last executing test programs: 2m29.895680576s ago: executing program 0 (id=523): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x1, 0x84) connect$tipc(r1, 0x0, 0x0) 2m29.758013928s ago: executing program 1 (id=524): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) 2m29.753806778s ago: executing program 0 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) lseek(r1, 0x2, 0x4) 2m29.590883221s ago: executing program 1 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x101, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xcb, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf"}, {0x0, 0x1, "000000050000000026"}, {0x0, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a"}, {}, {0x18, 0x2, "b8a3e10000a3e1100000006f00ff"}]}}}}}}, 0x0) pipe2$9p(0x0, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RLERRORu(r2, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x23, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/121) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m29.315791755s ago: executing program 0 (id=529): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x7}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 2m29.193543108s ago: executing program 1 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) ioperm(0x7, 0x2, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'}) io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5, 0x72}) socket$inet6(0xa, 0x6, 0x0) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 2m28.912172072s ago: executing program 1 (id=531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8008000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m26.55180051s ago: executing program 0 (id=533): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m26.51302781s ago: executing program 1 (id=535): unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x84) connect$tipc(r0, 0x0, 0x0) 2m26.283777505s ago: executing program 0 (id=537): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2m26.186629016s ago: executing program 1 (id=539): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r0) ptrace(0x8, r0) syz_pidfd_open(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0xfeee, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000680)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], @ni={0x8c, 0x0, 0x0, 0x9, 0x6, 0x7}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000)=""/94}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m26.079248768s ago: executing program 0 (id=541): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 2m11.101909189s ago: executing program 32 (id=539): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r0) ptrace(0x8, r0) syz_pidfd_open(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0xfeee, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000680)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], @ni={0x8c, 0x0, 0x0, 0x9, 0x6, 0x7}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000)=""/94}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m10.985053011s ago: executing program 33 (id=541): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 48.687498126s ago: executing program 4 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0), 0x0) write$binfmt_elf64(r1, 0x0, 0x7c8) 48.518399518s ago: executing program 4 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x80000) epoll_pwait2(r5, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000004c0)={[0x8]}, 0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x7, &(0x7f0000000180)) 47.271728719s ago: executing program 4 (id=1103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x5) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 45.528575347s ago: executing program 4 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='dlm_lock_end\x00', r4}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$KDSETMODE(r2, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008002000b703000000000000850000000600000095", @ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x327, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x1d, 0x0, 0x40, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r0, r11, 0x9, 0x8, r1, @void, @value=r8, @void, @void, r12}, 0x20) fchdir(r8) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0) r13 = socket(0x1, 0x80802, 0x0) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f00000000c0)={0x30000001}) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r15, 0xffffffffffffffff, 0x0) 44.984406025s ago: executing program 4 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001300), 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 44.655342481s ago: executing program 4 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x80000) epoll_pwait2(r5, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000004c0)={[0x8]}, 0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x7, &(0x7f0000000180)) 28.785220816s ago: executing program 34 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x80000) epoll_pwait2(r5, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000004c0)={[0x8]}, 0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x7, &(0x7f0000000180)) 27.137493253s ago: executing program 2 (id=1193): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000002800018014000400001fff00000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) close_range(r2, 0xffffffffffffffff, 0x0) 26.239759297s ago: executing program 2 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r2) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000001080), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r0, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001dc0)=[0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001e40)=[{}, {}, {}, {}, {}], 0x28, 0x33, &(0x7f0000001e80), &(0x7f0000001f40), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802001100000000000000000000000085000000280000001801000020000000f4fcffffff1f20207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/132, 0x84}], 0x7, 0x33, 0x1) r6 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmmsg(r6, &(0x7f0000007a80)=[{{&(0x7f00000000c0)=@generic={0xf, "a905bd8ab00f7c9aaf718f8c975a8b272c691717252b70e266e28bf597044405a5f3a851c4d1f56204b367208739c94ee7f7f9402d1ab5b14947cead057f5ea158cd19eb30f57e16df543f65cd391dae459b0c213438fe6aa86fce31ad4843e9faad00e60e691e0dfef2358b953de6bbcd76df88f175fda058d433072dde"}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff5a}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000011c0)='fsi_master_acf_copro_response\x00', r5, 0x0, 0x1000}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001000130728bd700070000000ac1414aa0000000000000000000000002001000000000000000000000000000100040001110000000200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd"], 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xf9, 0x9381, 0x54, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80, 0x20, 0xffffffff, 0x8}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) 23.707662698s ago: executing program 2 (id=1205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 23.629297139s ago: executing program 2 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000002800018014000400001fff00000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) close_range(r1, 0xffffffffffffffff, 0x0) 22.717673094s ago: executing program 2 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x5c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x7}}}]}}]}]}]}}]}, 0x5c}}, 0x20040054) 21.021555971s ago: executing program 2 (id=1215): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x400000, [{0x7, 0x3, 0x1b}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x30, 0x2e, 0x5f, 0xe]}}, 0x0, 0x3a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_io_uring_setup(0x34f8, &(0x7f0000000100)={0x0, 0x645e, 0x800, 0x400002, 0x250, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r5, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x8000}) r7 = socket(0x40000000015, 0x5, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) readv(r4, &(0x7f0000000940)=[{&(0x7f0000000780)=""/190, 0xbe}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) semget(0x0, 0x1, 0x104) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 20.872183464s ago: executing program 3 (id=1217): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0) 17.811973033s ago: executing program 3 (id=1218): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 15.611012599s ago: executing program 3 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000c00000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 15.551299939s ago: executing program 3 (id=1220): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x43b, &(0x7f00000009c0)="$eJzs28tvG0UYAPBv7Tilz4SqPPoAAgUR8UiatJQeuIBA4gASEhzKMSRpFeo2qAkSrSIICJUjqsQdcUTiL+AEFwScKnGFO0KqUC4tnIzW3k1sx87TiQH/ftK23+yOM/Nld+zZnTiAnjWU/pNEHIiIXyNioFZsrDBU++/u0sLkX0sLk0lUKm/+mVTr3VlamMyr5q/bnxf6IgqfJnG8Rbtz165fmiiXp69m5dH5y++Nzl27/uzM5YmL0xenr4yfO3fm9NjzZ8ef60ieaV53jn04e+Loq2/ffH3y/M13fvomyfNvyqNDhtY6+ESl0uHmuutgXZz0dbEjbEqxNkyjVB3/A1GMlZM3EK980tXOATuqUqlU7m9/eLEC/I8l0e0eAN2Rf9Cn97/5tktTj3+F2y/WboDSvO9mW+1IXxSyOqWm+9tOGoqI84t/f5lusTPPIQAAGnyXzn+eaTX/K0T9c6FD2RrKYETcGxGHI+JsRByJiPsiqnUfiIgHN9l+8yLJ6vnPoS3ltVHp/O+FbG2rcf6Xz/5isJiVDlbzLyUXZsrTp7KeDUdpT1oeW6ON71/+5fOWB7Im8vlfuqXt53PBrNIffXsaXzY1MT+xnZzr3f444lhfq/yT5ZWAJCKORsSxLbYx89TXJ9odG1o3/zV0YJ2p8lXEk7XzvxhN+eeStdcnR++J8vSp0fyqWO3nWzfeaNf+tvLvgPT872t5/S/nP5jUr9fObb6NG7991vaeZv38W1///clbDfs+mJifvzoW0Z+8Vut0/f7xpnrjK/XT/IdPth7/h2PlN3E8ItKL+KGIeDgiHsn6/mhEPBYRJ1endqs/C3586fF3q0FpK/nvrDT/qU2d/5WgP5r3tA6Kl374tqHRwc3kn57/M9VoONuzkfe/jfRra1czAAAA/PcUIuJAJIWR5bhQGBmp/Q3/kdhXKM/OzT99Yfb9K1O17wgMRqmQP+kaqHseOpbd1ufl8aby6ey58RfFvdXyyORsearbyUOP299m/Kd+L3a7d8CO830t6F3GP/Qu4x96l/EPvavF+N/bjX4Au6/V5/9HXegHsPuaxr9lP+gh7v+hdxn/0LuMf+hJc3tj/S/JCwSrgihs9+f0R/ezELQLuv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BAAA//9lk+Xp") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) fsync(r0) 15.383701452s ago: executing program 3 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 15.338947133s ago: executing program 3 (id=1222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r2) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000001080), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r0, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001dc0)=[0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001e40)=[{}, {}, {}, {}, {}], 0x28, 0x33, &(0x7f0000001e80), &(0x7f0000001f40), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802001100000000000000000000000085000000280000001801000020000000f4fcffffff1f20207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/132, 0x84}], 0x7, 0x33, 0x1) r7 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmmsg(r7, &(0x7f0000007a80)=[{{&(0x7f00000000c0)=@generic={0xf, "a905bd8ab00f7c9aaf718f8c975a8b272c691717252b70e266e28bf597044405a5f3a851c4d1f56204b367208739c94ee7f7f9402d1ab5b14947cead057f5ea158cd19eb30f57e16df543f65cd391dae459b0c213438fe6aa86fce31ad4843e9faad00e60e691e0dfef2358b953de6bbcd76df88f175fda058d433072dde"}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff5a}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000011c0)='fsi_master_acf_copro_response\x00', r5, 0x0, 0x1000}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001000130728bd700070000000ac1414aa0000000000000000000000002001000000000000000000000000000100040001110000000200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd"], 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xf9, 0x9381, 0x54, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80, 0x20, 0xffffffff, 0x8}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) 5.536082311s ago: executing program 35 (id=1215): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x400000, [{0x7, 0x3, 0x1b}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x30, 0x2e, 0x5f, 0xe]}}, 0x0, 0x3a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_io_uring_setup(0x34f8, &(0x7f0000000100)={0x0, 0x645e, 0x800, 0x400002, 0x250, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r5, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x8000}) r7 = socket(0x40000000015, 0x5, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) readv(r4, &(0x7f0000000940)=[{&(0x7f0000000780)=""/190, 0xbe}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) semget(0x0, 0x1, 0x104) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 36 (id=1222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r2) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000001080), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r0, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001dc0)=[0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001e40)=[{}, {}, {}, {}, {}], 0x28, 0x33, &(0x7f0000001e80), &(0x7f0000001f40), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802001100000000000000000000000085000000280000001801000020000000f4fcffffff1f20207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/132, 0x84}], 0x7, 0x33, 0x1) r7 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmmsg(r7, &(0x7f0000007a80)=[{{&(0x7f00000000c0)=@generic={0xf, "a905bd8ab00f7c9aaf718f8c975a8b272c691717252b70e266e28bf597044405a5f3a851c4d1f56204b367208739c94ee7f7f9402d1ab5b14947cead057f5ea158cd19eb30f57e16df543f65cd391dae459b0c213438fe6aa86fce31ad4843e9faad00e60e691e0dfef2358b953de6bbcd76df88f175fda058d433072dde"}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff5a}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000011c0)='fsi_master_acf_copro_response\x00', r5, 0x0, 0x1000}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001000130728bd700070000000ac1414aa0000000000000000000000002001000000000000000000000000000100040001110000000200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff01000000000000000000000000000100000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd70000000000002000000000000000000000061001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800000080000000316f74eeac053deb73fc018493cc121927a9bca207000000"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd"], 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xf9, 0x9381, 0x54, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80, 0x20, 0xffffffff, 0x8}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) kernel console output (not intermixed with test programs): 068495][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.114093][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.137593][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.165670][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.175751][ T26] audit: type=1326 audit(1744141951.806:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.181641][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.224345][ T26] audit: type=1326 audit(1744141951.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.256387][ T26] audit: type=1326 audit(1744141951.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.260614][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.312704][ T26] audit: type=1326 audit(1744141951.856:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.329832][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.352055][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.367523][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.381268][ T26] audit: type=1326 audit(1744141951.856:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.414982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.424053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.434040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.451871][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.463799][ T26] audit: type=1326 audit(1744141951.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.516115][ T26] audit: type=1326 audit(1744141951.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.534262][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.542273][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 80.563059][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.566986][ T26] audit: type=1326 audit(1744141951.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.574139][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.605759][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 80.611821][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 80.617988][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.628587][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.638660][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.649626][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.661384][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.671643][ T26] audit: type=1326 audit(1744141951.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.680488][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.699496][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 80.708182][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 80.714492][ T26] audit: type=1326 audit(1744141951.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 80.768367][ T4348] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.805313][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.833167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.854332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.906810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.917540][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933702][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.955399][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.971905][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.994982][ T4345] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9'. [ 81.018792][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.051149][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.164208][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.430979][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.478103][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.547052][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.561080][ T4370] Zero length message leads to an empty skb [ 81.567815][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.588447][ T4372] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 81.599106][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.629425][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.940466][ T4403] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 84.003399][ T4403] team0: Device veth1_macvtap failed to register rx_handler [ 84.161749][ T4403] syz.1.25 (4403) used greatest stack depth: 19608 bytes left [ 84.579493][ T4419] loop4: detected capacity change from 0 to 128 [ 84.699533][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.744367][ T4419] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.927889][ T4430] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 84.991424][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 85.141079][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.180087][ T4430] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.227978][ T4434] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.266822][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.285070][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.434363][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 85.501501][ T4444] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.510890][ T4444] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.519691][ T4444] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.528470][ T4444] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.543716][ T4444] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.553065][ T4444] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.562151][ T4444] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.571258][ T4444] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.164335][ T4458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45'. [ 86.220882][ T4458] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.258108][ T4458] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.688928][ T951] cfg80211: failed to load regulatory.db [ 87.036917][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 87.070230][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.265626][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.358859][ T4475] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 87.431449][ T4475] team0: Device veth1_macvtap failed to register rx_handler [ 88.399137][ T4509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.70'. [ 88.445722][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.507228][ T4511] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.516484][ T4511] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.525502][ T4511] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.534242][ T4511] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.630074][ T4511] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.639239][ T4511] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.649073][ T4511] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.658267][ T4511] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.798960][ T4519] loop1: detected capacity change from 0 to 512 [ 88.866653][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.875873][ T4519] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.348841][ T4531] loop3: detected capacity change from 0 to 512 [ 89.387145][ T4531] journal_path: Lookup failure for './bus' [ 89.437863][ T4531] EXT4-fs: error: could not find journal device path [ 89.603796][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 90.155558][ T4545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.84'. [ 90.758802][ T4554] loop0: detected capacity change from 0 to 8192 [ 90.775650][ T4554] ======================================================= [ 90.775650][ T4554] WARNING: The mand mount option has been deprecated and [ 90.775650][ T4554] and is ignored by this kernel. Remove the mand [ 90.775650][ T4554] option from the mount to silence this warning. [ 90.775650][ T4554] ======================================================= [ 90.870517][ T4554] syz.0.89: attempt to access beyond end of device [ 90.870517][ T4554] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 90.897101][ T4554] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 90.914435][ T4554] FAT-fs (loop0): Filesystem has been set read-only [ 90.936069][ T4554] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 90.950630][ T4554] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 91.273779][ T4569] netlink: 44 bytes leftover after parsing attributes in process `syz.4.97'. [ 91.469205][ T4576] tipc: Enabling of bearer rejected, failed to enable media [ 91.500416][ T4578] netlink: 'syz.4.100': attribute type 13 has an invalid length. [ 91.822507][ T4578] gretap0: refused to change device tx_queue_len [ 91.844132][ T4578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 92.354507][ T4263] Bluetooth: hci5: sending frame failed (-49) [ 92.361850][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 93.320700][ T4604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.110'. [ 94.101523][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 94.101540][ T26] audit: type=1326 audit(1744141965.736:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 94.265075][ T26] audit: type=1326 audit(1744141965.736:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 94.589198][ T26] audit: type=1326 audit(1744141965.736:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 94.678679][ T26] audit: type=1326 audit(1744141965.736:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 94.750422][ T26] audit: type=1326 audit(1744141965.826:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 94.837174][ T4630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.122'. [ 94.894653][ T4628] device bridge0 entered promiscuous mode [ 94.978038][ T4628] device macvlan2 entered promiscuous mode [ 95.174272][ T4628] device bridge0 left promiscuous mode [ 95.648092][ T4634] netlink: 'syz.4.124': attribute type 7 has an invalid length. [ 95.665090][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 96.110555][ T4646] loop2: detected capacity change from 0 to 2048 [ 96.235573][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.271536][ T4306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 97.331093][ T4306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 97.385426][ T4306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.385426][ T4306] [ 97.418767][ T4306] EXT4-fs (loop2): Total free blocks count 0 [ 97.433211][ T4306] EXT4-fs (loop2): Free/Dirty block details [ 97.443006][ T4306] EXT4-fs (loop2): free_blocks=2415919504 [ 97.459847][ T4306] EXT4-fs (loop2): dirty_blocks=16400 [ 97.477238][ T4306] EXT4-fs (loop2): Block reservation details [ 97.494525][ T4306] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 97.632383][ T4306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 98.098063][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 98.146909][ T4670] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.156033][ T4670] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.164778][ T4670] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.173996][ T4670] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.267827][ T4670] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.277286][ T4670] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.286634][ T4670] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.295590][ T4670] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.849879][ T4683] loop0: detected capacity change from 0 to 2048 [ 98.895502][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.734585][ T4306] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.814816][ T4306] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 99.843198][ T4306] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.843198][ T4306] [ 99.868364][ T4694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.133'. [ 99.895173][ T4306] EXT4-fs (loop0): Total free blocks count 0 [ 99.901469][ T4306] EXT4-fs (loop0): Free/Dirty block details [ 99.911434][ T4306] EXT4-fs (loop0): free_blocks=2415919504 [ 99.931683][ T4306] EXT4-fs (loop0): dirty_blocks=11648 [ 99.954149][ T4306] EXT4-fs (loop0): Block reservation details [ 99.965199][ T4306] EXT4-fs (loop0): i_reserved_data_blocks=728 [ 100.067865][ T4306] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 100.639833][ T4705] loop3: detected capacity change from 0 to 512 [ 100.711309][ T4705] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 100.723708][ T4705] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 100.735746][ T4705] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.151: Failed to acquire dquot type 1 [ 100.782467][ T4705] EXT4-fs (loop3): 1 truncate cleaned up [ 100.797487][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.808817][ T4705] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.907904][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 101.076434][ T4721] loop4: detected capacity change from 0 to 2048 [ 101.112694][ T4721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.450975][ T4730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 101.942678][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 102.025034][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 102.047445][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.047445][ T9] [ 102.068980][ T4738] loop0: detected capacity change from 0 to 512 [ 102.109496][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 102.133486][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.138869][ T9] EXT4-fs (loop4): Free/Dirty block details [ 102.142629][ T4738] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.193771][ T9] EXT4-fs (loop4): free_blocks=2415919504 [ 102.199690][ T9] EXT4-fs (loop4): dirty_blocks=11520 [ 102.205580][ T9] EXT4-fs (loop4): Block reservation details [ 102.211816][ T9] EXT4-fs (loop4): i_reserved_data_blocks=720 [ 102.673585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.682714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.704917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.713237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.721493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.729740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.737980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.746226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.754429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.762673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.859858][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 102.869276][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 103.377875][ T4754] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.543089][ T4760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.172'. [ 104.593123][ T4783] syz.3.182[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.593238][ T4783] syz.3.182[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.842226][ T26] audit: type=1326 audit(1744141976.476:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 104.842559][ T4791] syz.3.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.893201][ T26] audit: type=1326 audit(1744141976.476:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 104.924783][ T26] audit: type=1326 audit(1744141976.556:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 104.952559][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.955349][ T4263] Bluetooth: hci5: command 0x1003 tx timeout [ 104.986995][ T26] audit: type=1326 audit(1744141976.556:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 105.448715][ T4802] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.238692][ T4811] syz.0.193[4811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.238826][ T4811] syz.0.193[4811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.571138][ T4814] loop3: detected capacity change from 0 to 1764 [ 106.971360][ T4821] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 107.033124][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.076215][ T4821] team0: Port device bond0 added [ 107.518672][ T4837] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.061881][ T26] audit: type=1326 audit(1744141979.696:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.101924][ T4851] loop2: detected capacity change from 0 to 512 [ 108.135509][ T4851] EXT4-fs: Ignoring removed orlov option [ 108.174386][ T26] audit: type=1326 audit(1744141979.696:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.234721][ T26] audit: type=1326 audit(1744141979.726:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.257972][ T26] audit: type=1326 audit(1744141979.726:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.313470][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.347546][ T4851] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.352789][ T26] audit: type=1326 audit(1744141979.726:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.472085][ T26] audit: type=1326 audit(1744141979.726:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.575316][ T26] audit: type=1326 audit(1744141979.726:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.609501][ T4851] xt_socket: unknown flags 0xc [ 108.648374][ T26] audit: type=1326 audit(1744141979.726:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.741264][ T26] audit: type=1326 audit(1744141979.726:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 108.807921][ T26] audit: type=1326 audit(1744141979.726:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f631c18d1a3 code=0x7ffc0000 [ 109.073958][ T4878] loop1: detected capacity change from 0 to 512 [ 109.151048][ T4878] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.219: Parent and EA inode have the same ino 15 [ 109.184640][ T4878] EXT4-fs (loop1): 1 orphan inode deleted [ 109.191547][ T4878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.244000][ T4297] kernel write not supported for file bpf-prog (pid: 4297 comm: kworker/1:6) [ 109.304102][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 110.412185][ T4901] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 110.451115][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 110.608896][ T4904] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 110.799187][ T4915] netlink: 'syz.1.230': attribute type 7 has an invalid length. [ 110.834576][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 110.878342][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 110.932146][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.830967][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.911914][ T4932] loop3: detected capacity change from 0 to 128 [ 112.004326][ T4932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.033471][ T4932] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.126239][ T4943] loop4: detected capacity change from 0 to 512 [ 112.200671][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 112.202165][ T4943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.215622][ T4943] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.089751][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 113.634734][ T4960] device pim6reg1 entered promiscuous mode [ 113.749889][ T4966] netlink: 'syz.1.245': attribute type 7 has an invalid length. [ 113.770438][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 114.058675][ T4977] loop1: detected capacity change from 0 to 128 [ 114.085079][ T4977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.098734][ T4977] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.226323][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 114.290696][ T4980] block device autoloading is deprecated and will be removed. [ 114.450624][ T4987] loop0: detected capacity change from 0 to 512 [ 114.496729][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.505858][ T4987] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.464519][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 115.997494][ T5010] netlink: 'syz.2.259': attribute type 7 has an invalid length. [ 116.044965][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 116.071370][ T5005] netlink: 'syz.3.258': attribute type 13 has an invalid length. [ 116.221378][ T5019] loop1: detected capacity change from 0 to 128 [ 116.265839][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.266007][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.284137][ T5019] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.356233][ T5005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.397983][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 116.460697][ T5013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.491857][ T5023] loop1: detected capacity change from 0 to 512 [ 116.501824][ T5023] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.521031][ T5023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.532913][ T5014] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 116.542770][ T5014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.257'. [ 116.580000][ T5023] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.650215][ T5023] EXT4-fs (loop1): 1 truncate cleaned up [ 116.660662][ T5023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.665964][ T5014] team0: Port device geneve0 added [ 116.784020][ T5013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.011998][ T5013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.043309][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 117.084583][ T5034] loop4: detected capacity change from 0 to 512 [ 117.136274][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.145503][ T5034] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.392883][ T5013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.396998][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 118.576947][ T5013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.635724][ T5059] netlink: 'syz.3.272': attribute type 7 has an invalid length. [ 118.652433][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 118.700285][ T5013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.721369][ T5013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.744201][ T5013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.333043][ T5086] loop2: detected capacity change from 0 to 512 [ 120.408331][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.417783][ T5086] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.121438][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 122.497378][ T5102] netlink: 'syz.0.285': attribute type 7 has an invalid length. [ 122.521753][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 122.768959][ T5109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.790126][ T5112] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 122.798315][ T5112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.287'. [ 122.844535][ T5112] team0: Port device geneve0 added [ 122.852474][ T5113] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.290'. [ 122.897062][ T5109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.932292][ T5111] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.290'. [ 123.009726][ T5109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.119495][ T5109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.265160][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 123.265181][ T26] audit: type=1326 audit(1744141994.856:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 123.310987][ T5109] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.329594][ T5109] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.344823][ T26] audit: type=1326 audit(1744141994.856:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 123.373828][ T5109] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.757810][ T26] audit: type=1326 audit(1744141994.856:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.091621][ T26] audit: type=1326 audit(1744141994.856:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.137978][ T5109] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.181518][ T5128] unsupported nla_type 39 [ 124.252710][ T26] audit: type=1326 audit(1744141994.866:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.293362][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 124.303388][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 124.359790][ T26] audit: type=1326 audit(1744141994.876:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.376466][ T5131] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.391387][ T5131] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.400336][ T5131] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.409130][ T5131] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.451847][ T26] audit: type=1326 audit(1744141994.876:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.474102][ T5135] Bluetooth: MGMT ver 1.22 [ 124.592405][ T26] audit: type=1326 audit(1744141994.876:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.704073][ T26] audit: type=1326 audit(1744141994.876:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.751255][ T5145] netlink: 'syz.3.300': attribute type 7 has an invalid length. [ 124.808296][ T26] audit: type=1326 audit(1744141994.876:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1b1018d169 code=0x7ffc0000 [ 124.824235][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 125.120627][ T5160] netlink: 56 bytes leftover after parsing attributes in process `syz.0.303'. [ 125.161187][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 125.225155][ T5156] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 125.561849][ T5179] loop9: detected capacity change from 0 to 7 [ 125.594624][ T5179] Dev loop9: unable to read RDB block 7 [ 125.609690][ T5179] loop9: unable to read partition table [ 125.640019][ T5179] loop9: partition table beyond EOD, truncated [ 125.687809][ T5179] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 125.687809][ T5179] U) failed (rc=-5) [ 125.877540][ T5188] loop1: detected capacity change from 0 to 2048 [ 125.937405][ T5188] Alternate GPT is invalid, using primary GPT. [ 125.947808][ T5188] loop1: p1 p2 p3 [ 126.559331][ T5205] loop3: detected capacity change from 0 to 512 [ 126.756385][ T5205] EXT4-fs (loop3): 1 orphan inode deleted [ 126.762193][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.776248][ T4927] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:11: Failed to release dquot type 1 [ 126.809655][ T5205] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.986069][ T5220] process 'syz.3.320' launched './file1' with NULL argv: empty string added [ 127.781729][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 127.799733][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 127.886608][ T5238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 128.138848][ T5247] loop3: detected capacity change from 0 to 512 [ 128.178815][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.188119][ T5247] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.447517][ T5258] tipc: Started in network mode [ 128.464525][ T5258] tipc: Node identity ac14140f, cluster identity 4711 [ 128.473329][ T5258] tipc: New replicast peer: 255.255.255.255 [ 128.482448][ T5258] tipc: Enabled bearer , priority 10 [ 128.507461][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.530697][ T5260] tipc: Disabling bearer [ 128.957867][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 130.755488][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 130.938988][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 130.971648][ T5293] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 130.996883][ T5298] loop2: detected capacity change from 0 to 512 [ 131.024331][ T5293] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 131.040805][ T5298] EXT4-fs: Invalid want_extra_isize 5 [ 131.099915][ T4243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.347316][ T5306] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.419109][ T5306] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.467268][ T5307] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 131.475540][ T5307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.356'. [ 131.543944][ T5306] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.646807][ T5306] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.791966][ T5306] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.838093][ T5306] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.878438][ T5306] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.933263][ T5306] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.975108][ T5319] tipc: Started in network mode [ 131.980048][ T5319] tipc: Node identity ac14140f, cluster identity 4711 [ 132.006019][ T5319] tipc: New replicast peer: 255.255.255.255 [ 132.025111][ T5319] tipc: Enabled bearer , priority 10 [ 132.032399][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 132.063258][ T5321] tipc: Disabling bearer [ 132.114426][ T5323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'. [ 132.309888][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 132.331816][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 132.359714][ T5331] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.368861][ T5331] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.378337][ T5331] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.387935][ T5331] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.770288][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783182][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.883743][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 132.906224][ T5343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.950971][ T5343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.994425][ T5346] loop1: detected capacity change from 0 to 512 [ 133.035739][ T5346] EXT4-fs: Invalid want_extra_isize 5 [ 133.194980][ T4267] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.487308][ T5352] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 133.629157][ T5356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 134.165862][ T5376] loop1: detected capacity change from 0 to 512 [ 134.204464][ T5374] loop2: detected capacity change from 0 to 2048 [ 134.224187][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 134.224204][ T26] audit: type=1326 audit(1744142005.856:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.264159][ T5376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.272089][ T26] audit: type=1326 audit(1744142005.856:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.273273][ T5376] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.331145][ T26] audit: type=1326 audit(1744142005.856:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.381634][ T26] audit: type=1326 audit(1744142005.856:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.464190][ T26] audit: type=1326 audit(1744142005.856:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.521432][ T26] audit: type=1326 audit(1744142005.856:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.539967][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 134.579317][ T26] audit: type=1326 audit(1744142005.856:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.657470][ T26] audit: type=1326 audit(1744142005.856:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.729293][ T26] audit: type=1326 audit(1744142005.856:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.775702][ T26] audit: type=1326 audit(1744142005.856:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f70f8d169 code=0x7ffc0000 [ 134.967371][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 136.392073][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 136.672587][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 136.681724][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 137.207845][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 137.601491][ T5456] loop4: detected capacity change from 0 to 512 [ 137.679639][ T5456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.688953][ T5456] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.658425][ T5465] loop3: detected capacity change from 0 to 2048 [ 138.745864][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 138.760230][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.138017][ T5441] Set syz1 is full, maxelem 65536 reached [ 139.351024][ T5472] loop4: detected capacity change from 0 to 512 [ 139.431327][ T5472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.471776][ T4897] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 139.506582][ T5472] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.545177][ T4897] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2028 with error 28 [ 139.557755][ T4897] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.557755][ T4897] [ 139.567575][ T4897] EXT4-fs (loop3): Total free blocks count 0 [ 139.573600][ T4897] EXT4-fs (loop3): Free/Dirty block details [ 139.585081][ T4897] EXT4-fs (loop3): free_blocks=2415919504 [ 139.626536][ T4897] EXT4-fs (loop3): dirty_blocks=2032 [ 139.662648][ T4897] EXT4-fs (loop3): Block reservation details [ 139.669077][ T4897] EXT4-fs (loop3): i_reserved_data_blocks=127 [ 139.880628][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 139.891430][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 140.090004][ T5480] device syzkaller0 entered promiscuous mode [ 140.113451][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 140.123088][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 140.172594][ T5485] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.181089][ T5485] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.189502][ T5485] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.197773][ T5485] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.456651][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.672513][ T5501] loop3: detected capacity change from 0 to 2048 [ 140.727633][ T5501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.534369][ T4897] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 141.551445][ T4897] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 141.564882][ T4897] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.564882][ T4897] [ 141.575066][ T4897] EXT4-fs (loop3): Total free blocks count 0 [ 141.581117][ T4897] EXT4-fs (loop3): Free/Dirty block details [ 141.588337][ T4897] EXT4-fs (loop3): free_blocks=2415919504 [ 141.594198][ T4897] EXT4-fs (loop3): dirty_blocks=7712 [ 141.599766][ T4897] EXT4-fs (loop3): Block reservation details [ 141.605866][ T4897] EXT4-fs (loop3): i_reserved_data_blocks=482 [ 141.672369][ T4897] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 142.022060][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 142.190532][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 144.287321][ T951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.408609][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 144.566631][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 144.934357][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.676693][ T5547] loop2: detected capacity change from 0 to 2048 [ 145.879809][ T5547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.023097][ T5555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.288587][ T5051] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 146.346531][ T5051] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 482 with error 28 [ 146.384981][ T5051] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.384981][ T5051] [ 146.391117][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 146.408519][ T5051] EXT4-fs (loop2): Total free blocks count 0 [ 146.415428][ T5051] EXT4-fs (loop2): Free/Dirty block details [ 146.437647][ T5051] EXT4-fs (loop2): free_blocks=2415919504 [ 146.451261][ T5569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 146.474409][ T5051] EXT4-fs (loop2): dirty_blocks=496 [ 146.506370][ T5051] EXT4-fs (loop2): Block reservation details [ 146.512416][ T5051] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 146.570240][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 146.995002][ T5576] device syzkaller0 entered promiscuous mode [ 149.258120][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 149.267628][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.349219][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.398735][ T5593] tipc: Started in network mode [ 149.404388][ T5593] tipc: Node identity ac14140f, cluster identity 4711 [ 149.418302][ T5593] tipc: New replicast peer: 255.255.255.255 [ 149.428337][ T5593] tipc: Enabled bearer , priority 10 [ 149.461615][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 149.495315][ T5594] tipc: Disabling bearer [ 149.605924][ T5603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.463'. [ 150.405559][ T5620] device syzkaller0 entered promiscuous mode [ 151.186787][ T5634] loop1: detected capacity change from 0 to 512 [ 151.294630][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.304371][ T5634] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.004402][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 152.593968][ T5645] loop1: detected capacity change from 0 to 2048 [ 152.654322][ T5645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.804144][ T5611] Set syz1 is full, maxelem 65536 reached [ 153.440201][ T4926] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 153.456487][ T4926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 153.469608][ T4926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.469608][ T4926] [ 153.479869][ T4926] EXT4-fs (loop1): Total free blocks count 0 [ 153.489725][ T4926] EXT4-fs (loop1): Free/Dirty block details [ 153.496023][ T4926] EXT4-fs (loop1): free_blocks=2415919504 [ 153.501817][ T4926] EXT4-fs (loop1): dirty_blocks=5104 [ 153.507644][ T4926] EXT4-fs (loop1): Block reservation details [ 153.513727][ T4926] EXT4-fs (loop1): i_reserved_data_blocks=319 [ 153.570216][ T4926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 153.895185][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.984036][ T5628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.001664][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 155.024394][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.197799][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.675153][ T4328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.786290][ T5681] loop1: detected capacity change from 0 to 2048 [ 155.882553][ T5681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.905321][ T4328] usb 5-1: device descriptor read/64, error -71 [ 156.115186][ T4297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.205175][ T4328] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.304945][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 156.328638][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.378394][ T4328] usb 5-1: device descriptor read/64, error -71 [ 156.380114][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.399134][ T4297] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 156.443401][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.469499][ T4297] usb 4-1: config 0 descriptor?? [ 156.496045][ T4328] usb usb5-port1: attempt power cycle [ 156.686769][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 156.708021][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 156.723080][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.723080][ T9] [ 156.744362][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 156.754964][ T9] EXT4-fs (loop1): Free/Dirty block details [ 156.760983][ T9] EXT4-fs (loop1): free_blocks=2415919504 [ 156.773450][ T9] EXT4-fs (loop1): dirty_blocks=2976 [ 156.779656][ T9] EXT4-fs (loop1): Block reservation details [ 156.798568][ T9] EXT4-fs (loop1): i_reserved_data_blocks=186 [ 156.889152][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 926 with error 28 [ 156.934985][ T4328] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.982944][ T4328] usb 5-1: device descriptor read/8, error -71 [ 157.275139][ T4328] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.325684][ T4328] usb 5-1: device descriptor read/8, error -71 [ 157.452500][ T4328] usb usb5-port1: unable to enumerate USB device [ 158.578918][ T5706] loop4: detected capacity change from 0 to 512 [ 158.611887][ T5706] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 158.685015][ T5706] block device autoloading is deprecated and will be removed. [ 158.714680][ T5706] EXT4-fs (loop4): couldn't read superblock of external journal [ 159.024018][ T5680] Set syz1 is full, maxelem 65536 reached [ 159.218343][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 159.675103][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.172645][ T5717] device ip6tnl1 entered promiscuous mode [ 160.346425][ T4297] usbhid 4-1:0.0: can't add hid device: -71 [ 160.352888][ T4297] usbhid: probe of 4-1:0.0 failed with error -71 [ 160.410959][ T4297] usb 4-1: USB disconnect, device number 2 [ 160.504449][ T5725] loop3: detected capacity change from 0 to 2048 [ 160.548439][ T5725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.747198][ T5739] loop2: detected capacity change from 0 to 2048 [ 160.789242][ T5739] GPT:first_usable_lbas don't match. [ 160.794760][ T5739] GPT:34 != 290 [ 160.798452][ T5739] GPT: Use GNU Parted to correct GPT errors. [ 160.804593][ T5739] loop2: p1 p2 p3 [ 160.928214][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.267964][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 161.503436][ T4293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 161.565719][ T4293] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 161.625516][ T4293] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.625516][ T4293] [ 161.647857][ T4293] EXT4-fs (loop3): Total free blocks count 0 [ 161.690408][ T5753] device syzkaller0 entered promiscuous mode [ 161.696466][ T4293] EXT4-fs (loop3): Free/Dirty block details [ 161.696490][ T4293] EXT4-fs (loop3): free_blocks=2415919504 [ 161.696509][ T4293] EXT4-fs (loop3): dirty_blocks=7184 [ 161.696523][ T4293] EXT4-fs (loop3): Block reservation details [ 161.696537][ T4293] EXT4-fs (loop3): i_reserved_data_blocks=449 [ 161.791867][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 161.894478][ T4294] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.085011][ T4294] usb 5-1: Using ep0 maxpacket: 32 [ 162.093406][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.123558][ T4294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.159790][ T4294] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 162.194459][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.231602][ T4294] usb 5-1: config 0 descriptor?? [ 162.357870][ T5772] loop2: detected capacity change from 0 to 128 [ 162.502619][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 162.502636][ T26] audit: type=1800 audit(1744142034.146:141): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file0" dev="loop2" ino=1048596 res=0 errno=0 [ 164.604224][ T5767] netlink: 'syz.1.518': attribute type 13 has an invalid length. [ 164.708590][ T5767] gretap0: refused to change device tx_queue_len [ 164.720715][ T5767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.760360][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 164.785419][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.918587][ T4294] usbhid 5-1:0.0: can't add hid device: -71 [ 164.924768][ T4294] usbhid: probe of 5-1:0.0 failed with error -71 [ 164.970917][ T4294] usb 5-1: USB disconnect, device number 6 [ 165.573778][ T5807] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.047937][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.769124][ T5810] device bridge0 entered promiscuous mode [ 167.775212][ T5810] device macvlan2 entered promiscuous mode [ 167.786388][ T5810] device bridge0 left promiscuous mode [ 168.292845][ T5828] netlink: 'syz.4.534': attribute type 13 has an invalid length. [ 168.334385][ T5828] gretap0: refused to change device tx_queue_len [ 168.353141][ T5828] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.572530][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 168.585452][ T5840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 168.636243][ T5840] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 168.703171][ T5846] loop2: detected capacity change from 0 to 512 [ 168.752990][ T5846] EXT4-fs: Invalid want_extra_isize 5 [ 168.981271][ T26] audit: type=1326 audit(1744142040.616:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.053967][ T26] audit: type=1326 audit(1744142040.646:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.122695][ T26] audit: type=1326 audit(1744142040.656:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.183384][ T26] audit: type=1326 audit(1744142040.656:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.218490][ T26] audit: type=1326 audit(1744142040.656:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.275401][ T26] audit: type=1326 audit(1744142040.656:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.332968][ T26] audit: type=1326 audit(1744142040.656:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.399709][ T26] audit: type=1326 audit(1744142040.656:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.467683][ T26] audit: type=1326 audit(1744142040.656:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.524431][ T26] audit: type=1326 audit(1744142040.656:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.3.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 169.959550][ T5890] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 169.968443][ T5890] netlink: 224 bytes leftover after parsing attributes in process `syz.3.546'. [ 170.117267][ T5894] atomic_op ffff888056ccf998 conn xmit_atomic 0000000000000000 [ 170.362035][ T5907] netlink: 'syz.3.550': attribute type 13 has an invalid length. [ 170.525416][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.570750][ T5918] loop2: detected capacity change from 0 to 512 [ 170.604730][ T5918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.551: inode #1: comm syz.2.551: iget: illegal inode # [ 170.674445][ T5918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.551: error while reading EA inode 1 err=-117 [ 170.710235][ T5918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.551: inode #1: comm syz.2.551: iget: illegal inode # [ 170.752039][ T5907] gretap0: refused to change device tx_queue_len [ 170.790285][ T5907] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.817259][ T5918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.551: error while reading EA inode 1 err=-117 [ 170.851386][ T5918] EXT4-fs (loop2): 1 orphan inode deleted [ 170.869674][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.233700][ T5939] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 171.816211][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 171.817398][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.019732][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 172.054561][ T5958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.064816][ T5958] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.092086][ T5959] loop2: detected capacity change from 0 to 512 [ 172.121325][ T5959] EXT4-fs: Invalid want_extra_isize 5 [ 172.194466][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.238776][ T5965] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 172.261728][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.555'. [ 172.314998][ T5965] team0: Port device geneve0 added [ 172.367969][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.460799][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.601206][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.753621][ T5961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.780706][ T5961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.812653][ T5961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.833561][ T5961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.336567][ T6002] netlink: 'syz.2.562': attribute type 13 has an invalid length. [ 173.588430][ T6002] gretap0: refused to change device tx_queue_len [ 173.605160][ T6002] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.906780][ T6023] set match dimension is over the limit! [ 174.029240][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 174.158162][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 174.168126][ T6035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.178355][ T6035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.214497][ T6038] loop3: detected capacity change from 0 to 512 [ 174.236095][ T6038] EXT4-fs: Invalid want_extra_isize 5 [ 174.293988][ T4267] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.903831][ T6047] loop2: detected capacity change from 0 to 2048 [ 174.948961][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.851778][ T46] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 175.869056][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 175.882156][ T46] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.882156][ T46] [ 175.892369][ T46] EXT4-fs (loop2): Total free blocks count 0 [ 175.898592][ T46] EXT4-fs (loop2): Free/Dirty block details [ 175.904508][ T46] EXT4-fs (loop2): free_blocks=2415919504 [ 175.910704][ T46] EXT4-fs (loop2): dirty_blocks=9520 [ 175.916400][ T46] EXT4-fs (loop2): Block reservation details [ 175.922438][ T46] EXT4-fs (loop2): i_reserved_data_blocks=595 [ 175.962056][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 176.075899][ T6058] device bridge0 entered promiscuous mode [ 176.083036][ T6058] device macvlan2 entered promiscuous mode [ 176.105080][ T6058] device bridge0 left promiscuous mode [ 176.286849][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.846285][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.946101][ T6066] netlink: 'syz.2.576': attribute type 13 has an invalid length. [ 176.962865][ T6066] gretap0: refused to change device tx_queue_len [ 177.018632][ T6066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.494074][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 177.506560][ T6079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 177.516447][ T6079] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 177.551552][ T6081] loop3: detected capacity change from 0 to 512 [ 177.585590][ T6081] EXT4-fs: Invalid want_extra_isize 5 [ 177.627238][ T4267] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.370314][ T6089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.416735][ T6091] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 178.433794][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 178.472986][ T6089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.533368][ T6089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.572546][ T6089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.666246][ T6089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.689496][ T6089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.711025][ T6089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.734424][ T6089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.963427][ T6104] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.991827][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 179.008059][ T6103] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.018201][ T6103] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.913273][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 180.002737][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 180.002755][ T26] audit: type=1326 audit(1744142051.636:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 180.084981][ T26] audit: type=1326 audit(1744142051.636:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 180.126848][ T26] audit: type=1326 audit(1744142051.646:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 180.149841][ T26] audit: type=1326 audit(1744142051.646:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 180.179311][ T26] audit: type=1326 audit(1744142051.646:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 180.593789][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.603'. [ 181.302153][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 182.048590][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.242360][ T6169] loop2: detected capacity change from 0 to 764 [ 182.416195][ T6171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.690437][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.963193][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 183.418598][ T6203] loop4: detected capacity change from 0 to 256 [ 183.439906][ T6203] netlink: 'syz.4.628': attribute type 4 has an invalid length. [ 183.703269][ T6207] device syzkaller0 entered promiscuous mode [ 185.855419][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 186.090320][ T6235] loop3: detected capacity change from 0 to 512 [ 186.141693][ T6235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.150963][ T6235] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.165967][ T6235] EXT4-fs (loop3): unmounting filesystem. [ 187.040815][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 187.162592][ T6254] device syzkaller0 entered promiscuous mode [ 187.811504][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.822920][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.498413][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 189.596818][ T6276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.610910][ T6276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.637564][ T6280] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 189.645511][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.656'. [ 189.692306][ T6280] team0: Port device geneve0 added [ 189.783061][ T6276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.793926][ T6276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.904138][ T6276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.914723][ T6276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.013264][ T6276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.023745][ T6276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.040012][ T6287] netlink: 'syz.4.659': attribute type 13 has an invalid length. [ 190.048943][ T6287] gretap0: refused to change device tx_queue_len [ 190.056172][ T6287] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.122957][ T6276] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.155907][ T6276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.176647][ T6276] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.185171][ T6276] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.224165][ T6290] device syzkaller0 entered promiscuous mode [ 190.236532][ T6276] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.247455][ T6276] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.043100][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 192.070689][ T6276] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.094939][ T6276] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.431998][ T6304] loop3: detected capacity change from 0 to 512 [ 192.464115][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.666'. [ 192.477971][ T6304] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 192.487427][ T6304] EXT4-fs (loop3): couldn't read superblock of external journal [ 192.497145][ T6308] netlink: 'syz.2.668': attribute type 13 has an invalid length. [ 192.523100][ T6308] gretap0: refused to change device tx_queue_len [ 192.532597][ T6308] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.728918][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 192.846441][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.926992][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.217112][ T6331] loop4: detected capacity change from 0 to 512 [ 193.254515][ T6331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.263717][ T6331] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.596191][ T6336] netlink: 'syz.3.678': attribute type 13 has an invalid length. [ 193.604290][ T6336] gretap0: refused to change device tx_queue_len [ 193.614718][ T6336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.770843][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 193.839942][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 194.019692][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 194.210450][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216307][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 194.216853][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.305632][ T6361] netlink: 'syz.4.687': attribute type 13 has an invalid length. [ 194.314069][ T6361] gretap0: refused to change device tx_queue_len [ 194.321220][ T6361] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.575963][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 195.684186][ T6386] netlink: 'syz.3.696': attribute type 13 has an invalid length. [ 195.754431][ T6386] gretap0: refused to change device tx_queue_len [ 195.771607][ T6386] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.936367][ T6392] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.986512][ T6396] netlink: 'syz.4.698': attribute type 10 has an invalid length. [ 195.995493][ T6396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'. [ 196.014355][ T6395] loop2: detected capacity change from 0 to 512 [ 196.040970][ T6395] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 196.050657][ T6392] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.066979][ T6395] EXT4-fs (loop2): couldn't read superblock of external journal [ 196.140441][ T6392] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.223335][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 196.257138][ T6392] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.426600][ T6392] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.471715][ T6392] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.494413][ T6392] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.511702][ T6392] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.660352][ T6411] netlink: 'syz.4.707': attribute type 13 has an invalid length. [ 196.669233][ T6411] gretap0: refused to change device tx_queue_len [ 196.676322][ T6411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.788365][ T6416] netlink: 'syz.2.716': attribute type 13 has an invalid length. [ 196.796572][ T6416] gretap0: refused to change device tx_queue_len [ 196.803059][ T6416] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.083740][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 197.357198][ T26] audit: type=1326 audit(1744142068.996:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.385620][ T26] audit: type=1326 audit(1744142068.996:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.414590][ T26] audit: type=1326 audit(1744142069.016:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.443456][ T26] audit: type=1326 audit(1744142069.016:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.473422][ T26] audit: type=1326 audit(1744142069.016:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.502917][ T26] audit: type=1326 audit(1744142069.016:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.531617][ T26] audit: type=1326 audit(1744142069.016:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.567680][ T26] audit: type=1326 audit(1744142069.016:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.652022][ T6435] netlink: 'syz.2.718': attribute type 13 has an invalid length. [ 197.681112][ T26] audit: type=1326 audit(1744142069.016:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 197.685772][ T6435] gretap0: refused to change device tx_queue_len [ 197.710517][ T6435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.764759][ T26] audit: type=1326 audit(1744142069.016:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 198.123854][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 198.685820][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.685820][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.806165][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 198.832055][ T6463] netlink: 'syz.3.728': attribute type 13 has an invalid length. [ 198.840884][ T6463] gretap0: refused to change device tx_queue_len [ 198.855009][ T6463] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.314455][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 199.641512][ T6489] netlink: 'syz.2.738': attribute type 13 has an invalid length. [ 199.665766][ T6489] gretap0: refused to change device tx_queue_len [ 199.672181][ T6489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.786209][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 200.088029][ T6507] loop2: detected capacity change from 0 to 512 [ 200.122988][ T6507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.132315][ T6507] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.882696][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 200.997306][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 202.400429][ T6531] device bridge0 entered promiscuous mode [ 202.407556][ T6531] device macvlan2 entered promiscuous mode [ 202.428449][ T6531] device bridge0 left promiscuous mode [ 202.736226][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 203.805656][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.100624][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 204.968756][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.569923][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.582376][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.733366][ T6638] device bridge0 entered promiscuous mode [ 209.739655][ T6638] device macvlan2 entered promiscuous mode [ 209.756936][ T6638] device bridge0 left promiscuous mode [ 210.131576][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.021431][ T6649] 9pnet_fd: Insufficient options for proto=fd [ 211.072779][ T6599] Set syz1 is full, maxelem 65536 reached [ 211.222690][ T6659] loop4: detected capacity change from 0 to 512 [ 211.231254][ T6659] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 211.241123][ T6659] EXT4-fs (loop4): couldn't read superblock of external journal [ 212.250751][ T6674] device bridge0 entered promiscuous mode [ 212.259903][ T6674] device macvlan2 entered promiscuous mode [ 212.282932][ T6674] device bridge0 left promiscuous mode [ 212.318027][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 212.676834][ T6683] loop4: detected capacity change from 0 to 512 [ 212.725444][ T6683] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 212.740504][ T6683] EXT4-fs (loop4): couldn't read superblock of external journal [ 213.542224][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 213.781642][ T6697] loop2: detected capacity change from 0 to 512 [ 213.799104][ T6697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.822515][ T6697] EXT4-fs (loop2): 1 truncate cleaned up [ 213.828468][ T6697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.937936][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 214.046007][ T6703] loop2: detected capacity change from 0 to 512 [ 214.075496][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.084520][ T6703] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.459501][ T6709] loop3: detected capacity change from 0 to 512 [ 214.471655][ T6709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.487027][ T6709] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.551259][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 214.688227][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.711273][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.924537][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 215.308582][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.317783][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.327922][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.360842][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.812924][ T6716] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.821426][ T6716] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.830012][ T6716] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.838513][ T6716] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.972547][ T6722] device bridge0 entered promiscuous mode [ 216.986047][ T6722] device macvlan2 entered promiscuous mode [ 217.001137][ T6722] device bridge0 left promiscuous mode [ 219.250881][ T6762] device macvlan2 entered promiscuous mode [ 219.263944][ T6762] device bridge0 entered promiscuous mode [ 219.299498][ T6762] device bridge0 left promiscuous mode [ 220.187169][ T6770] tipc: Enabled bearer , priority 0 [ 220.237740][ T6768] tipc: Resetting bearer [ 220.453523][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.100380][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.208856][ T6778] loop3: detected capacity change from 0 to 1024 [ 221.258350][ T7] tipc: Node number set to 2886997007 [ 221.295265][ T6778] __quota_error: 7 callbacks suppressed [ 221.295286][ T6778] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 221.328252][ T6778] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 221.337844][ T6778] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.834: Failed to acquire dquot type 0 [ 221.367453][ T6778] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 221.392250][ T6778] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.834: corrupted inode contents [ 221.418371][ T6778] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #13: comm syz.3.834: mark_inode_dirty error [ 221.442458][ T6778] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.834: corrupted inode contents [ 221.459518][ T6778] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.834: mark_inode_dirty error [ 221.471829][ T6778] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.834: corrupted inode contents [ 221.501083][ T6778] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 221.516733][ T6778] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.834: corrupted inode contents [ 221.535559][ T6778] EXT4-fs error (device loop3): ext4_truncate:4311: inode #13: comm syz.3.834: mark_inode_dirty error [ 221.553171][ T6778] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 221.563710][ T6778] EXT4-fs (loop3): 1 truncate cleaned up [ 221.572685][ T6778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.683891][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 222.585215][ T6768] tipc: Disabling bearer [ 223.178911][ T6806] loop3: detected capacity change from 0 to 512 [ 223.208675][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.217932][ T6806] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.965792][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 226.220636][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.780440][ T26] audit: type=1326 audit(1744142098.416:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 226.833534][ T26] audit: type=1326 audit(1744142098.416:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 226.856561][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.883174][ T26] audit: type=1326 audit(1744142098.426:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 226.946446][ T26] audit: type=1326 audit(1744142098.426:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 226.969832][ T26] audit: type=1326 audit(1744142098.426:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 227.024958][ T26] audit: type=1326 audit(1744142098.426:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 227.064984][ T26] audit: type=1326 audit(1744142098.426:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 227.104954][ T26] audit: type=1326 audit(1744142098.426:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 227.159386][ T26] audit: type=1326 audit(1744142098.426:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 227.254911][ T26] audit: type=1326 audit(1744142098.426:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 228.172338][ T6890] loop4: detected capacity change from 0 to 128 [ 228.183974][ T6890] EXT4-fs: Ignoring removed nobh option [ 228.224915][ T6890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.245482][ T6890] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.303987][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 229.852446][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 229.865448][ T6936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 229.876015][ T6936] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 229.910423][ T6937] loop4: detected capacity change from 0 to 512 [ 229.917449][ T6937] EXT4-fs: Invalid want_extra_isize 5 [ 229.956088][ T4267] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.724920][ T5788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 230.918149][ T5788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 230.947574][ T5788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.959215][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.967896][ T5788] usb 3-1: Product: syz [ 230.972188][ T5788] usb 3-1: Manufacturer: syz [ 230.977402][ T5788] usb 3-1: SerialNumber: syz [ 231.192889][ T5788] cdc_ncm 3-1:1.0: bind() failure [ 231.202121][ T5788] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 231.209791][ T5788] cdc_ncm 3-1:1.1: bind() failure [ 231.220103][ T5788] usb 3-1: USB disconnect, device number 2 [ 231.885635][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.976526][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.058891][ T6975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.900'. [ 232.724525][ T6992] device bridge0 entered promiscuous mode [ 232.731369][ T6992] device macvlan2 entered promiscuous mode [ 232.753502][ T6992] device bridge0 left promiscuous mode [ 233.896491][ T6999] loop4: detected capacity change from 0 to 2048 [ 233.941906][ T6999] loop4: p1 < > p4 [ 233.950842][ T6999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 233.980049][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 233.980067][ T26] audit: type=1326 audit(1744142105.616:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.013803][ T26] audit: type=1326 audit(1744142105.656:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.036988][ T26] audit: type=1326 audit(1744142105.656:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.146052][ T26] audit: type=1326 audit(1744142105.656:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.224686][ T26] audit: type=1326 audit(1744142105.656:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.255430][ T26] audit: type=1326 audit(1744142105.656:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.295413][ T26] audit: type=1326 audit(1744142105.656:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.353781][ T26] audit: type=1326 audit(1744142105.656:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.394905][ T26] audit: type=1326 audit(1744142105.686:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 234.396318][ T7009] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.435049][ T26] audit: type=1326 audit(1744142105.686:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 235.741450][ T7024] loop3: detected capacity change from 0 to 164 [ 235.795105][ T7024] Unable to read rock-ridge attributes [ 235.818123][ T7024] Unable to read rock-ridge attributes [ 235.964065][ T7028] loop2: detected capacity change from 0 to 2048 [ 236.041145][ T7028] loop2: p1 < > p4 [ 236.055800][ T7028] loop2: p4 size 8388608 extends beyond EOD, truncated [ 236.749690][ T7045] loop2: detected capacity change from 0 to 8192 [ 237.729908][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.811601][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.926105][ T7053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.579156][ T7056] loop4: detected capacity change from 0 to 128 [ 238.624730][ T7058] SET target dimension over the limit! [ 238.672171][ T7056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.695313][ T7056] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.793801][ T7056] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.929: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 238.853425][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 240.443461][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 240.468923][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 241.884654][ T7109] loop2: detected capacity change from 0 to 128 [ 241.924106][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 241.924124][ T26] audit: type=1326 audit(1744142113.556:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 241.960201][ T26] audit: type=1326 audit(1744142113.556:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 241.989491][ T26] audit: type=1326 audit(1744142113.556:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.015128][ T4267] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.018764][ T26] audit: type=1326 audit(1744142113.576:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.056950][ T26] audit: type=1326 audit(1744142113.576:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.110547][ T26] audit: type=1326 audit(1744142113.576:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.170405][ T26] audit: type=1326 audit(1744142113.576:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.170999][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 242.235052][ T26] audit: type=1326 audit(1744142113.576:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.277867][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 242.286340][ T26] audit: type=1326 audit(1744142113.576:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.365098][ T26] audit: type=1326 audit(1744142113.596:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 242.775466][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.487171][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.205112][ T7157] $H: renamed from bond0 [ 244.230781][ T7157] device $H entered promiscuous mode [ 244.255175][ T7157] device bond_slave_0 entered promiscuous mode [ 244.272330][ T7157] device bond_slave_1 entered promiscuous mode [ 245.799163][ T7184] loop4: detected capacity change from 0 to 512 [ 245.871958][ T7184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 245.881127][ T7184] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.558848][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 247.009375][ T7227] tipc: New replicast peer: 255.255.255.255 [ 247.016060][ T7227] tipc: Enabled bearer , priority 10 [ 247.023040][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'. [ 247.036658][ T7227] tipc: Disabling bearer [ 247.885315][ T4898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.615547][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.794080][ T7254] tipc: New replicast peer: 255.255.255.255 [ 249.804374][ T7254] tipc: Enabled bearer , priority 10 [ 249.811974][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 249.821490][ T7255] tipc: Disabling bearer [ 250.115956][ T7277] unsupported nlmsg_type 40 [ 250.881423][ T7284] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 250.891049][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1011'. [ 251.485252][ T7293] tipc: Started in network mode [ 251.578945][ T7293] tipc: Node identity ac14140f, cluster identity 4711 [ 251.790865][ T7293] tipc: New replicast peer: 255.255.255.255 [ 251.955540][ T7293] tipc: Enabled bearer , priority 10 [ 251.980105][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 252.002458][ T7297] tipc: Disabling bearer [ 252.240032][ T7307] loop2: detected capacity change from 0 to 512 [ 252.303283][ T7307] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1019: pblk 19 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 252.333594][ T7307] EXT4-fs error (device loop2): ext4_quota_enable:6989: comm syz.2.1019: Bad quota inode: 4, type: 1 [ 252.351158][ T7307] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.369437][ T7307] EXT4-fs (loop2): mount failed [ 252.482748][ T7318] netlink: 'syz.4.1022': attribute type 10 has an invalid length. [ 252.492036][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 252.814886][ T7331] tipc: New replicast peer: 255.255.255.255 [ 252.821190][ T7331] tipc: Enabled bearer , priority 10 [ 252.833191][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 252.842332][ T7331] tipc: Disabling bearer [ 253.170446][ T7340] loop3: detected capacity change from 0 to 8192 [ 253.386392][ T7342] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 253.394715][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1032'. [ 253.725414][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.526064][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.769831][ T7362] tipc: New replicast peer: 255.255.255.255 [ 254.805277][ T7362] tipc: Enabled bearer , priority 10 [ 254.819213][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 254.841252][ T7362] tipc: Disabling bearer [ 254.872229][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 254.941874][ T7366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.966131][ T7366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.982748][ T7368] loop2: detected capacity change from 0 to 512 [ 254.998025][ T7368] EXT4-fs: Invalid want_extra_isize 5 [ 255.036548][ T4267] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.646418][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652834][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.758817][ T7382] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 255.767557][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1044'. [ 257.408767][ T7412] loop4: detected capacity change from 0 to 512 [ 257.431232][ T7412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 257.440650][ T7412] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.454930][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1052: corrupted inode contents [ 257.472640][ T7412] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.1052: mark_inode_dirty error [ 257.486519][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1052: corrupted inode contents [ 257.524177][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1052: corrupted inode contents [ 257.540471][ T7412] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.1052: mark_inode_dirty error [ 257.552920][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1052: corrupted inode contents [ 257.572246][ T7412] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1052: mark_inode_dirty error [ 257.586443][ T7412] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1052: corrupted inode contents [ 257.599904][ T7412] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.1052: mark_inode_dirty error [ 257.642644][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 257.924465][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 257.924488][ T26] audit: type=1326 audit(1744142129.556:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 257.989082][ T26] audit: type=1326 audit(1744142129.586:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 258.083176][ T26] audit: type=1326 audit(1744142129.586:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 258.114927][ T26] audit: type=1326 audit(1744142129.586:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 258.137481][ T26] audit: type=1326 audit(1744142129.596:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6758d169 code=0x7ffc0000 [ 259.486397][ T4927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.527916][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 260.293433][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.901181][ T26] audit: type=1326 audit(1744142132.536:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 260.932247][ T26] audit: type=1326 audit(1744142132.566:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 260.958523][ T27] Process accounting resumed [ 260.976569][ T26] audit: type=1326 audit(1744142132.566:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 261.024234][ T26] audit: type=1326 audit(1744142132.566:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 261.047823][ T26] audit: type=1326 audit(1744142132.566:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c18d169 code=0x7ffc0000 [ 261.210468][ T7480] loop2: detected capacity change from 0 to 512 [ 261.219635][ T7480] EXT4-fs: Ignoring removed oldalloc option [ 261.255647][ T7480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1072: Parent and EA inode have the same ino 15 [ 261.268896][ T7480] EXT4-fs (loop2): Remounting filesystem read-only [ 261.276265][ T7480] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1072: Parent and EA inode have the same ino 15 [ 261.290678][ T7480] EXT4-fs (loop2): Remounting filesystem read-only [ 261.297543][ T7480] EXT4-fs (loop2): 1 orphan inode deleted [ 261.303493][ T7480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.317955][ T7480] EXT4-fs (loop2): unmounting filesystem. [ 261.529791][ T7486] 9pnet_fd: Insufficient options for proto=fd [ 262.886382][ T7498] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1079'. [ 263.138761][ T7508] loop4: detected capacity change from 0 to 512 [ 263.252516][ T7508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.252857][ T7513] 9pnet_fd: Insufficient options for proto=fd [ 263.266739][ T7508] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.444670][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 264.920022][ T7530] device bridge0 entered promiscuous mode [ 264.943062][ T7530] device macvlan2 entered promiscuous mode [ 265.023595][ T7530] device bridge0 left promiscuous mode [ 265.256227][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.886553][ T4897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.705926][ T7609] loop4: detected capacity change from 0 to 1024 [ 269.794652][ T7609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 271.005517][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.007195][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.490894][ T7631] loop2: detected capacity change from 0 to 512 [ 272.525711][ T7631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.534716][ T7631] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.031593][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 273.031607][ T26] audit: type=1326 audit(1744142144.666:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.061712][ T7635] loop3: detected capacity change from 0 to 2048 [ 273.070836][ T26] audit: type=1326 audit(1744142144.666:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.093859][ T26] audit: type=1326 audit(1744142144.666:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.116698][ T26] audit: type=1326 audit(1744142144.666:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.139152][ T26] audit: type=1326 audit(1744142144.666:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.161683][ T26] audit: type=1326 audit(1744142144.666:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdfd818d169 code=0x7ffc0000 [ 273.184130][ T26] audit: type=1326 audit(1744142144.666:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfd818d1a3 code=0x7ffc0000 [ 273.208095][ T26] audit: type=1326 audit(1744142144.676:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdfd818bc1f code=0x7ffc0000 [ 273.225303][ T7635] loop3: p1 < > p3 [ 273.230346][ T26] audit: type=1326 audit(1744142144.686:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdfd818d1f7 code=0x7ffc0000 [ 273.261020][ T7635] loop3: p3 size 134217728 extends beyond EOD, truncated [ 273.289375][ T26] audit: type=1326 audit(1744142144.696:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.3.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfd818bad0 code=0x7ffc0000 [ 273.321730][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 273.617766][ T7643] 9pnet_fd: Insufficient options for proto=fd [ 274.329132][ T7659] loop2: detected capacity change from 0 to 512 [ 274.370095][ T7659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.379416][ T7659] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.124219][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 276.045581][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.765495][ T5051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.419303][ T7714] device bridge0 entered promiscuous mode [ 278.425976][ T7714] device macvlan2 entered promiscuous mode [ 278.459023][ T7714] device bridge0 left promiscuous mode [ 281.004700][ T7729] loop2: detected capacity change from 0 to 1024 [ 281.037172][ T7729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 281.069161][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 281.069180][ T26] audit: type=1800 audit(1744142152.706:360): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1166" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 281.090256][ T7729] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 281.141616][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 281.705735][ T7744] device bridge0 entered promiscuous mode [ 281.711915][ T7744] device macvlan2 entered promiscuous mode [ 281.802220][ T7744] device bridge0 left promiscuous mode [ 281.885382][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.526438][ T5051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.220660][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 283.230230][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1179'. [ 283.567554][ T7771] 9pnet_fd: Insufficient options for proto=fd [ 284.611131][ T7779] netlink: 'syz.3.1185': attribute type 7 has an invalid length. [ 284.619905][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 287.574998][ T7803] netlink: 'syz.3.1194': attribute type 7 has an invalid length. [ 287.583068][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 287.645836][ T4926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.049807][ T7817] loop3: detected capacity change from 0 to 8192 [ 288.285358][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.435901][ T7831] loop3: detected capacity change from 0 to 512 [ 289.482589][ T7831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.491811][ T7831] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.235355][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 290.770557][ T7836] netlink: 'syz.3.1203': attribute type 7 has an invalid length. [ 290.778491][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 290.892081][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 290.906899][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1205'. [ 291.265665][ T7855] netlink: 'syz.3.1211': attribute type 7 has an invalid length. [ 291.273583][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 293.410462][ T4898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.045505][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.784801][ C0] sched: RT throttling activated [ 299.081603][ T7885] loop3: detected capacity change from 0 to 512 [ 299.099594][ T7885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.121528][ T7885] EXT4-fs (loop3): 1 truncate cleaned up [ 299.127342][ T7885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.141588][ T7885] EXT4-fs (loop3): shut down requested (2) [ 299.166290][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.181584][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 299.805494][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.925388][ T5051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.565978][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.045614][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.327437][ T4736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.525088][ T28] INFO: task kworker/0:4:4295 blocked for more than 143 seconds. [ 314.532907][ T28] Not tainted 6.1.133-syzkaller #0 [ 314.539623][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.548457][ T28] task:kworker/0:4 state:D stack:22816 pid:4295 ppid:2 flags:0x00004000 [ 314.558093][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 314.565000][ T28] Call Trace: [ 314.568472][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 314.571757][ T28] __schedule+0x143f/0x4570 [ 314.576490][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 314.582434][ T28] ? print_irqtrace_events+0x210/0x210 [ 314.588033][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.593363][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 314.598679][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 314.604200][ T28] schedule+0xbf/0x180 [ 314.614823][ T28] schedule_preempt_disabled+0xf/0x20 [ 314.620429][ T28] __mutex_lock+0x6b9/0xd80 [ 314.634900][ T28] ? __mutex_lock+0x53c/0xd80 [ 314.639675][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 314.700840][ T28] ? mutex_lock_nested+0x10/0x10 [ 314.705986][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 314.712633][ T28] ? print_irqtrace_events+0x210/0x210 [ 314.728911][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 314.735089][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.740346][ T28] ? process_one_work+0x806/0x1260 [ 314.745553][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 314.751660][ T28] ? process_one_work+0x806/0x1260 [ 314.756859][ T28] process_one_work+0x917/0x1260 [ 314.761862][ T28] ? worker_detach_from_pool+0x260/0x260 [ 314.767641][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 314.773261][ T28] ? kthread_data+0x4e/0xc0 [ 314.777870][ T28] ? wq_worker_running+0x97/0x190 [ 314.782960][ T28] worker_thread+0xa47/0x1200 [ 314.787766][ T28] ? _raw_spin_unlock+0x40/0x40 [ 314.792650][ T28] kthread+0x28d/0x320 [ 314.796779][ T28] ? worker_clr_flags+0x190/0x190 [ 314.801833][ T28] ? kthread_blkcg+0xd0/0xd0 [ 314.806586][ T28] ret_from_fork+0x1f/0x30 [ 314.811051][ T28] [ 314.814097][ T28] INFO: task syz.1.539:5838 blocked for more than 143 seconds. [ 314.821752][ T28] Not tainted 6.1.133-syzkaller #0 [ 314.827569][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.836319][ T28] task:syz.1.539 state:D stack:23648 pid:5838 ppid:4249 flags:0x00004004 [ 314.845633][ T28] Call Trace: [ 314.848956][ T28] [ 314.851908][ T28] __schedule+0x143f/0x4570 [ 314.856576][ T28] ? __mutex_lock+0x6b4/0xd80 [ 314.861333][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 314.867338][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 314.872841][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.878167][ T28] schedule+0xbf/0x180 [ 314.882274][ T28] schedule_preempt_disabled+0xf/0x20 [ 314.887778][ T28] __mutex_lock+0x6b9/0xd80 [ 314.892335][ T28] ? __mutex_lock+0x53c/0xd80 [ 314.897109][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 314.902452][ T28] ? mutex_lock_nested+0x10/0x10 [ 314.907540][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.912773][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 314.918143][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 314.924073][ T28] ? _raw_spin_unlock+0x40/0x40 [ 314.929104][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 314.934274][ T28] ? nfc_unregister_device+0x290/0x290 [ 314.940032][ T28] rfkill_set_block+0x1e7/0x430 [ 314.945003][ T28] rfkill_fop_write+0x5b7/0x790 [ 314.949905][ T28] ? rfkill_fop_read+0x470/0x470 [ 314.954949][ T28] ? fsnotify_perm+0x64/0x590 [ 314.959797][ T28] ? security_file_permission+0x75/0xa0 [ 314.965418][ T28] ? rfkill_fop_read+0x470/0x470 [ 314.970470][ T28] vfs_write+0x2d9/0xbc0 [ 314.975261][ T28] ? do_sys_openat2+0x1f9/0x4f0 [ 314.980346][ T28] ? file_end_write+0x250/0x250 [ 314.985312][ T28] ? __fget_files+0x28/0x4a0 [ 314.989934][ T28] ? __fget_files+0x435/0x4a0 [ 314.994638][ T28] ? __fget_files+0x28/0x4a0 [ 314.999297][ T28] ? __fdget_pos+0x1db/0x360 [ 315.003914][ T28] ? ksys_write+0x77/0x2c0 [ 315.008426][ T28] ksys_write+0x19c/0x2c0 [ 315.012784][ T28] ? print_irqtrace_events+0x210/0x210 [ 315.018372][ T28] ? __ia32_sys_read+0x80/0x80 [ 315.023174][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 315.029248][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 315.034488][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 315.040578][ T28] do_syscall_64+0x3b/0xb0 [ 315.045156][ T28] ? clear_bhb_loop+0x45/0xa0 [ 315.049848][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.055857][ T28] RIP: 0033:0x7f1b1018d169 [ 315.060319][ T28] RSP: 002b:00007f1b11005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.068831][ T28] RAX: ffffffffffffffda RBX: 00007f1b103a5fa0 RCX: 00007f1b1018d169 [ 315.076872][ T28] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 315.085116][ T28] RBP: 00007f1b1020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.093128][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.101217][ T28] R13: 0000000000000000 R14: 00007f1b103a5fa0 R15: 00007fff38df3c98 [ 315.109306][ T28] [ 315.112348][ T28] INFO: task syz.0.541:5844 blocked for more than 143 seconds. [ 315.119991][ T28] Not tainted 6.1.133-syzkaller #0 [ 315.125671][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.134335][ T28] task:syz.0.541 state:D stack:25864 pid:5844 ppid:4251 flags:0x00004004 [ 315.143608][ T28] Call Trace: [ 315.146980][ T28] [ 315.149930][ T28] __schedule+0x143f/0x4570 [ 315.154482][ T28] ? __mutex_lock+0x6b4/0xd80 [ 315.159368][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 315.165347][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 315.170869][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 315.176206][ T28] schedule+0xbf/0x180 [ 315.180326][ T28] schedule_preempt_disabled+0xf/0x20 [ 315.185797][ T28] __mutex_lock+0x6b9/0xd80 [ 315.190333][ T28] ? kobject_put+0x422/0x460 [ 315.195005][ T28] ? __mutex_lock+0x53c/0xd80 [ 315.199712][ T28] ? rfkill_unregister+0xcc/0x220 [ 315.204744][ T28] ? mutex_lock_nested+0x10/0x10 [ 315.209820][ T28] ? kill_device+0x160/0x160 [ 315.214437][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 315.220142][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 315.226191][ T28] rfkill_unregister+0xcc/0x220 [ 315.231066][ T28] nfc_unregister_device+0x92/0x290 [ 315.236346][ T28] virtual_ncidev_close+0x55/0x90 [ 315.241391][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 315.246581][ T28] __fput+0x3f6/0x8d0 [ 315.250599][ T28] task_work_run+0x246/0x300 [ 315.255282][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 315.260338][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 315.266012][ T28] exit_to_user_mode_loop+0xde/0x100 [ 315.271356][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 315.276981][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 315.282575][ T28] do_syscall_64+0x47/0xb0 [ 315.287075][ T28] ? clear_bhb_loop+0x45/0xa0 [ 315.291799][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.297787][ T28] RIP: 0033:0x7f1f70f8d169 [ 315.302220][ T28] RSP: 002b:00007ffe48b2d5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 315.310725][ T28] RAX: 0000000000000000 RBX: 00007f1f711a7ba0 RCX: 00007f1f70f8d169 [ 315.318753][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 315.326792][ T28] RBP: 00007f1f711a7ba0 R08: 0000000000006c5c R09: 0000000548b2d8df [ 315.334861][ T28] R10: 00007f1f711a7ac0 R11: 0000000000000246 R12: 00000000000295d1 [ 315.342853][ T28] R13: 00007ffe48b2d6e0 R14: ffffffffffffffff R15: 00007ffe48b2d700 [ 315.350897][ T28] [ 315.353958][ T28] [ 315.353958][ T28] Showing all locks held in the system: [ 315.362831][ T28] 1 lock held by rcu_tasks_kthre/12: [ 315.368233][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 315.378897][ T28] 1 lock held by rcu_tasks_trace/13: [ 315.384176][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 315.395273][ T28] 1 lock held by khungtaskd/28: [ 315.400142][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 315.410513][ T28] 5 locks held by kworker/u4:3/46: [ 315.415796][ T28] 2 locks held by getty/4005: [ 315.420491][ T28] #0: ffff88814ca8d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 315.430362][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 315.440686][ T28] 1 lock held by syz-executor/4258: [ 315.445944][ T28] #0: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 315.456175][ T28] 3 locks held by kworker/0:4/4295: [ 315.461412][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 315.471891][ T28] #1: ffffc90003f97d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 315.485008][ T28] #2: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 315.496428][ T28] 2 locks held by syz.1.539/5838: [ 315.501488][ T28] #0: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 315.511681][ T28] #1: ffff8880290d7100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 315.521481][ T28] 2 locks held by syz.0.541/5844: [ 315.526584][ T28] #0: ffff8880290d7100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 315.536416][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 315.546623][ T28] 2 locks held by syz-executor/6216: [ 315.551957][ T28] #0: ffff888029988118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 315.562085][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 315.572172][ T28] 2 locks held by syz-executor/6217: [ 315.577551][ T28] #0: ffff88807b44a918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 315.587655][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 315.597813][ T28] 2 locks held by syz-executor/7160: [ 315.603121][ T28] #0: ffff888027452918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 315.613231][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 315.623264][ T28] 2 locks held by syz-executor/7163: [ 315.628637][ T28] #0: ffff888055f31918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 315.638847][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 315.648870][ T28] 2 locks held by syz-executor/7794: [ 315.654162][ T28] #0: ffff888055727118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 315.664249][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 315.674290][ T28] 2 locks held by syz.2.1215/7868: [ 315.679529][ T28] #0: ffffffff8daaf548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 315.688119][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 315.698306][ T28] 1 lock held by syz.3.1222/7891: [ 315.703416][ T28] #0: ffffffff8daaf548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 315.712154][ T28] 1 lock held by syz-executor/7898: [ 315.717407][ T28] #0: ffffffff8daaf548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 315.725983][ T28] 1 lock held by syz-executor/7899: [ 315.731558][ T28] #0: ffffffff8daaf548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 315.740107][ T28] 1 lock held by syz-executor/7901: [ 315.745370][ T28] #0: ffffffff8daaf548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 315.753985][ T28] [ 315.756551][ T28] ============================================= [ 315.756551][ T28] [ 315.765134][ T28] NMI backtrace for cpu 1 [ 315.769462][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 315.777358][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.787415][ T28] Call Trace: [ 315.790694][ T28] [ 315.793639][ T28] dump_stack_lvl+0x1e3/0x2cb [ 315.798367][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 315.803827][ T28] ? panic+0x764/0x764 [ 315.807893][ T28] ? vprintk_emit+0x622/0x740 [ 315.812585][ T28] ? printk_sprint+0x490/0x490 [ 315.817347][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 315.822465][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 315.827418][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 315.833618][ T28] ? _printk+0xd1/0x111 [ 315.837783][ T28] ? panic+0x764/0x764 [ 315.841867][ T28] ? __wake_up_klogd+0xcc/0x100 [ 315.846728][ T28] ? panic+0x764/0x764 [ 315.850801][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 315.856881][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 315.862867][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 315.868945][ T28] watchdog+0xf88/0xfd0 [ 315.873119][ T28] ? watchdog+0x1f8/0xfd0 [ 315.877468][ T28] kthread+0x28d/0x320 [ 315.881542][ T28] ? hungtask_pm_notify+0x50/0x50 [ 315.886602][ T28] ? kthread_blkcg+0xd0/0xd0 [ 315.891199][ T28] ret_from_fork+0x1f/0x30 [ 315.895658][ T28] [ 315.899040][ T28] Sending NMI from CPU 1 to CPUs 0: [ 315.902893][ T4293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.904270][ C0] NMI backtrace for cpu 0 [ 315.904281][ C0] CPU: 0 PID: 4293 Comm: kworker/u4:5 Not tainted 6.1.133-syzkaller #0 [ 315.904300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.904310][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 315.904338][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x0/0x80 [ 315.904364][ C0] Code: 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 04 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 <4c> 8b 04 24 65 48 8b 0d 04 c3 77 7e 65 8b 05 05 c3 77 7e 25 00 01 [ 315.904378][ C0] RSP: 0018:ffffc90003ea66b8 EFLAGS: 00000206 [ 315.904392][ C0] RAX: ffffffff8aabc5ca RBX: 0000000000000001 RCX: ffff88802c933b80 [ 315.904405][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000007ffffff9 [ 315.904417][ C0] RBP: ffffc90003ea67b0 R08: 0000000000000001 R09: ffffffff8aabc5a0 [ 315.904430][ C0] R10: 0000000000000012 R11: ffff88802c933b80 R12: ffffc90003ea6a06 [ 315.904443][ C0] R13: 000000007ffffff9 R14: dffffc0000000000 R15: ffffffff8b0ce445 [ 315.904456][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 315.904471][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.904484][ C0] CR2: 00007f26c86d7d60 CR3: 000000002fed5000 CR4: 00000000003506f0 [ 315.904500][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.904510][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.904521][ C0] Call Trace: [ 315.904527][ C0] [ 315.904532][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 315.904551][ C0] ? read_lock_is_recursive+0x10/0x10 [ 315.904578][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 315.904597][ C0] ? nmi_handle+0x25/0x440 [ 315.904631][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 315.904647][ C0] ? nmi_handle+0x12e/0x440 [ 315.904679][ C0] ? nmi_handle+0x25/0x440 [ 315.904704][ C0] ? __sanitizer_cov_trace_cmp4+0x80/0x80 [ 315.904727][ C0] ? default_do_nmi+0x62/0x150 [ 315.904747][ C0] ? exc_nmi+0xa8/0x100 [ 315.904769][ C0] ? end_repeat_nmi+0x16/0x31 [ 315.904795][ C0] ? vsnprintf+0x190/0x1c70 [ 315.904818][ C0] ? vsnprintf+0x1ba/0x1c70 [ 315.904842][ C0] ? __sanitizer_cov_trace_cmp4+0x80/0x80 [ 315.904866][ C0] ? __sanitizer_cov_trace_cmp4+0x80/0x80 [ 315.904890][ C0] ? __sanitizer_cov_trace_cmp4+0x80/0x80 [ 315.904914][ C0] [ 315.904919][ C0] [ 315.904924][ C0] vsnprintf+0x1c8/0x1c70 [ 315.904950][ C0] ? ptr_to_hashval+0x70/0x70 [ 315.904971][ C0] ? memcpy+0x3c/0x60 [ 315.904997][ C0] sprintf+0xd6/0x120 [ 315.905018][ C0] ? _prb_read_valid+0xbcc/0xbe0 [ 315.905039][ C0] ? vsprintf+0x30/0x30 [ 315.905066][ C0] info_print_prefix+0x167/0x300 [ 315.905086][ C0] ? msg_add_dict_text+0x3c0/0x3c0 [ 315.905103][ C0] ? format_decode+0x72f/0x1f10 [ 315.905124][ C0] ? print_irqtrace_events+0x210/0x210 [ 315.905153][ C0] record_print_text+0x142/0x430 [ 315.905176][ C0] ? kmsg_dump_get_line+0x4e0/0x4e0 [ 315.905193][ C0] ? prb_read_valid+0xa5/0xf0 [ 315.905212][ C0] ? prb_final_commit+0x90/0x90 [ 315.905235][ C0] console_emit_next_record+0x635/0xc30 [ 315.905261][ C0] ? info_print_prefix+0x300/0x300 [ 315.905281][ C0] ? __lock_acquire+0x125b/0x1f80 [ 315.905322][ C0] console_unlock+0x278/0x7c0 [ 315.905342][ C0] ? vprintk_emit+0x740/0x740 [ 315.905357][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 315.905378][ C0] ? vprintk_emit+0x340/0x740 [ 315.905393][ C0] vprintk_emit+0x523/0x740 [ 315.905409][ C0] ? printk_sprint+0x490/0x490 [ 315.905428][ C0] ? mark_lock+0x9a/0x340 [ 315.905448][ C0] _printk+0xd1/0x111 [ 315.905468][ C0] ? ip_vs_schedule+0x8f6/0x2280 [ 315.905489][ C0] ? panic+0x764/0x764 [ 315.905514][ C0] ip_vs_schedule+0x192d/0x2280 [ 315.905539][ C0] ? ip_vs_conn_hashkey_param+0x3a7/0x6b0 [ 315.905560][ C0] ? __ip_vs_conn_in_get+0x9c/0xc60 [ 315.905578][ C0] ? __ip_vs_conn_in_get+0xc01/0xc60 [ 315.905597][ C0] ? ip_vs_init_hash_table+0x170/0x170 [ 315.905617][ C0] ? __nf_ct_refresh_acct+0x280/0x350 [ 315.905637][ C0] ? ip_vs_conn_hashkey_param+0x3a7/0x6b0 [ 315.905657][ C0] ? ip_vs_conn_in_get+0x160/0x160 [ 315.905681][ C0] ? ip_vs_conn_out_get+0xba2/0xbf0 [ 315.905703][ C0] ? ip_vs_service_find+0xd8a/0xf40 [ 315.905725][ C0] ? ip_vs_fill_iph_skb_off+0x320/0x810 [ 315.905747][ C0] udp_conn_schedule+0x38d/0x740 [ 315.905767][ C0] ? __udp_exit+0x40/0x40 [ 315.905783][ C0] ? ip_vs_conn_out_get+0xbf0/0xbf0 [ 315.905805][ C0] ip_vs_in_hook+0xe16/0x2230 [ 315.905830][ C0] ? ip_vs_out_hook+0x1260/0x1260 [ 315.905858][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 315.905888][ C0] ? nf_nat_ipv4_local_fn+0x3d9/0x520 [ 315.905906][ C0] ? ip_vs_out_hook+0x1260/0x1260 [ 315.905925][ C0] nf_hook_slow+0xae/0x1e0 [ 315.905949][ C0] ? nf_hook+0x450/0x450 [ 315.905975][ C0] nf_hook+0x2c0/0x450 [ 315.906001][ C0] ? nf_hook+0x9a/0x450 [ 315.906025][ C0] ? __ip_local_out+0x5c0/0x5c0 [ 315.906052][ C0] ? nf_hook+0x450/0x450 [ 315.906077][ C0] ? __lock_acquire+0x125b/0x1f80 [ 315.906102][ C0] ? ip_fast_csum+0x1ec/0x2a0 [ 315.906122][ C0] __ip_local_out+0x4ae/0x5c0 [ 315.906147][ C0] ? nf_hook+0x450/0x450 [ 315.906173][ C0] ip_local_out+0x26/0x120 [ 315.906190][ C0] iptunnel_xmit+0x51a/0x920 [ 315.906218][ C0] udp_tunnel_xmit_skb+0x230/0x350 [ 315.906247][ C0] ? send4+0x2ba/0x11e0 [ 315.906267][ C0] send4+0xb84/0x11e0 [ 315.906295][ C0] ? send4+0x2ba/0x11e0 [ 315.906315][ C0] ? wg_socket_send_skb_to_peer+0x1d0/0x1d0 [ 315.906345][ C0] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 315.906369][ C0] wg_packet_handshake_send_worker+0x1d9/0x310 [ 315.906392][ C0] ? wg_prev_queue_dequeue+0x210/0x210 [ 315.906421][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 315.906441][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 315.906462][ C0] ? process_one_work+0x806/0x1260 [ 315.906483][ C0] process_one_work+0x917/0x1260 [ 315.906511][ C0] ? worker_detach_from_pool+0x260/0x260 [ 315.906534][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 315.906552][ C0] ? kthread_data+0x4e/0xc0 [ 315.906579][ C0] ? wq_worker_running+0x97/0x190 [ 315.906597][ C0] worker_thread+0xa47/0x1200 [ 315.906619][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 315.906652][ C0] kthread+0x28d/0x320 [ 315.906673][ C0] ? worker_clr_flags+0x190/0x190 [ 315.906693][ C0] ? kthread_blkcg+0xd0/0xd0 [ 315.906709][ C0] ret_from_fork+0x1f/0x30 [ 315.906739][ C0] [ 315.913582][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 315.913599][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 315.913623][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.913636][ T28] Call Trace: [ 315.913646][ T28] [ 315.913654][ T28] dump_stack_lvl+0x1e3/0x2cb [ 315.913683][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 315.913708][ T28] ? panic+0x764/0x764 [ 315.913735][ T28] ? llist_add_batch+0x160/0x1d0 [ 315.913764][ T28] ? vscnprintf+0x59/0x80 [ 315.913796][ T28] panic+0x318/0x764 [ 315.913827][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 315.913853][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 315.913884][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 315.913917][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 315.913942][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 315.913968][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 315.913992][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 315.914019][ T28] watchdog+0xfc7/0xfd0 [ 315.914057][ T28] ? watchdog+0x1f8/0xfd0 [ 315.914093][ T28] kthread+0x28d/0x320 [ 315.914114][ T28] ? hungtask_pm_notify+0x50/0x50 [ 315.914144][ T28] ? kthread_blkcg+0xd0/0xd0 [ 315.914167][ T28] ret_from_fork+0x1f/0x30 [ 315.914211][ T28] [ 315.917558][ T28] Kernel Offset: disabled [ 316.677924][ T28] Rebooting in 86400 seconds..