: type=1326 audit(1765919842.010:33044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe6cc86f783 code=0x7ffc0000 [ 635.712136][ T29] audit: type=1326 audit(1765919842.010:33045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.735936][ T29] audit: type=1326 audit(1765919842.010:33046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.759702][ T29] audit: type=1326 audit(1765919842.010:33047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.783382][ T29] audit: type=1326 audit(1765919842.010:33048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.807774][ T29] audit: type=1326 audit(1765919842.010:33049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.831535][ T29] audit: type=1326 audit(1765919842.010:33050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.3.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 635.879111][ T4295] Bluetooth: hci1: Frame reassembly failed (-84) [ 635.918065][ T3003] Alternate GPT is invalid, using primary GPT. [ 635.924558][ T3003] loop2: p2 p3 p7 [ 636.056336][ T3003] Alternate GPT is invalid, using primary GPT. [ 636.062776][ T3003] loop1: p2 p3 p7 [ 636.088790][T23201] Alternate GPT is invalid, using primary GPT. [ 636.095376][T23201] loop1: p2 p3 p7 [ 636.153664][ T3003] Alternate GPT is invalid, using primary GPT. [ 636.160175][ T3003] loop1: p2 p3 p7 [ 636.223086][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 636.238251][ T8581] udevd[8581]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 636.250223][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 636.262312][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.298192][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 636.298256][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 636.309461][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 636.325035][T23201] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 636.339311][T23211] veth0_to_batadv: entered promiscuous mode [ 636.351182][T23211] macvtap1: entered allmulticast mode [ 636.351759][T11045] Bluetooth: hci0: command 0x1003 tx timeout [ 636.356771][T23211] veth0_to_batadv: entered allmulticast mode [ 636.370677][T11096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 636.379556][T23211] veth0_to_batadv: left allmulticast mode [ 636.385587][T23211] veth0_to_batadv: left promiscuous mode [ 636.675804][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 636.678322][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 636.689460][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 636.716153][T23230] set_capacity_and_notify: 1 callbacks suppressed [ 636.716208][T23230] loop3: detected capacity change from 0 to 2048 [ 636.776462][T17961] Alternate GPT is invalid, using primary GPT. [ 636.783095][T17961] loop3: p2 p3 p7 [ 636.812202][T23230] Alternate GPT is invalid, using primary GPT. [ 636.818647][T23230] loop3: p2 p3 p7 [ 636.873688][T23240] bridge5: entered promiscuous mode [ 636.879055][T23240] bridge5: entered allmulticast mode [ 637.035647][T23250] loop2: detected capacity change from 0 to 1024 [ 637.046383][T23250] EXT4-fs: Ignoring removed nobh option [ 637.052155][T23250] EXT4-fs: Ignoring removed bh option [ 637.087569][T23250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.341208][T23250] netlink: 'syz.2.5613': attribute type 1 has an invalid length. [ 637.349164][T23250] __nla_validate_parse: 15 callbacks suppressed [ 637.349179][T23250] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5613'. [ 637.366860][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.376114][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.413000][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.434240][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.483336][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.492486][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.517252][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.609926][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.619154][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.635280][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 637.706242][T23300] veth0_to_batadv: entered promiscuous mode [ 637.712431][T23300] macvtap1: entered allmulticast mode [ 637.717932][T23300] veth0_to_batadv: entered allmulticast mode [ 637.742894][T23300] veth0_to_batadv: left allmulticast mode [ 637.749010][T23300] veth0_to_batadv: left promiscuous mode [ 637.893048][T23315] loop2: detected capacity change from 0 to 512 [ 637.901528][T23315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 637.938508][T23315] EXT4-fs (loop2): 1 truncate cleaned up [ 637.950071][T23315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.962950][T11096] Bluetooth: hci1: command 0x1003 tx timeout [ 637.981691][T11080] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 638.012794][T23324] netlink: 'syz.3.5627': attribute type 21 has an invalid length. [ 638.050970][T23315] lo speed is unknown, defaulting to 1000 [ 638.269182][ T4329] Bluetooth: hci0: Frame reassembly failed (-84) [ 638.349718][T23350] veth0_to_batadv: entered promiscuous mode [ 638.356077][T23350] macvtap1: entered allmulticast mode [ 638.361741][T23350] veth0_to_batadv: entered allmulticast mode [ 638.369528][T23350] veth0_to_batadv: left allmulticast mode [ 638.375634][T23350] veth0_to_batadv: left promiscuous mode [ 638.432634][ T4284] 0: reclassify loop, rule prio 0, protocol 800 [ 638.445217][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.537036][T23364] lo speed is unknown, defaulting to 1000 [ 638.594740][T23369] loop2: detected capacity change from 0 to 512 [ 638.611201][T23369] journal_path: Non-blockdev passed as './bus' [ 638.617579][T23369] EXT4-fs: error: could not find journal device path [ 639.145259][T23375] loop3: detected capacity change from 0 to 512 [ 639.156646][T23375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 639.190373][T23375] EXT4-fs (loop3): 1 truncate cleaned up [ 639.196653][T23375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.397024][T23381] lo speed is unknown, defaulting to 1000 [ 639.779154][T23390] loop4: detected capacity change from 0 to 1024 [ 639.793384][T23390] EXT4-fs: Ignoring removed nobh option [ 639.799027][T23390] EXT4-fs: Ignoring removed bh option [ 639.843403][T23390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.860316][T23390] netlink: 'syz.4.5647': attribute type 1 has an invalid length. [ 639.879630][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.966986][T23397] loop4: detected capacity change from 0 to 512 [ 639.998556][T23397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 640.001502][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.030177][T23397] EXT4-fs (loop4): 1 truncate cleaned up [ 640.037220][T23397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.149886][T23396] lo speed is unknown, defaulting to 1000 [ 640.250603][T23412] netlink: 'syz.0.5657': attribute type 1 has an invalid length. [ 640.260919][T23410] loop3: detected capacity change from 0 to 2048 [ 640.293427][T23410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.349054][T23410] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.5654: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 640.361046][T23424] loop2: detected capacity change from 0 to 512 [ 640.365695][T11096] Bluetooth: hci0: command 0x1003 tx timeout [ 640.378582][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 640.393534][T23424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 640.413624][T23424] EXT4-fs (loop2): 1 truncate cleaned up [ 640.419965][T23424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.531857][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.583998][T23424] lo speed is unknown, defaulting to 1000 [ 640.663679][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.727641][T23443] loop4: detected capacity change from 0 to 512 [ 640.769990][T23443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 640.948507][T23447] netlink: 'syz.0.5668': attribute type 21 has an invalid length. [ 641.082777][T23443] EXT4-fs (loop4): 1 truncate cleaned up [ 641.104335][T23443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.201014][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 641.201120][ T29] audit: type=1326 audit(1765920103.623:33329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 641.231179][ T29] audit: type=1326 audit(1765920103.623:33330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 641.254945][ T29] audit: type=1326 audit(1765920103.623:33331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.278656][ T29] audit: type=1326 audit(1765920103.623:33332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.302373][ T29] audit: type=1326 audit(1765920103.623:33333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f032ff9f783 code=0x7ffc0000 [ 641.326050][ T29] audit: type=1326 audit(1765920103.623:33334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f032ff9f783 code=0x7ffc0000 [ 641.349658][ T29] audit: type=1326 audit(1765920103.623:33335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.373411][ T29] audit: type=1326 audit(1765920103.623:33336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.397300][ T29] audit: type=1326 audit(1765920103.623:33337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.421008][ T29] audit: type=1326 audit(1765920103.623:33338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.4.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 641.465228][T23455] lo speed is unknown, defaulting to 1000 [ 641.514232][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.628588][T23466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 641.649287][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.658745][T23466] EXT4-fs (loop2): 1 truncate cleaned up [ 641.665192][T23466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.693174][T23471] lo speed is unknown, defaulting to 1000 [ 641.739069][T23474] set_capacity_and_notify: 1 callbacks suppressed [ 641.739085][T23474] loop1: detected capacity change from 0 to 512 [ 641.776078][T23474] journal_path: Non-blockdev passed as './bus' [ 641.782362][T23474] EXT4-fs: error: could not find journal device path [ 641.785023][T23466] lo speed is unknown, defaulting to 1000 [ 641.905608][T23487] bridge: RTM_NEWNEIGH with invalid ether address [ 641.931708][T23483] loop4: detected capacity change from 0 to 2048 [ 641.945245][T23483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.962393][T23483] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.5680: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 642.099772][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.122457][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.472322][T23509] macvtap2: entered allmulticast mode [ 642.599842][T11045] Bluetooth: hci1: sending frame failed (-49) [ 642.606124][T11096] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 642.666295][T23519] syzkaller0: entered promiscuous mode [ 642.672056][T23519] syzkaller0: entered allmulticast mode [ 642.911375][T11045] Bluetooth: hci1: sending frame failed (-49) [ 642.917695][T11096] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 643.234843][T23535] bridge: RTM_NEWNEIGH with invalid ether address [ 643.509255][T23541] __nla_validate_parse: 52 callbacks suppressed [ 643.509283][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.524731][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.533834][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.551485][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.560601][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.603027][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.631685][T11096] Bluetooth: hci0: command 0x1003 tx timeout [ 643.633137][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.690956][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.698411][T23555] loop1: detected capacity change from 0 to 2048 [ 643.700014][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.726106][ T8582] Alternate GPT is invalid, using primary GPT. [ 643.732564][ T8582] loop1: p2 p3 p7 [ 643.740665][T23556] loop3: detected capacity change from 0 to 2048 [ 643.745093][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 643.818053][T23555] Alternate GPT is invalid, using primary GPT. [ 643.824561][T23555] loop1: p2 p3 p7 [ 643.849388][T23556] Alternate GPT is invalid, using primary GPT. [ 643.855851][T23556] loop3: p2 p3 p7 [ 643.897810][ T4292] Bluetooth: hci0: Frame reassembly failed (-84) [ 643.915078][T23564] syzkaller0: entered promiscuous mode [ 643.915812][T23555] netlink: 'syz.1.5701': attribute type 1 has an invalid length. [ 643.920688][T23564] syzkaller0: entered allmulticast mode [ 643.943112][ T3003] Alternate GPT is invalid, using primary GPT. [ 643.949564][ T3003] loop3: p2 p3 p7 [ 643.993063][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 644.009240][T23569] loop1: detected capacity change from 0 to 512 [ 644.035053][T23569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 644.047835][T23571] lo speed is unknown, defaulting to 1000 [ 644.091617][T23569] EXT4-fs (loop1): 1 truncate cleaned up [ 644.121280][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 644.126343][ T8581] udevd[8581]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 644.146508][T17961] udevd[17961]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 644.152061][T23569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.192698][ T4277] 0: reclassify loop, rule prio 0, protocol 800 [ 644.273816][T23569] lo speed is unknown, defaulting to 1000 [ 644.516855][T23585] syzkaller0: entered promiscuous mode [ 644.522459][T23585] syzkaller0: entered allmulticast mode [ 644.538880][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.168540][T23598] netlink: 'syz.3.5716': attribute type 1 has an invalid length. [ 645.176438][T23598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5716'. [ 645.271380][T23595] veth0_to_batadv: entered promiscuous mode [ 645.277704][T23595] macvtap1: entered allmulticast mode [ 645.283322][T23595] veth0_to_batadv: entered allmulticast mode [ 645.290992][T23595] veth0_to_batadv: left allmulticast mode [ 645.296827][T23595] veth0_to_batadv: left promiscuous mode [ 645.416557][T23609] loop3: detected capacity change from 0 to 2048 [ 645.492215][T23611] loop2: detected capacity change from 0 to 2048 [ 645.508293][ T8582] Alternate GPT is invalid, using primary GPT. [ 645.514753][ T8582] loop3: p2 p3 p7 [ 645.525494][T23611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.543515][T23609] Alternate GPT is invalid, using primary GPT. [ 645.543570][T23611] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5720: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 645.567027][T23609] loop3: p2 p3 p7 [ 645.573150][T23617] loop1: detected capacity change from 0 to 512 [ 645.580994][T23617] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 645.601542][T23617] EXT4-fs (loop1): 1 truncate cleaned up [ 645.609310][T23609] netlink: 'syz.3.5719': attribute type 1 has an invalid length. [ 645.616445][T23617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.672077][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.688868][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 645.692898][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 645.700042][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 645.732486][T23617] lo speed is unknown, defaulting to 1000 [ 645.748988][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 645.761071][ T8581] udevd[8581]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 645.764399][T23620] lo speed is unknown, defaulting to 1000 [ 645.772829][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 645.919692][T23629] loop3: detected capacity change from 0 to 512 [ 645.927305][T23629] EXT4-fs: Ignoring removed oldalloc option [ 645.951765][T11045] Bluetooth: hci0: command 0x1003 tx timeout [ 645.954790][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 645.966879][T23629] EXT4-fs (loop3): 1 truncate cleaned up [ 645.988129][T23629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.038379][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.123622][T23634] netlink: 'syz.1.5727': attribute type 1 has an invalid length. [ 646.157074][T23636] loop1: detected capacity change from 0 to 512 [ 646.167675][T23636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 646.185664][T23636] EXT4-fs (loop1): 1 truncate cleaned up [ 646.192232][T23636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.206633][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 646.206651][ T29] audit: type=1326 audit(1765921132.672:33569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.236648][ T29] audit: type=1326 audit(1765921132.682:33570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.260343][ T29] audit: type=1326 audit(1765921132.682:33571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.262346][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.284104][ T29] audit: type=1326 audit(1765921132.682:33572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 646.293365][T11080] Bluetooth: hci1: command 0x1003 tx timeout [ 646.316670][ T29] audit: type=1326 audit(1765921132.682:33573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 646.332339][T11096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 646.346325][ T29] audit: type=1326 audit(1765921132.682:33574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.376215][ T29] audit: type=1326 audit(1765921132.682:33575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.399890][ T29] audit: type=1326 audit(1765921132.682:33576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.399924][ T29] audit: type=1326 audit(1765921132.682:33577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.401709][ T29] audit: type=1326 audit(1765921132.852:33578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 646.464779][T23636] lo speed is unknown, defaulting to 1000 [ 646.572498][T23644] macvtap2: entered allmulticast mode [ 646.610626][T23646] EXT4-fs: Ignoring removed nobh option [ 646.616378][T23646] EXT4-fs: Ignoring removed bh option [ 646.644814][T23646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.665935][T23646] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 646.754362][T23652] set_capacity_and_notify: 1 callbacks suppressed [ 646.754437][T23652] loop2: detected capacity change from 0 to 2048 [ 646.778999][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.804159][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.824047][ T8582] Alternate GPT is invalid, using primary GPT. [ 646.830414][ T8582] loop2: p2 p3 p7 [ 646.981764][T23652] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 647.107692][T23652] netlink: 'syz.2.5733': attribute type 1 has an invalid length. [ 647.269723][T23666] 0: reclassify loop, rule prio 0, protocol 800 [ 647.356668][T23669] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 647.407747][T23673] lo speed is unknown, defaulting to 1000 [ 647.455275][T23681] loop2: detected capacity change from 0 to 512 [ 647.474474][T23681] journal_path: Non-blockdev passed as './bus' [ 647.480690][T23681] EXT4-fs: error: could not find journal device path [ 647.691978][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 647.702942][T23686] veth0_to_batadv: entered promiscuous mode [ 647.716626][T23686] macvtap1: entered allmulticast mode [ 647.722173][T23686] veth0_to_batadv: entered allmulticast mode [ 647.733992][T23686] veth0_to_batadv: left allmulticast mode [ 647.739947][T23686] veth0_to_batadv: left promiscuous mode [ 647.833000][T23696] loop4: detected capacity change from 0 to 512 [ 647.849160][T23696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 647.887606][T23696] EXT4-fs (loop4): 1 truncate cleaned up [ 647.893870][T23696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.975660][T23698] lo speed is unknown, defaulting to 1000 [ 648.048872][T23705] netlink: 'syz.0.5748': attribute type 1 has an invalid length. [ 648.059342][T23707] loop1: detected capacity change from 0 to 512 [ 648.088485][T23707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 648.103624][T23707] EXT4-fs (loop1): 1 truncate cleaned up [ 648.130578][T23707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.166356][T23716] 0: reclassify loop, rule prio 0, protocol 800 [ 648.215538][T23707] lo speed is unknown, defaulting to 1000 [ 648.377652][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.398352][T23725] syzkaller0: entered promiscuous mode [ 648.403942][T23725] syzkaller0: entered allmulticast mode [ 648.705237][T23731] netlink: 'syz.1.5756': attribute type 1 has an invalid length. [ 648.713122][T23731] __nla_validate_parse: 24 callbacks suppressed [ 648.713138][T23731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5756'. [ 648.857741][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.884971][T23735] ªªªªª!: renamed from bond_slave_1 (while UP) [ 648.926505][T23740] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5760'. [ 649.003713][T23745] lo speed is unknown, defaulting to 1000 [ 649.035293][T23746] loop1: detected capacity change from 0 to 2048 [ 649.064152][T23747] loop3: detected capacity change from 0 to 512 [ 649.086521][T23747] journal_path: Non-blockdev passed as './bus' [ 649.092826][T23747] EXT4-fs: error: could not find journal device path [ 649.159202][ T8582] Alternate GPT is invalid, using primary GPT. [ 649.165645][ T8582] loop1: p2 p3 p7 [ 649.220176][T23746] Alternate GPT is invalid, using primary GPT. [ 649.226683][T23746] loop1: p2 p3 p7 [ 649.296048][T23753] lo speed is unknown, defaulting to 1000 [ 649.635751][ T3003] Alternate GPT is invalid, using primary GPT. [ 649.636422][T23762] netlink: 'syz.3.5766': attribute type 21 has an invalid length. [ 649.642307][ T3003] loop1: p2 p3 p7 [ 649.649939][T23762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5766'. [ 649.725476][T11080] Bluetooth: hci0: command 0x1003 tx timeout [ 649.726185][T11096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 649.887602][T23764] loop3: detected capacity change from 0 to 512 [ 649.896719][T23764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 649.928198][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5770'. [ 649.938899][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 649.951948][ T4284] 0: reclassify loop, rule prio 0, protocol 800 [ 649.960480][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 649.973342][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 649.990252][T23764] EXT4-fs (loop3): 1 truncate cleaned up [ 649.996659][T23764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.064427][T23777] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5772'. [ 650.116752][T23764] lo speed is unknown, defaulting to 1000 [ 650.218231][T23783] loop4: detected capacity change from 0 to 1024 [ 650.225280][T23783] EXT4-fs: Ignoring removed nobh option [ 650.230903][T23783] EXT4-fs: Ignoring removed bh option [ 650.507621][T23783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.601878][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5777'. [ 650.611007][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5777'. [ 650.625563][T23791] lo speed is unknown, defaulting to 1000 [ 650.675953][T23798] loop2: detected capacity change from 0 to 512 [ 650.713291][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5777'. [ 650.739894][T23783] netlink: 'syz.4.5774': attribute type 1 has an invalid length. [ 650.747916][T23783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5774'. [ 650.766388][T23798] journal_path: Non-blockdev passed as './bus' [ 650.772803][T23798] EXT4-fs: error: could not find journal device path [ 650.853466][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5777'. [ 650.877474][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.907369][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.948845][T23809] loop3: detected capacity change from 0 to 512 [ 650.987437][T23809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 650.999434][T23809] EXT4-fs (loop3): 1 truncate cleaned up [ 651.029166][T23809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.067337][T23819] netlink: 'syz.4.5778': attribute type 21 has an invalid length. [ 651.208566][T23809] lo speed is unknown, defaulting to 1000 [ 651.376839][T23854] EXT4-fs: Ignoring removed nobh option [ 651.382500][T23854] EXT4-fs: Ignoring removed bh option [ 651.387268][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 651.387284][ T29] audit: type=1326 audit(1765921649.855:33764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.418995][ T29] audit: type=1326 audit(1765921649.855:33765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.443034][ T29] audit: type=1326 audit(1765921649.855:33766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb068bf783 code=0x7ffc0000 [ 651.466587][ T29] audit: type=1326 audit(1765921649.855:33767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb068bf783 code=0x7ffc0000 [ 651.490762][ T29] audit: type=1326 audit(1765921649.855:33768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.514503][ T29] audit: type=1326 audit(1765921649.855:33769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.538491][ T29] audit: type=1326 audit(1765921649.855:33770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.562451][ T29] audit: type=1326 audit(1765921649.855:33771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23857 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcb068bf749 code=0x7ffc0000 [ 651.599182][T23863] lo speed is unknown, defaulting to 1000 [ 651.625703][ T29] audit: type=1326 audit(1765921650.005:33772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23808 comm="syz.3.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 651.649552][ T29] audit: type=1326 audit(1765921650.005:33773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23808 comm="syz.3.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cc86f749 code=0x7ffc0000 [ 651.726387][T23854] netlink: 'syz.2.5788': attribute type 1 has an invalid length. [ 651.824900][ T4296] Bluetooth: hci0: Frame reassembly failed (-84) [ 652.068697][T23886] ªªªªª!: renamed from bond_slave_1 (while UP) [ 652.254392][T23889] bridge3: entered promiscuous mode [ 652.259785][T23889] bridge3: entered allmulticast mode [ 652.371938][T23891] set_capacity_and_notify: 1 callbacks suppressed [ 652.371959][T23891] loop2: detected capacity change from 0 to 2048 [ 652.397932][T23898] netlink: 'syz.1.5798': attribute type 21 has an invalid length. [ 652.458815][T23901] loop1: detected capacity change from 0 to 1024 [ 652.474305][ T8582] Alternate GPT is invalid, using primary GPT. [ 652.480695][ T8582] loop2: p2 p3 p7 [ 652.490979][T23891] Alternate GPT is invalid, using primary GPT. [ 652.497429][T23891] loop2: p2 p3 p7 [ 652.516565][T23901] EXT4-fs: Ignoring removed nobh option [ 652.522330][T23901] EXT4-fs: Ignoring removed bh option [ 652.606330][ T3003] Alternate GPT is invalid, using primary GPT. [ 652.612828][ T3003] loop2: p2 p3 p7 [ 652.618697][T23901] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 652.639279][T23891] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 652.653303][T23914] loop3: detected capacity change from 0 to 512 [ 652.673313][T23914] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 652.693161][T23914] EXT4-fs (loop3): 1 truncate cleaned up [ 652.708496][T23918] bridge10: entered promiscuous mode [ 652.714135][T23918] bridge10: entered allmulticast mode [ 652.906821][T23914] lo speed is unknown, defaulting to 1000 [ 653.104344][T23939] loop2: detected capacity change from 0 to 1024 [ 653.111177][T23939] EXT4-fs: Ignoring removed nobh option [ 653.116936][T23939] EXT4-fs: Ignoring removed bh option [ 653.136518][T23939] netlink: 'syz.2.5805': attribute type 1 has an invalid length. [ 653.199124][T23937] lo speed is unknown, defaulting to 1000 [ 653.276853][T23951] netlink: 'syz.2.5809': attribute type 21 has an invalid length. [ 653.350934][T23953] loop2: detected capacity change from 0 to 512 [ 653.376499][T23953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 653.404948][T23953] EXT4-fs (loop2): 1 truncate cleaned up [ 653.524179][T23953] lo speed is unknown, defaulting to 1000 [ 653.871715][T11096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 654.064465][T23967] __nla_validate_parse: 17 callbacks suppressed [ 654.064553][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5813'. [ 654.080066][T23967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5813'. [ 654.117805][T23967] bridge6: entered promiscuous mode [ 654.123466][T23967] bridge6: entered allmulticast mode [ 654.184284][T23973] 0: reclassify loop, rule prio 0, protocol 800 [ 654.203065][T23973] ªªªªª!: renamed from bond_slave_1 (while UP) [ 654.325554][T23977] loop3: detected capacity change from 0 to 2048 [ 654.334154][T23979] loop2: detected capacity change from 0 to 1024 [ 654.349403][T23979] EXT4-fs: Ignoring removed nobh option [ 654.355248][T23979] EXT4-fs: Ignoring removed bh option [ 654.390328][T23976] lo speed is unknown, defaulting to 1000 [ 654.445987][ T8582] Alternate GPT is invalid, using primary GPT. [ 654.452719][ T8582] loop3: p2 p3 p7 [ 654.538060][T23979] netlink: 'syz.2.5818': attribute type 1 has an invalid length. [ 654.546076][T23979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5818'. [ 654.578742][T23977] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 654.675558][T23990] loop2: detected capacity change from 0 to 1024 [ 654.694651][ T3003] Alternate GPT is invalid, using primary GPT. [ 654.701082][ T3003] loop3: p2 p3 p7 [ 654.716037][T23990] EXT4-fs: Ignoring removed nobh option [ 654.721708][T23990] EXT4-fs: Ignoring removed bh option [ 654.791508][T23990] validate_nla: 1 callbacks suppressed [ 654.791525][T23990] netlink: 'syz.2.5822': attribute type 1 has an invalid length. [ 654.804940][T23990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5822'. [ 655.053241][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 655.072606][ T31] 0: reclassify loop, rule prio 0, protocol 800 [ 655.089488][T24010] lo speed is unknown, defaulting to 1000 [ 655.114400][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 655.121249][T24015] loop1: detected capacity change from 0 to 512 [ 655.129735][T24015] journal_path: Non-blockdev passed as './bus' [ 655.136090][T24015] EXT4-fs: error: could not find journal device path [ 655.192853][T24023] loop2: detected capacity change from 0 to 2048 [ 655.223937][T24023] Alternate GPT is invalid, using primary GPT. [ 655.230314][T24023] loop2: p2 p3 p7 [ 655.261153][T24023] netlink: 'syz.2.5831': attribute type 1 has an invalid length. [ 655.487632][T24032] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5834: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 655.570156][T24038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 655.614845][T24038] EXT4-fs (loop4): 1 truncate cleaned up [ 655.685717][T24045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 655.718196][T24046] lo speed is unknown, defaulting to 1000 [ 655.772801][T24045] EXT4-fs (loop2): 1 truncate cleaned up [ 655.868259][T24045] lo speed is unknown, defaulting to 1000 [ 656.072089][T24055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5840'. [ 656.081142][T24055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5840'. [ 656.094376][T24055] bridge7: entered promiscuous mode [ 656.099681][T24055] bridge7: entered allmulticast mode [ 656.121525][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5841'. [ 656.130616][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5841'. [ 656.139977][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5841'. [ 656.162389][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5841'. [ 656.235207][ T4285] Bluetooth: hci2: Frame reassembly failed (-84) [ 656.274670][ T8582] Alternate GPT is invalid, using primary GPT. [ 656.281000][ T8582] loop2: p2 p3 p7 [ 656.291241][T24066] Alternate GPT is invalid, using primary GPT. [ 656.297784][T24066] loop2: p2 p3 p7 [ 656.306592][T24066] netlink: 'syz.2.5843': attribute type 1 has an invalid length. [ 656.352820][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 656.360501][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 656.363419][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 656.386415][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 656.392959][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 656.399176][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 656.557693][T24075] bridge7: entered promiscuous mode [ 656.563136][T24075] bridge7: entered allmulticast mode [ 656.597312][T24077] EXT4-fs: Ignoring removed nobh option [ 656.603053][T24077] EXT4-fs: Ignoring removed bh option [ 656.617753][T24077] netlink: 'syz.4.5849': attribute type 1 has an invalid length. [ 656.756362][T24083] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.5851: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 657.071669][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 657.077764][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 657.151664][T11096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 657.223817][ T8582] Alternate GPT is invalid, using primary GPT. [ 657.230460][ T8582] loop2: p2 p3 p7 [ 657.240715][T24099] Alternate GPT is invalid, using primary GPT. [ 657.247327][T24099] loop2: p2 p3 p7 [ 657.263850][T24099] netlink: 'syz.2.5855': attribute type 1 has an invalid length. [ 657.313509][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 657.336600][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 657.346984][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 657.432071][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 657.497600][T24106] set_capacity_and_notify: 7 callbacks suppressed [ 657.497621][T24106] loop2: detected capacity change from 0 to 2048 [ 657.553960][ T8582] Alternate GPT is invalid, using primary GPT. [ 657.560468][ T8582] loop2: p2 p3 p7 [ 657.573011][T24106] Alternate GPT is invalid, using primary GPT. [ 657.579515][T24106] loop2: p2 p3 p7 [ 657.706906][T24108] lo speed is unknown, defaulting to 1000 [ 657.758690][T24109] loop3: detected capacity change from 0 to 512 [ 657.775868][T24109] journal_path: Non-blockdev passed as './bus' [ 657.782169][T24109] EXT4-fs: error: could not find journal device path [ 657.914562][T24116] bridge8: entered promiscuous mode [ 657.919925][T24116] bridge8: entered allmulticast mode [ 658.005907][T24120] veth0_to_batadv: entered promiscuous mode [ 658.013203][T24120] macvtap1: entered allmulticast mode [ 658.018696][T24120] veth0_to_batadv: entered allmulticast mode [ 658.027471][T24120] veth0_to_batadv: left allmulticast mode [ 658.033294][T24120] veth0_to_batadv: left promiscuous mode [ 658.173605][T24126] loop3: detected capacity change from 0 to 2048 [ 658.253618][ T8582] Alternate GPT is invalid, using primary GPT. [ 658.260089][ T8582] loop3: p2 p3 p7 [ 658.271672][T11045] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 658.271848][T11080] Bluetooth: hci2: command 0x1003 tx timeout [ 658.297306][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.357288][T24126] Alternate GPT is invalid, using primary GPT. [ 658.363709][T24126] loop3: p2 p3 p7 [ 658.387654][T24126] netlink: 'syz.3.5864': attribute type 1 has an invalid length. [ 658.397731][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.459397][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.490935][T24131] lo speed is unknown, defaulting to 1000 [ 658.523646][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.626539][ T31] bridge_slave_1: left allmulticast mode [ 658.632327][ T31] bridge_slave_1: left promiscuous mode [ 658.638062][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.653537][ T31] bridge_slave_0: left allmulticast mode [ 658.659299][ T31] bridge_slave_0: left promiscuous mode [ 658.665156][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.824599][T24161] loop2: detected capacity change from 0 to 512 [ 658.882281][T24161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 658.927017][T24161] EXT4-fs (loop2): 1 truncate cleaned up [ 658.957794][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 658.957813][ T29] audit: type=1326 audit(1765922169.420:33964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.102819][T24169] loop3: detected capacity change from 0 to 1024 [ 659.143291][T24169] EXT4-fs: Ignoring removed nobh option [ 659.148912][T24169] EXT4-fs: Ignoring removed bh option [ 659.243516][T19620] Bluetooth: hci0: Frame reassembly failed (-84) [ 659.283302][T24182] netlink: 'syz.3.5873': attribute type 1 has an invalid length. [ 659.291120][T24182] __nla_validate_parse: 13 callbacks suppressed [ 659.291138][T24182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5873'. [ 659.347770][ T29] audit: type=1326 audit(1765922169.420:33965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.371488][ T29] audit: type=1326 audit(1765922169.420:33966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.395202][ T29] audit: type=1326 audit(1765922169.460:33967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f235f26f783 code=0x7ffc0000 [ 659.418703][ T29] audit: type=1326 audit(1765922169.460:33968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f235f26f783 code=0x7ffc0000 [ 659.442196][ T29] audit: type=1326 audit(1765922169.460:33969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.466040][ T29] audit: type=1326 audit(1765922169.460:33970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.489918][ T29] audit: type=1326 audit(1765922169.470:33971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.513585][ T29] audit: type=1326 audit(1765922169.470:33972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.537487][ T29] audit: type=1326 audit(1765922169.470:33973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235f26f749 code=0x7ffc0000 [ 659.604047][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.614001][ T31] bond0 (unregistering): (slave ªªªªª!): Releasing backup interface [ 659.623047][ T31] bond0 (unregistering): Released all slaves [ 659.656959][ T31] tipc: Left network mode [ 659.663996][T24161] lo speed is unknown, defaulting to 1000 [ 659.669920][T14247] EXT4-fs unmount: 27 callbacks suppressed [ 659.669957][T14247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.731157][T24131] chnl_net:caif_netlink_parms(): no params data found [ 659.827622][T24196] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5877'. [ 659.853830][T24131] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.860934][T24131] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.883373][T24203] loop1: detected capacity change from 0 to 512 [ 659.892992][T24203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 659.893089][T24131] bridge_slave_0: entered allmulticast mode [ 659.907818][ T4295] Bluetooth: hci1: Frame reassembly failed (-84) [ 659.909634][T24131] bridge_slave_0: entered promiscuous mode [ 659.933705][T24203] EXT4-fs (loop1): 1 truncate cleaned up [ 659.942059][ T31] hsr_slave_0: left promiscuous mode [ 659.947898][T24203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.960653][ T31] hsr_slave_1: left promiscuous mode [ 659.969949][ T31] veth1_macvtap: left promiscuous mode [ 659.975744][ T31] veth0_macvtap: left promiscuous mode [ 659.981331][ T31] veth1_vlan: left promiscuous mode [ 659.986818][ T31] veth0_vlan: left promiscuous mode [ 660.052580][ T31] team0 (unregistering): Port device team_slave_1 removed [ 660.063249][ T31] team0 (unregistering): Port device team_slave_0 removed [ 660.093302][T24131] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.100525][T24131] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.107918][T24131] bridge_slave_1: entered allmulticast mode [ 660.114597][T24131] bridge_slave_1: entered promiscuous mode [ 660.162652][T24131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.171944][T24203] lo speed is unknown, defaulting to 1000 [ 660.173329][T24131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.220756][T24131] team0: Port device team_slave_0 added [ 660.227599][T24131] team0: Port device team_slave_1 added [ 660.248752][T24131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.255886][T24131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.281904][T24131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.296949][T24131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.304073][T24131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.330284][T24131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.377746][T24131] hsr_slave_0: entered promiscuous mode [ 660.384364][T24131] hsr_slave_1: entered promiscuous mode [ 660.422973][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.480486][T24228] loop2: detected capacity change from 0 to 512 [ 660.500413][T24228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 660.518413][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.527837][T24228] EXT4-fs (loop2): 1 truncate cleaned up [ 660.534830][T24228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.661029][T24228] lo speed is unknown, defaulting to 1000 [ 660.689105][T24242] loop1: detected capacity change from 0 to 2048 [ 660.733686][ T8582] Alternate GPT is invalid, using primary GPT. [ 660.740218][ T8582] loop1: p2 p3 p7 [ 660.769578][T24242] Alternate GPT is invalid, using primary GPT. [ 660.775977][T24242] loop1: p2 p3 p7 [ 660.814646][T24131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.855418][T24131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.888757][T24242] netlink: 'syz.1.5882': attribute type 1 has an invalid length. [ 660.903147][T24131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.918012][T24131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 661.057940][T24131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.089359][T24131] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.108542][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.115709][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.132684][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.139813][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.212652][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.232427][T11045] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 661.313249][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.322426][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.339531][T24292] loop4: detected capacity change from 0 to 1024 [ 661.343317][T24131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.346631][T24292] EXT4-fs: Ignoring removed nobh option [ 661.358673][T24292] EXT4-fs: Ignoring removed bh option [ 661.364924][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.382963][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.392098][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.402820][T24292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.415812][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.429313][T24292] netlink: 'syz.4.5884': attribute type 1 has an invalid length. [ 661.437114][T24292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5884'. [ 661.460649][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'. [ 661.503234][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.503662][T24302] loop2: detected capacity change from 0 to 1024 [ 661.523225][T24302] EXT4-fs: Ignoring removed nobh option [ 661.528845][T24302] EXT4-fs: Ignoring removed bh option [ 661.547820][T24302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.594544][T24302] netlink: 'syz.2.5885': attribute type 1 has an invalid length. [ 661.597902][T24131] veth0_vlan: entered promiscuous mode [ 661.619173][T24131] veth1_vlan: entered promiscuous mode [ 661.638860][T24131] veth0_macvtap: entered promiscuous mode [ 661.646747][T24131] veth1_macvtap: entered promiscuous mode [ 661.657914][T24131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.667896][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.679108][T24131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.690747][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.739860][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.761398][T24313] macvtap2: entered allmulticast mode [ 661.784991][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.802168][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.814529][T24320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 661.839520][T24320] EXT4-fs (loop2): 1 truncate cleaned up [ 661.846473][T24320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.981728][T11080] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 661.987976][T11045] Bluetooth: hci1: command 0x1003 tx timeout [ 662.011388][T24328] lo speed is unknown, defaulting to 1000 [ 662.051151][T24332] netlink: 'syz.1.5892': attribute type 21 has an invalid length. [ 662.126843][ T4296] Bluetooth: hci0: Frame reassembly failed (-84) [ 662.169449][T24331] lo speed is unknown, defaulting to 1000 [ 662.315185][T13600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.558260][ T4284] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.577132][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 662.589297][T24339] lo speed is unknown, defaulting to 1000 [ 662.616873][ T4284] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.637416][T24357] set_capacity_and_notify: 1 callbacks suppressed [ 662.637508][T24357] loop4: detected capacity change from 0 to 1024 [ 662.652638][T24357] EXT4-fs: Ignoring removed nobh option [ 662.658406][T24357] EXT4-fs: Ignoring removed bh option [ 662.675939][T24357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.698693][ T4284] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.724378][T24357] netlink: 'syz.4.5897': attribute type 1 has an invalid length. [ 662.735521][ T4284] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.758773][T24339] chnl_net:caif_netlink_parms(): no params data found [ 662.759688][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.796403][T24363] lo speed is unknown, defaulting to 1000 [ 662.855857][T24339] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.862996][T24339] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.888169][T24339] bridge_slave_0: entered allmulticast mode [ 662.895289][T24370] loop4: detected capacity change from 0 to 2048 [ 662.901067][T24339] bridge_slave_0: entered promiscuous mode [ 662.925373][T24339] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.932550][T24339] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.941800][T24339] bridge_slave_1: entered allmulticast mode [ 662.948537][T24339] bridge_slave_1: entered promiscuous mode [ 662.962511][T24370] Alternate GPT is invalid, using primary GPT. [ 662.968918][T24370] loop4: p2 p3 p7 [ 663.005753][T24339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.015237][ T4284] batadv1: left allmulticast mode [ 663.020305][ T4284] batadv1: left promiscuous mode [ 663.025523][ T4284] bridge0: port 3(batadv1) entered disabled state [ 663.044359][ T4284] bridge_slave_1: left allmulticast mode [ 663.050059][ T4284] bridge_slave_1: left promiscuous mode [ 663.055806][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.065559][ T4284] bridge_slave_0: left allmulticast mode [ 663.071233][ T4284] bridge_slave_0: left promiscuous mode [ 663.076917][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.544482][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.555081][ T4284] bond0 (unregistering): (slave ªªªªª!): Releasing backup interface [ 663.574102][ T4284] bond0 (unregistering): Released all slaves [ 663.590231][T24339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.634835][T24339] team0: Port device team_slave_0 added [ 663.644650][ T4284] tipc: Left network mode [ 663.645832][T24339] team0: Port device team_slave_1 added [ 663.691310][T24339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.698457][T24339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.724743][T24339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.751855][T24339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.758866][T24339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.785137][T24339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.802561][ T4284] hsr_slave_0: left promiscuous mode [ 663.809317][ T4284] hsr_slave_1: left promiscuous mode [ 663.818618][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.826415][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.836339][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.844092][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.852152][T24372] loop4: detected capacity change from 0 to 512 [ 663.862478][ T4284] veth1_macvtap: left promiscuous mode [ 663.862916][T24372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 663.868038][ T4284] veth0_macvtap: left promiscuous mode [ 663.884596][ T4284] veth1_vlan: left promiscuous mode [ 663.889561][T24372] EXT4-fs (loop4): 1 truncate cleaned up [ 663.889998][ T4284] veth0_vlan: left promiscuous mode [ 663.896113][T24372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.970970][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 663.980752][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 663.988759][ T4318] smc: removing ib device syz! [ 663.996110][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 663.996128][ T29] audit: type=1326 audit(1765922430.462:34103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.026047][ T29] audit: type=1326 audit(1765922430.462:34104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.050407][ T29] audit: type=1326 audit(1765922430.462:34105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.074155][ T29] audit: type=1326 audit(1765922430.482:34106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.098132][ T29] audit: type=1326 audit(1765922430.482:34107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.122244][ T29] audit: type=1326 audit(1765922430.482:34108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.145977][ T29] audit: type=1326 audit(1765922430.482:34109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.169689][ T29] audit: type=1326 audit(1765922430.482:34110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.193489][ T29] audit: type=1326 audit(1765922430.482:34111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.217744][ T29] audit: type=1326 audit(1765922430.482:34112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032ff9f749 code=0x7ffc0000 [ 664.243520][T11096] Bluetooth: hci0: command 0x1003 tx timeout [ 664.249957][T11045] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 664.270358][T24339] hsr_slave_0: entered promiscuous mode [ 664.292160][T24339] hsr_slave_1: entered promiscuous mode [ 664.306144][T24339] debugfs: 'hsr0' already exists in 'hsr' [ 664.311995][T24339] Cannot create hsr debugfs directory [ 664.379565][T24372] lo speed is unknown, defaulting to 1000 [ 664.423391][T24393] loop1: detected capacity change from 0 to 2048 [ 664.479065][T24393] Alternate GPT is invalid, using primary GPT. [ 664.485584][T24393] loop1: p2 p3 p7 [ 664.569199][T24393] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 664.574438][T24397] lo speed is unknown, defaulting to 1000 [ 664.591751][T11045] Bluetooth: hci1: command 0x1003 tx timeout [ 664.597949][T11080] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 664.734920][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.940776][T24339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.952477][T24339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.963830][T24339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.977043][T24339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.045447][T24416] lo speed is unknown, defaulting to 1000 [ 665.187781][T24339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.217436][T24339] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.268381][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.275647][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.332506][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.339640][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.378843][T24339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.474098][T24339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.519492][T24464] loop1: detected capacity change from 0 to 1024 [ 665.542357][T24464] EXT4-fs: Ignoring removed nobh option [ 665.548031][T24464] EXT4-fs: Ignoring removed bh option [ 665.573674][T24464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.585322][T24339] veth0_vlan: entered promiscuous mode [ 665.595294][T24339] veth1_vlan: entered promiscuous mode [ 665.604129][T24464] netlink: 'syz.1.5908': attribute type 1 has an invalid length. [ 665.609082][T24339] veth0_macvtap: entered promiscuous mode [ 665.612183][T24464] __nla_validate_parse: 14 callbacks suppressed [ 665.612198][T24464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5908'. [ 665.619607][T24339] veth1_macvtap: entered promiscuous mode [ 665.645351][T24339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.654509][T24339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.777411][ T4318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.835529][ T4318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.865393][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.895236][ T4318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.940231][ T4318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.040664][T24485] loop4: detected capacity change from 0 to 1024 [ 666.047690][T24485] EXT4-fs: Ignoring removed nobh option [ 666.053455][T24485] EXT4-fs: Ignoring removed bh option [ 666.077809][T24485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.090699][T19620] Bluetooth: hci1: Frame reassembly failed (-84) [ 666.144210][T24485] netlink: 'syz.4.5912': attribute type 1 has an invalid length. [ 666.152169][T24485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5912'. [ 666.185426][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.215042][T24502] loop2: detected capacity change from 0 to 2048 [ 666.242964][T24502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.307518][T19620] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.333072][T24496] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5913: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 666.381398][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.390475][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.400748][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.421384][T19620] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.434469][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.455033][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.464495][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.470110][T24511] lo speed is unknown, defaulting to 1000 [ 666.474018][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.492232][T19620] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.517572][T24543] loop2: detected capacity change from 0 to 512 [ 666.535355][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.544412][T24528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 666.554105][T24543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 666.566984][T19620] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.577158][T24543] EXT4-fs (loop2): 1 truncate cleaned up [ 666.584739][T24543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.650909][T19620] bridge_slave_1: left allmulticast mode [ 666.656733][T19620] bridge_slave_1: left promiscuous mode [ 666.662550][T19620] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.672712][T19620] bridge_slave_0: left allmulticast mode [ 666.678417][T19620] bridge_slave_0: left promiscuous mode [ 666.684150][T19620] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.696257][T19620] bond_slave_0: left promiscuous mode [ 666.701785][T19620] ªªªªª!: left promiscuous mode [ 666.987913][T19620] bond1 (unregistering): (slave macvlan6): Releasing active interface [ 667.010605][T19620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.020863][T19620] bond0 (unregistering): (slave ªªªªª!): Releasing backup interface [ 667.029919][T19620] bond0 (unregistering): Released all slaves [ 667.038768][T19620] bond1 (unregistering): Released all slaves [ 667.061383][T24511] chnl_net:caif_netlink_parms(): no params data found [ 667.085197][T24543] lo speed is unknown, defaulting to 1000 [ 667.102551][T19620] tipc: Left network mode [ 667.126708][T19620] hsr_slave_0: left promiscuous mode [ 667.133154][T19620] hsr_slave_1: left promiscuous mode [ 667.138785][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.146351][T19620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.155599][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.163127][T19620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.174111][T19620] veth0_to_batadv: left allmulticast mode [ 667.179884][T19620] veth0_to_batadv: left promiscuous mode [ 667.185700][T19620] veth1_macvtap: left promiscuous mode [ 667.191184][T19620] veth0_macvtap: left promiscuous mode [ 667.196858][T19620] veth1_vlan: left promiscuous mode [ 667.202282][T19620] veth0_vlan: left promiscuous mode [ 667.265332][T19620] team0 (unregistering): Port device team_slave_1 removed [ 667.275437][T19620] team0 (unregistering): Port device team_slave_0 removed [ 667.307510][T24511] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.314687][T24511] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.322188][T24511] bridge_slave_0: entered allmulticast mode [ 667.328861][T24511] bridge_slave_0: entered promiscuous mode [ 667.357626][T24564] syzkaller0: entered promiscuous mode [ 667.363223][T24564] syzkaller0: entered allmulticast mode [ 667.375849][T24511] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.383099][T24511] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.391112][T24511] bridge_slave_1: entered allmulticast mode [ 667.398521][T24511] bridge_slave_1: entered promiscuous mode [ 667.432966][T24511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.459255][T24511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.477381][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.539679][T24511] team0: Port device team_slave_0 added [ 667.542590][T24590] loop2: detected capacity change from 0 to 1024 [ 667.552751][T11080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 667.572154][T24511] team0: Port device team_slave_1 added [ 667.578727][T24590] EXT4-fs: Ignoring removed nobh option [ 667.584488][T24590] EXT4-fs: Ignoring removed bh option [ 667.625049][T24590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.640507][T24511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.647640][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.673620][T24511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.687297][T24511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.694358][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.720420][T24511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.739904][T24590] netlink: 'syz.2.5921': attribute type 1 has an invalid length. [ 667.761387][T24511] hsr_slave_0: entered promiscuous mode [ 667.767753][T24511] hsr_slave_1: entered promiscuous mode [ 667.768084][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.774065][T24511] debugfs: 'hsr0' already exists in 'hsr' [ 667.788351][T24511] Cannot create hsr debugfs directory [ 668.020277][T24614] loop2: detected capacity change from 0 to 2048 [ 668.037486][T24614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.057741][T24614] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5926: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 668.094462][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.111975][T11096] Bluetooth: hci1: command 0x1003 tx timeout [ 668.118074][T11045] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 668.275953][T24663] macvtap2: entered allmulticast mode [ 668.371329][T24511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.395123][T24511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.411039][T24511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.422586][T24660] lo speed is unknown, defaulting to 1000 [ 668.422602][T24511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.496889][T24695] loop2: detected capacity change from 0 to 2048 [ 668.524155][T24695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.545357][T24511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.552711][T24695] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5933: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 668.572452][T24511] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.583070][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.590159][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.616776][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.624053][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.767431][T24721] veth0_to_batadv: entered promiscuous mode [ 668.773946][T24721] macvtap1: entered allmulticast mode [ 668.779359][T24721] veth0_to_batadv: entered allmulticast mode [ 668.789891][T24721] veth0_to_batadv: left allmulticast mode [ 668.795710][T24721] veth0_to_batadv: left promiscuous mode [ 668.820412][T24711] loop1: detected capacity change from 0 to 2048 [ 668.837447][T24511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.879492][T24711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.916117][T24739] netlink: 'syz.0.5940': attribute type 1 has an invalid length. [ 668.920848][T24711] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.5936: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 668.986636][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.059190][T24511] veth0_vlan: entered promiscuous mode [ 669.091098][T24511] veth1_vlan: entered promiscuous mode [ 669.125132][T24511] veth0_macvtap: entered promiscuous mode [ 669.139298][T24511] veth1_macvtap: entered promiscuous mode [ 669.167668][T24511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.177080][T24511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.190980][T19620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.211508][T19620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.234406][T24777] syzkaller0: entered promiscuous mode [ 669.240031][T24777] syzkaller0: entered allmulticast mode [ 669.264476][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.278201][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.292731][T24762] veth0_to_batadv: entered promiscuous mode [ 669.302043][T24762] macvtap1: entered allmulticast mode [ 669.307477][T24762] veth0_to_batadv: entered allmulticast mode [ 669.327259][T24784] loop2: detected capacity change from 0 to 512 [ 669.336338][T24762] veth0_to_batadv: left allmulticast mode [ 669.342224][T24762] veth0_to_batadv: left promiscuous mode [ 669.351153][T24784] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 669.366563][T24784] EXT4-fs (loop2): 1 truncate cleaned up [ 669.372868][T24784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.385582][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.395553][T24790] loop3: detected capacity change from 0 to 2048 [ 669.420693][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 669.420712][ T29] audit: type=1326 audit(1765922435.882:34245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.450718][ T29] audit: type=1326 audit(1765922435.882:34246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.474689][ T29] audit: type=1326 audit(1765922435.882:34247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9a66f783 code=0x7ffc0000 [ 669.498374][ T29] audit: type=1326 audit(1765922435.882:34248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9a66f783 code=0x7ffc0000 [ 669.521858][ T29] audit: type=1326 audit(1765922435.882:34249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.545460][ T29] audit: type=1326 audit(1765922435.882:34250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.569319][ T29] audit: type=1326 audit(1765922435.882:34251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.593101][ T29] audit: type=1326 audit(1765922435.882:34252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.622857][T24794] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 669.630961][ T29] audit: type=1326 audit(1765922435.932:34253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.634026][ T8582] Alternate GPT is invalid, using primary GPT. [ 669.654658][ T29] audit: type=1326 audit(1765922435.932:34254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9a66f749 code=0x7ffc0000 [ 669.661059][ T8582] loop3: p2 p3 p7 [ 669.698164][T24784] lo speed is unknown, defaulting to 1000 [ 669.729893][T24790] Alternate GPT is invalid, using primary GPT. [ 669.736347][T24790] loop3: p2 p3 p7 [ 669.774265][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 669.774294][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 669.785524][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 669.812703][T24803] netlink: 'syz.0.5951': attribute type 1 has an invalid length. [ 669.819199][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 669.842330][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 669.859146][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 669.880215][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.906204][T24807] veth0_to_batadv: entered promiscuous mode [ 669.915987][T24807] macvtap1: entered allmulticast mode [ 669.921422][T24807] veth0_to_batadv: entered allmulticast mode [ 669.929571][T24807] veth0_to_batadv: left allmulticast mode [ 669.935372][T24807] veth0_to_batadv: left promiscuous mode [ 670.040170][T24809] loop2: detected capacity change from 0 to 2048 [ 670.042136][T24822] loop3: detected capacity change from 0 to 2048 [ 670.063907][T24809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.077082][T24824] lo speed is unknown, defaulting to 1000 [ 670.077637][T24809] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5953: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 670.100164][T24822] Alternate GPT is invalid, using primary GPT. [ 670.106483][T24822] loop3: p2 p3 p7 [ 670.135224][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.177695][T24822] netlink: 'syz.3.5958': attribute type 1 has an invalid length. [ 670.214752][T24830] loop2: detected capacity change from 0 to 2048 [ 670.245240][ T9569] Alternate GPT is invalid, using primary GPT. [ 670.251767][ T9569] loop2: p2 p3 p7 [ 670.265633][T24834] loop3: detected capacity change from 0 to 2048 [ 670.279163][T24830] Alternate GPT is invalid, using primary GPT. [ 670.285675][T24830] loop2: p2 p3 p7 [ 670.302499][T24830] netlink: 'syz.2.5961': attribute type 1 has an invalid length. [ 670.321211][ T8582] Alternate GPT is invalid, using primary GPT. [ 670.327664][ T8582] loop3: p2 p3 p7 [ 670.357903][T24834] Alternate GPT is invalid, using primary GPT. [ 670.364551][T24834] loop3: p2 p3 p7 [ 670.400765][T24835] netlink: 'syz.0.5962': attribute type 1 has an invalid length. [ 670.409470][T24834] netlink: 'syz.3.5963': attribute type 1 has an invalid length. [ 670.438871][T17961] udevd[17961]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 670.439682][T24837] loop2: detected capacity change from 0 to 512 [ 670.492526][T24837] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 670.504649][ T8581] udevd[8581]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 670.515515][ T8593] udevd[8593]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 670.553158][T24837] EXT4-fs (loop2): 1 truncate cleaned up [ 670.576269][T24837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.600899][ T8581] udevd[8581]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 670.685934][T24837] lo speed is unknown, defaulting to 1000 [ 670.699560][T24847] EXT4-fs: Ignoring removed nobh option [ 670.705345][T24847] EXT4-fs: Ignoring removed bh option [ 670.734412][T24847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.777891][T24847] netlink: 'syz.3.5967': attribute type 1 has an invalid length. [ 670.785927][T24847] __nla_validate_parse: 27 callbacks suppressed [ 670.785943][T24847] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5967'. [ 670.812586][T24511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.990116][T24853] veth0_to_batadv: entered promiscuous mode [ 670.996742][T24853] macvtap1: entered allmulticast mode [ 671.002197][T24853] veth0_to_batadv: entered allmulticast mode [ 671.010695][T24853] veth0_to_batadv: left allmulticast mode [ 671.016576][T24853] veth0_to_batadv: left promiscuous mode [ 671.028580][T24339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.113937][ T422] Bluetooth: hci1: Frame reassembly failed (-84) [ 671.127473][T24862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 671.140222][T24862] EXT4-fs (loop3): 1 truncate cleaned up [ 671.147219][T24862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.172212][T24866] netlink: 'syz.0.5974': attribute type 1 has an invalid length. [ 671.180158][T24866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5974'. [ 671.206354][ T4284] Bluetooth: hci2: Frame reassembly failed (-84) [ 671.232382][T24862] lo speed is unknown, defaulting to 1000 [ 671.387791][T24511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.434076][T24874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.448894][T24874] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.5976: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 671.519580][T24511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.543895][T24878] syzkaller0: entered promiscuous mode [ 671.549473][T24878] syzkaller0: entered allmulticast mode [ 671.791689][T11045] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 671.791942][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 671.867313][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5978'. [ 671.898672][T24882] EXT4-fs: Ignoring removed nobh option [ 671.904456][T24882] EXT4-fs: Ignoring removed bh option [ 671.914281][T24882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.930743][T24882] netlink: 'syz.4.5979': attribute type 1 has an invalid length. [ 671.938601][T24882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5979'. [ 671.958330][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.984308][T24886] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 671.995747][T24886] EXT4-fs (loop4): 1 truncate cleaned up [ 672.002363][T24886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.082688][T24886] lo speed is unknown, defaulting to 1000 [ 672.266140][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.364194][T24899] EXT4-fs: Ignoring removed nobh option [ 672.370124][T24899] EXT4-fs: Ignoring removed bh option [ 672.391823][T24899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.433048][T24896] macvtap2: entered allmulticast mode [ 672.463173][T24899] netlink: 'syz.4.5985': attribute type 1 has an invalid length. [ 672.470968][T24899] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5985'. [ 672.507734][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.572498][T24911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 672.587459][T24911] EXT4-fs (loop4): 1 truncate cleaned up [ 672.596086][T24911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.613385][T24904] veth0_to_batadv: entered promiscuous mode [ 672.620254][T24904] macvtap1: entered allmulticast mode [ 672.625713][T24904] veth0_to_batadv: entered allmulticast mode [ 672.634325][T24904] veth0_to_batadv: left allmulticast mode [ 672.640068][T24904] veth0_to_batadv: left promiscuous mode [ 672.683735][T24911] lo speed is unknown, defaulting to 1000 [ 673.068699][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.143514][T24927] set_capacity_and_notify: 7 callbacks suppressed [ 673.143548][T24927] loop4: detected capacity change from 0 to 2048 [ 673.156497][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 673.163414][T11096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 673.183649][T24927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.199688][T24927] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.5993: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 673.231736][T11080] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 673.269770][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.500074][T24940] loop4: detected capacity change from 0 to 1024 [ 673.508843][T24940] EXT4-fs: Ignoring removed nobh option [ 673.514688][T24940] EXT4-fs: Ignoring removed bh option [ 673.577022][T24940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.600101][T24940] netlink: 'syz.4.5998': attribute type 1 has an invalid length. [ 673.607985][T24940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5998'. [ 673.647676][T24952] loop3: detected capacity change from 0 to 1024 [ 673.655709][T24952] EXT4-fs: Ignoring removed nobh option [ 673.659769][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.661306][T24952] EXT4-fs: Ignoring removed bh option [ 673.697606][T24952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.731737][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6003'. [ 673.740835][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6003'. [ 673.755640][T24947] macvtap2: entered allmulticast mode [ 673.757072][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6003'. [ 673.780159][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6003'. [ 673.804209][T24952] netlink: 'syz.3.6002': attribute type 1 has an invalid length. [ 673.901135][T24511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.946576][T24975] loop4: detected capacity change from 0 to 512 [ 673.968997][T24975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 674.037550][T24975] EXT4-fs (loop4): 1 truncate cleaned up [ 674.048758][T24975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.117761][T24987] loop1: detected capacity change from 0 to 1024 [ 674.124718][T24987] EXT4-fs: Ignoring removed nobh option [ 674.130329][T24987] EXT4-fs: Ignoring removed bh option [ 674.170901][T24975] lo speed is unknown, defaulting to 1000 [ 674.267817][T24987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.339015][T24987] netlink: 'syz.1.6013': attribute type 1 has an invalid length. [ 674.384591][ T4284] Bluetooth: hci0: Frame reassembly failed (-84) [ 674.436058][T14086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.499437][T25003] lo speed is unknown, defaulting to 1000 [ 674.555191][T25003] loop2: detected capacity change from 0 to 512 [ 674.562143][T25003] journal_path: Non-blockdev passed as './bus' [ 674.568527][T25003] EXT4-fs: error: could not find journal device path [ 674.585804][T25005] loop1: detected capacity change from 0 to 512 [ 674.593780][T25005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 674.605867][T25005] EXT4-fs (loop1): 1 truncate cleaned up [ 674.612199][T25005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.627344][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 674.627360][ T29] audit: type=1326 audit(1765923721.095:34555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.663034][ T29] audit: type=1326 audit(1765923721.095:34556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.686954][ T29] audit: type=1326 audit(1765923721.095:34557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 674.710721][ T29] audit: type=1326 audit(1765923721.095:34558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b6eadf783 code=0x7ffc0000 [ 674.710783][ T29] audit: type=1326 audit(1765923721.095:34559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.710842][ T29] audit: type=1326 audit(1765923721.095:34560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.710863][ T29] audit: type=1326 audit(1765923721.095:34561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.710889][ T29] audit: type=1326 audit(1765923721.095:34562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.711142][ T29] audit: type=1326 audit(1765923721.155:34563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.711181][ T29] audit: type=1326 audit(1765923721.155:34564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6eadf749 code=0x7ffc0000 [ 674.760150][T14718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.855294][T25016] loop2: detected capacity change from 0 to 1024 [ 674.856988][T25016] EXT4-fs: Ignoring removed nobh option [ 674.857039][T25016] EXT4-fs: Ignoring removed bh option [ 674.865206][T25016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.869057][T25016] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 674.911020][T25007] lo speed is unknown, defaulting to 1000 [ 675.063055][T25027] syzkaller0: entered promiscuous mode [ 675.063075][T25027] syzkaller0: entered allmulticast mode [ 675.264913][T25033] loop4: detected capacity change from 0 to 2048 [ 675.264913][T25035] loop2: detected capacity change from 0 to 512 [ 675.265646][T25035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 675.294369][T25031] netlink: 'syz.0.6026': attribute type 1 has an invalid length. [ 675.303767][T25035] EXT4-fs (loop2): 1 truncate cleaned up [ 675.311148][T25033] Alternate GPT is invalid, using primary GPT. [ 675.317633][T25033] loop4: p2 p3 p7 [ 675.360301][T25033] netlink: 'syz.4.6027': attribute type 1 has an invalid length. [ 675.459082][T25035] lo speed is unknown, defaulting to 1000 [ 675.471370][T25051] EXT4-fs: Ignoring removed nobh option [ 675.477108][T25051] EXT4-fs: Ignoring removed bh option [ 675.498035][T25051] netlink: 'syz.4.6032': attribute type 1 has an invalid length. [ 675.539882][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 675.554310][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 675.570343][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 675.590817][T25050] lo speed is unknown, defaulting to 1000 [ 675.610538][T25059] macvtap2: entered allmulticast mode [ 675.721046][T25067] journal_path: Non-blockdev passed as './bus' [ 675.727462][T25067] EXT4-fs: error: could not find journal device path [ 675.740056][T25065] lo speed is unknown, defaulting to 1000 [ 675.845589][T25069] EXT4-fs: Ignoring removed nobh option [ 675.851487][T25069] EXT4-fs: Ignoring removed bh option [ 675.868718][T25069] __nla_validate_parse: 40 callbacks suppressed [ 675.868736][T25069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6039'. [ 675.961126][T25079] syzkaller0: entered promiscuous mode [ 675.966801][T25079] syzkaller0: entered allmulticast mode [ 676.014033][ T8582] Alternate GPT is invalid, using primary GPT. [ 676.020371][ T8582] loop1: p2 p3 p7 [ 676.032111][T25080] Alternate GPT is invalid, using primary GPT. [ 676.038558][T25080] loop1: p2 p3 p7 [ 676.130364][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 676.134800][ T8594] udevd[8594]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 676.142385][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 676.169611][T25088] EXT4-fs: Ignoring removed nobh option [ 676.175379][T25088] EXT4-fs: Ignoring removed bh option [ 676.198583][T25088] validate_nla: 2 callbacks suppressed [ 676.198598][T25088] netlink: 'syz.1.6047': attribute type 1 has an invalid length. [ 676.211976][T25088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6047'. [ 676.255085][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.264152][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.291321][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.301428][T25092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.313904][T25092] EXT4-fs (loop2): 1 truncate cleaned up [ 676.341011][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.350117][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.359235][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.382351][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.391487][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 676.417961][T25092] lo speed is unknown, defaulting to 1000 [ 676.431664][T11080] Bluetooth: hci0: command 0x1003 tx timeout [ 676.431918][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 676.558511][ T4284] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.643495][ T4284] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.676952][T25113] lo speed is unknown, defaulting to 1000 [ 676.700039][ T4284] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.727560][T25129] veth0_to_batadv: entered promiscuous mode [ 676.733680][T25129] macvtap1: entered allmulticast mode [ 676.739094][T25129] veth0_to_batadv: entered allmulticast mode [ 676.746733][T25129] veth0_to_batadv: left allmulticast mode [ 676.752527][T25129] veth0_to_batadv: left promiscuous mode [ 676.766198][ T4284] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.790501][T25132] lo speed is unknown, defaulting to 1000 [ 676.835978][T25136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.847781][T25136] EXT4-fs (loop2): 1 truncate cleaned up [ 676.896446][T25113] chnl_net:caif_netlink_parms(): no params data found [ 676.946803][ T4284] bridge_slave_1: left allmulticast mode [ 676.952668][ T4284] bridge_slave_1: left promiscuous mode [ 676.958533][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.025841][ T4284] bridge_slave_0: left allmulticast mode [ 677.031609][ T4284] bridge_slave_0: left promiscuous mode [ 677.037536][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.384459][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.396444][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.406436][ T4284] bond0 (unregistering): Released all slaves [ 677.440941][T25136] lo speed is unknown, defaulting to 1000 [ 677.454831][T25113] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.462033][T25113] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.469322][T25113] bridge_slave_0: entered allmulticast mode [ 677.476220][T25113] bridge_slave_0: entered promiscuous mode [ 677.487536][ T4284] tipc: Disabling bearer [ 677.492561][ T4284] tipc: Left network mode [ 677.492960][T25113] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.504127][T25113] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.511409][T25113] bridge_slave_1: entered allmulticast mode [ 677.518450][T25113] bridge_slave_1: entered promiscuous mode [ 677.544209][T25113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.557357][ T4284] hsr_slave_0: left promiscuous mode [ 677.570535][ T4284] hsr_slave_1: left promiscuous mode [ 677.581941][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.589370][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.596451][T25177] EXT4-fs: Ignoring removed nobh option [ 677.602352][T25177] EXT4-fs: Ignoring removed bh option [ 677.608940][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.616437][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.627027][ T4284] veth0_to_batadv: left allmulticast mode [ 677.632852][ T4284] veth0_to_batadv: left promiscuous mode [ 677.638594][ T4284] veth1_macvtap: left promiscuous mode [ 677.644346][ T4284] veth0_macvtap: left promiscuous mode [ 677.649909][ T4284] veth1_vlan: left promiscuous mode [ 677.655318][ T4284] veth0_vlan: left promiscuous mode [ 677.678478][T25180] netlink: 'syz.3.6065': attribute type 1 has an invalid length. [ 677.720542][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 677.734606][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 677.765173][T25113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.803924][T25113] team0: Port device team_slave_0 added [ 677.815740][T25113] team0: Port device team_slave_1 added [ 677.835139][T25183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 677.892789][T25183] EXT4-fs (loop3): 1 truncate cleaned up [ 677.920977][T25113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.928120][T25113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.954394][T25113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.976370][T25113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.983462][T25113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.009447][T25113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.036593][T25113] hsr_slave_0: entered promiscuous mode [ 678.042930][T25113] hsr_slave_1: entered promiscuous mode [ 678.048990][T25113] debugfs: 'hsr0' already exists in 'hsr' [ 678.054865][T25113] Cannot create hsr debugfs directory [ 678.142928][T25199] Alternate GPT is invalid, using primary GPT. [ 678.149458][T25199] loop4: p2 p3 p7 [ 678.165963][T25183] lo speed is unknown, defaulting to 1000 [ 678.233586][ T4296] Bluetooth: hci0: Frame reassembly failed (-84) [ 678.242187][T25199] netlink: 'syz.4.6067': attribute type 1 has an invalid length. [ 678.419270][T25113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.431478][T25113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 678.454252][T25113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 678.475221][T25113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 678.614287][T25113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.633889][T25113] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.713460][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.720664][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.754401][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.761603][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.790380][T25113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.800883][T25113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.891460][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 678.909601][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 678.944320][T25113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.036363][T25245] set_capacity_and_notify: 10 callbacks suppressed [ 679.036459][T25245] loop4: detected capacity change from 0 to 2048 [ 679.091749][T25246] loop3: detected capacity change from 0 to 2048 [ 679.118569][T25113] veth0_vlan: entered promiscuous mode [ 679.144635][T25113] veth1_vlan: entered promiscuous mode [ 679.162228][ T8582] Alternate GPT is invalid, using primary GPT. [ 679.168675][ T8582] loop4: p2 p3 p7 [ 679.193947][ T9569] Alternate GPT is invalid, using primary GPT. [ 679.195800][T25113] veth0_macvtap: entered promiscuous mode [ 679.200415][ T9569] loop3: p2 p3 p7 [ 679.229505][T25245] Alternate GPT is invalid, using primary GPT. [ 679.233352][T25113] veth1_macvtap: entered promiscuous mode [ 679.235908][T25245] loop4: p2 p3 p7 [ 679.275666][T25246] Alternate GPT is invalid, using primary GPT. [ 679.282113][T25246] loop3: p2 p3 p7 [ 679.288176][T25113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.315567][T25113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.382375][ T422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.407319][ T422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.464910][ T422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.487242][ T8593] ================================================================== [ 679.495467][ T8593] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 679.502437][ T8593] [ 679.503098][ T422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.504771][ T8593] write to 0xffff8881038f23d4 of 4 bytes by task 8581 on cpu 0: [ 679.504792][ T8593] shmem_mknod+0x143/0x170 [ 679.525650][ T8593] shmem_create+0x34/0x50 [ 679.530003][ T8593] path_openat+0x1115/0x23b0 [ 679.534609][ T8593] do_filp_open+0x109/0x230 [ 679.539139][ T8593] do_sys_openat2+0xa6/0x150 [ 679.543755][ T8593] __x64_sys_openat+0xf2/0x120 [ 679.548542][ T8593] x64_sys_call+0x2b07/0x3000 [ 679.553321][ T8593] do_syscall_64+0xd8/0x2c0 [ 679.558025][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.563939][ T8593] [ 679.566284][ T8593] read to 0xffff8881038f23d4 of 4 bytes by task 8593 on cpu 1: [ 679.573834][ T8593] fill_mg_cmtime+0x5b/0x260 [ 679.578445][ T8593] generic_fillattr+0x24a/0x340 [ 679.583400][ T8593] shmem_getattr+0x181/0x200 [ 679.588086][ T8593] vfs_getattr_nosec+0x146/0x1e0 [ 679.593028][ T8593] vfs_statx+0x113/0x390 [ 679.597288][ T8593] vfs_fstatat+0x115/0x170 [ 679.601718][ T8593] __se_sys_newfstatat+0x55/0x260 [ 679.606750][ T8593] __x64_sys_newfstatat+0x55/0x70 [ 679.611872][ T8593] x64_sys_call+0x111f/0x3000 [ 679.616554][ T8593] do_syscall_64+0xd8/0x2c0 [ 679.621073][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.627061][ T8593] [ 679.629381][ T8593] value changed: 0x3957098a -> 0x395d22ec [ 679.635094][ T8593] [ 679.637416][ T8593] Reported by Kernel Concurrency Sanitizer on: [ 679.643655][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 679.654597][ T8593] Tainted: [W]=WARN [ 679.658396][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.668456][ T8593] ================================================================== [ 679.836562][ T9569] udevd[9569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 679.848617][ T8582] udevd[8582]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 679.935471][T25271] netlink: 'syz.0.6074': attribute type 1 has an invalid length. [ 680.271728][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 680.271685][T11080] Bluetooth: hci0: command 0x1003 tx timeout