last executing test programs: 1m1.888175417s ago: executing program 1 (id=961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000004000000000000000008500000017000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semget$private(0x0, 0x4000, 0x555) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = eventfd2(0xb73, 0x801) r4 = fsmount(0xffffffffffffffff, 0x0, 0x82) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x14) write$cgroup_int(r5, &(0x7f0000000000)=0x91f, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) io_submit(r2, 0x5, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x80, r1, &(0x7f0000000540)="a5da2198d7e9d8558db7cd5b907fbf3a10369a89d87befc862fcd7a60038ee1fa668d382f2f91c619bf71fcef7370af7762adceb9853f5cc5a714914f12e3723b2b85b780694998e19c8a5c6282a735840759aa648808e9ae2df4c63fc78db62b3ab82e0ed6e3ab88c7907597e730720ad50b7c8341088a4297ef01c759206db0b377edae51f002c297b30dff31018ac33a4fff3fe12967f81a5beadd2bf3da4c4dcbaf21abae0e4263eef8155005ed412f29916832869b130f6d88e406342922aa9b245ad3127d6841406d27ecd6e2399626faee4f386a9416b22244b97d00e70268b8128c058fc87065cb4543cf8724a40d834", 0xf4, 0x8b24, 0x0, 0x0, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000780)="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", 0xfd, 0xc605, 0x0, 0x1, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x401, r0, &(0x7f0000000340)="d80f8e18f60e54db7d4ef4680a12bfcc8691c935f6e688501de5dc8b3eded1db9302f19d225836004febd072a330b505c339768e758952e80387ab5216dd0a6c26ad3b8500c8995b4493674495f8a127cd531a6151b348c188c97e5647390e16d9b7701b5d39632c773072649bbbd3b3239f400257850d4c6dc04f2f20bdb07c6a626f23a1b8bae2108733a41d3ef76d6cc533bad934eecd916db5d183f0ea0ca8159397e1936f6a7097", 0xaa, 0x5, 0x0, 0x0, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000880)="360bad809f94ee8db1b7f5e8dec8389f199fc805c23b80145f914de9a988a354884278797fdc172b61402f75308c360d5cb6a738a6eb15bc9592e1c593dcf2471062ae3c01090d37cd3d12f85f3acd792d7b24c385bc8b0960a184cf727233adb1e9bcc96bc45a78377c3c6b3d131cab1a9448a7b9749e9b4d98bbdd6b2681066e7cb6d1eb42d5c2b73b5f7548f8aa16c5b278930de4613cd9bb696eac9b245283b0b092e96848a1a2a17a1cab16d5531e8bd1e929dcbf90ae8d7b", 0xbb, 0x5, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0xffff, r6, &(0x7f0000000700)="795e53c9b31d8587925b11a901e55a1f72a10e0e52af1effe1295bc4d0aad1f157431a63c2c976dd369f66dcf1c991505e8d70b1", 0x34, 0x2}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000040)=@generic={0x1, 0xffffffffffff7fff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) 1m0.670070581s ago: executing program 1 (id=972): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0"]) 59.214655993s ago: executing program 1 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, 0x0, 0x40) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x400000002, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 59.058490366s ago: executing program 1 (id=982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 58.389078285s ago: executing program 1 (id=994): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r0 = gettid() r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x0) tkill(r0, 0x7) 55.888107453s ago: executing program 1 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0xda46}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 55.409759867s ago: executing program 32 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0xda46}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.065260055s ago: executing program 3 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x210, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x168, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x14c, 0x6, [@m_mirred={0xe4, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xb5, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9f175a2197d89121af0d976d2ec57cc85f19e63f752afd4e5dcec7b20ac52043f46883ce0db024eb1738448b508cac9a3581aa6150f6f3857e242dba946fdb14b091191b9e199e40ed08e99ec0b676720a21ac8cae293af06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x38, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x5, 0x6, 'f'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 10.900069947s ago: executing program 3 (id=1261): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 10.423680105s ago: executing program 3 (id=1266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) 7.172630233s ago: executing program 2 (id=1291): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'bridge_slave_0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 6.959631525s ago: executing program 2 (id=1293): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03", 0x4}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40), 0x0, 0x0, 0x1450}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 6.460546346s ago: executing program 2 (id=1299): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) 6.385036045s ago: executing program 4 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 6.289174589s ago: executing program 3 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x2) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0/file0\x00') 6.213699664s ago: executing program 2 (id=1303): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fchdir(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x20000000}, 0x18) fchmodat(0xffffffffffffffff, 0x0, 0x28) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5") socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee7719890000000000000000"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 6.013376858s ago: executing program 4 (id=1304): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 3.969343681s ago: executing program 5 (id=1306): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 3.817430941s ago: executing program 4 (id=1307): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.718404346s ago: executing program 3 (id=1308): ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000200)={0x5, @output={0x0, 0x0, {0x8, 0x9}, 0x2, 0xff}}) 3.676411076s ago: executing program 6 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x4000) 3.431523025s ago: executing program 5 (id=1311): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03", 0x4}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40), 0x0, 0x0, 0x1450}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 3.431107305s ago: executing program 4 (id=1312): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.341064891s ago: executing program 3 (id=1313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) 3.33757725s ago: executing program 2 (id=1314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='6', 0x1}, {&(0x7f0000000200)="1b", 0x1}], 0x2}], 0x1, 0x4000000) 3.273379262s ago: executing program 0 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.914989224s ago: executing program 6 (id=1316): unshare(0x28020480) fadvise64(0xffffffffffffffff, 0x1a, 0x1, 0x4) 2.840152656s ago: executing program 5 (id=1317): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)="99367b", 0xffffffffffffff8c, 0x40000180, 0x1}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x14, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x4000000) 2.796236575s ago: executing program 0 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 2.749140521s ago: executing program 2 (id=1319): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$inet6(0xa, 0x6, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x44080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_stats}) 2.673305884s ago: executing program 4 (id=1320): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1200004, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$eJzs3bFu00AYB/DPKSQpQ9UZMViwMFXAExShIiEiIYEywAQSTC0LLIGpI6/AW6JO3Q4lZxMcB4kAjgn8fks++e873/ksZ8rl5Y23p5+GsTAeFzE4juO4LOIwBnHzIB8/j5b99iEAYFdcphRfUtb3WACA7fD9DwD/n2fPXzy+P5mcPC3LccTFeVEdn03z58NHk5M75cLhstXFbDbdi/rcuzmfNvOrca1qfy/nZTMfxu1bOZ9nD55MVvJRvO5y4gAAAAAAAAAAAAAAAAAAAAAA0KOj8pvW/j6L/OhHea6+2x9oZf+ez3H9ytamAQAAAAAAAAAAAAAAAAAAADvt/bguPnw8fXV29ubdjhcppTSfzyatRtU9+J2rH/wFc28VEWuieuk36bBu091Q094f7LCcF0VE9LwEv/hEDZurM6hufndDLdY8Est3xKjztxAAAAAAAAAAAAAAAAAAABCNn/33PRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6M/y//83LNIod/ATJ6+77v6W5wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/7WsAAAD//wc2Fgs=") mkdir(&(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000035c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.659568252s ago: executing program 5 (id=1321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 2.564986125s ago: executing program 6 (id=1322): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 2.33888486s ago: executing program 0 (id=1323): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2.259055498s ago: executing program 4 (id=1324): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.157097182s ago: executing program 5 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x2) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0/file0\x00') 2.10354195s ago: executing program 6 (id=1326): socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f485000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000340)=ANY=[], 0x0) 1.979080191s ago: executing program 0 (id=1327): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 665.601491ms ago: executing program 0 (id=1328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) 559.014312ms ago: executing program 6 (id=1329): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03", 0x4}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40), 0x0, 0x0, 0x1450}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 298.758516ms ago: executing program 5 (id=1330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x4000) 197.323958ms ago: executing program 0 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 0s ago: executing program 6 (id=1332): openat$zero(0xffffffffffffff9c, 0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100"], 0x48) openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840)={0xc28c0, 0x8b, 0xc}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000181100800000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.703260][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.3.530 Not tainted 6.14.0-syzkaller #0 [ 180.703298][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.703314][ T7741] Call Trace: [ 180.703324][ T7741] [ 180.703334][ T7741] dump_stack_lvl+0x241/0x360 [ 180.703376][ T7741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.703405][ T7741] ? __pfx__printk+0x10/0x10 [ 180.703436][ T7741] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 180.703473][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.703520][ T7741] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 180.703556][ T7741] warn_alloc+0x278/0x410 [ 180.703596][ T7741] ? __pfx_warn_alloc+0x10/0x10 [ 180.703629][ T7741] ? translate_table+0x181/0x2370 [ 180.703657][ T7741] ? __get_vm_area_node+0x1c8/0x2d0 [ 180.703703][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.703743][ T7741] ? __get_vm_area_node+0x25c/0x2d0 [ 180.703790][ T7741] __vmalloc_node_range_noprof+0x62f/0x1380 [ 180.703861][ T7741] ? rcu_is_watching+0x15/0xb0 [ 180.703893][ T7741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.703936][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.703975][ T7741] ? rcu_is_watching+0x15/0xb0 [ 180.704004][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704043][ T7741] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 180.704083][ T7741] ? __kvmalloc_node_noprof+0x72/0x190 [ 180.704133][ T7741] __kvmalloc_node_noprof+0x142/0x190 [ 180.704175][ T7741] ? translate_table+0x181/0x2370 [ 180.704202][ T7741] translate_table+0x181/0x2370 [ 180.704240][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704281][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704327][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704373][ T7741] ? __pfx_translate_table+0x10/0x10 [ 180.704399][ T7741] ? __might_fault+0xaa/0x120 [ 180.704425][ T7741] ? __pfx_lock_release+0x10/0x10 [ 180.704477][ T7741] ? __virt_addr_valid+0x183/0x530 [ 180.704504][ T7741] ? __might_fault+0xaa/0x120 [ 180.704526][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704565][ T7741] ? __might_fault+0xc6/0x120 [ 180.704597][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704639][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704677][ T7741] ? copy_from_sockptr_offset+0x6b/0xb0 [ 180.704707][ T7741] do_ipt_set_ctl+0xe3d/0x1250 [ 180.704739][ T7741] ? nf_setsockopt+0x240/0x2c0 [ 180.704775][ T7741] ? do_ip_setsockopt+0x2824/0x3ae0 [ 180.704800][ T7741] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 180.704827][ T7741] ? rcu_is_watching+0x15/0xb0 [ 180.704855][ T7741] ? trace_contention_end+0x3c/0x120 [ 180.704894][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.704933][ T7741] ? __mutex_unlock_slowpath+0x227/0x800 [ 180.704990][ T7741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.705034][ T7741] ? __pfx___mutex_lock+0x10/0x10 [ 180.705082][ T7741] nf_setsockopt+0x297/0x2c0 [ 180.705115][ T7741] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.705159][ T7741] smc_setsockopt+0x277/0xd10 [ 180.705201][ T7741] ? __pfx_smc_setsockopt+0x10/0x10 [ 180.705234][ T7741] ? aa_sock_opt_perm+0x79/0x120 [ 180.705282][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.705321][ T7741] ? __pfx_smc_setsockopt+0x10/0x10 [ 180.705352][ T7741] do_sock_setsockopt+0x3b1/0x720 [ 180.705385][ T7741] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 180.705413][ T7741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.705450][ T7741] ? __fget_files+0x395/0x410 [ 180.705489][ T7741] ? __fget_files+0x2a/0x410 [ 180.705535][ T7741] __x64_sys_setsockopt+0x1ee/0x280 [ 180.705571][ T7741] do_syscall_64+0xf3/0x230 [ 180.705607][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.705643][ T7741] RIP: 0033:0x7f265a38d169 [ 180.705665][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.705685][ T7741] RSP: 002b:00007f265b22c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.705712][ T7741] RAX: ffffffffffffffda RBX: 00007f265a5a5fa0 RCX: 00007f265a38d169 [ 180.705731][ T7741] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 180.705747][ T7741] RBP: 00007f265a40e2a0 R08: 0000000000000298 R09: 0000000000000000 [ 180.705763][ T7741] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 180.705779][ T7741] R13: 0000000000000000 R14: 00007f265a5a5fa0 R15: 00007ffcde2d8338 [ 180.705814][ T7741] [ 180.705824][ T7741] Mem-Info: [ 181.182613][ T7741] active_anon:23431 inactive_anon:0 isolated_anon:0 [ 181.182613][ T7741] active_file:5104 inactive_file:47894 isolated_file:0 [ 181.182613][ T7741] unevictable:768 dirty:349 writeback:0 [ 181.182613][ T7741] slab_reclaimable:10585 slab_unreclaimable:103796 [ 181.182613][ T7741] mapped:33822 shmem:18243 pagetables:932 [ 181.182613][ T7741] sec_pagetables:0 bounce:0 [ 181.182613][ T7741] kernel_misc_reclaimable:0 [ 181.182613][ T7741] free:1271586 free_pcp:803 free_cma:0 [ 181.256450][ T7764] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 181.256450][ T7764] program syz.0.540 not setting count and/or reply_len properly [ 181.344160][ T7741] Node 0 active_anon:94124kB inactive_anon:0kB active_file:20416kB inactive_file:191500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135388kB dirty:1396kB writeback:0kB shmem:71436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:3528kB sec_pagetables:0kB all_unreclaimable? no [ 181.346901][ T5938] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.427302][ T7741] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 181.485275][ T7770] loop2: detected capacity change from 0 to 1024 [ 181.555367][ T5938] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.567574][ T7770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.609124][ T7770] EXT4-fs: Mount option(s) incompatible with ext2 [ 181.613861][ T7741] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.704398][ T7741] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 181.724528][ T7741] Node 0 DMA32 free:1165484kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:96448kB inactive_anon:0kB active_file:20416kB inactive_file:191152kB unevictable:1536kB writepending:1396kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:1440kB local_pcp:852kB free_cma:0kB [ 181.875493][ T7741] lowmem_reserve[]: 0 0 0 0 0 [ 181.907309][ T7741] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 181.978812][ T7741] lowmem_reserve[]: 0 0 0 0 0 [ 181.983691][ T7741] Node 1 Normal free:3908444kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.724888][ T7741] lowmem_reserve[]: 0 0 0 0 0 [ 182.827348][ T7741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.937326][ T7741] Node 0 DMA32: 72*4kB (UME) 153*8kB (UME) 24*16kB (UME) 68*32kB (UME) 36*64kB (UME) 21*128kB (UM) 7*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 2*2048kB (M) 279*4096kB (UM) = 1163368kB [ 182.998640][ T7780] netlink: 'syz.5.547': attribute type 4 has an invalid length. [ 183.006345][ T7780] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.547'. [ 183.032972][ T7741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.126407][ T7741] Node 1 Normal: 213*4kB (UM) 45*8kB (UME) 44*16kB (UME) 211*32kB (UME) 96*64kB (UME) 31*128kB (UME) 14*256kB (UME) 12*512kB (UME) 7*1024kB (UME) 5*2048kB (UE) 943*4096kB (M) = 3908444kB [ 183.331222][ T7741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.392151][ T7741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.402236][ T7741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.418331][ T7741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.428356][ T7741] 76930 total pagecache pages [ 183.433044][ T7741] 0 pages in swap cache [ 183.457302][ T7741] Free swap = 124672kB [ 183.647908][ T7741] Total swap = 124996kB [ 183.679249][ T7741] 2097051 pages RAM [ 183.733284][ T7741] 0 pages HighMem/MovableOnly [ 183.843702][ T7741] 427874 pages reserved [ 184.117346][ T7741] 0 pages cma reserved [ 184.423445][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 184.730490][ T7810] loop1: detected capacity change from 0 to 2048 [ 184.862639][ T7810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.950009][ T7809] ALSA: seq fatal error: cannot create timer (-19) [ 187.432821][ T1332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 187.504789][ T1332] EXT4-fs (loop1): Remounting filesystem read-only [ 187.557432][ T63] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 188.219690][ T7843] IPVS: Error connecting to the multicast addr [ 188.659007][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.875096][ T7868] loop0: detected capacity change from 0 to 1024 [ 189.895819][ T7866] $H: renamed from bond0 (while UP) [ 189.900570][ T7868] EXT4-fs: Ignoring removed bh option [ 189.938493][ T7868] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.961875][ T7866] $H: entered promiscuous mode [ 189.991827][ T7866] bond_slave_0: entered promiscuous mode [ 190.008254][ T7868] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 190.016214][ T7868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=d842e098, mo2=0000] [ 190.035268][ T7870] loop4: detected capacity change from 0 to 1024 [ 190.055426][ T7866] bond_slave_1: entered promiscuous mode [ 190.146850][ T7870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.160275][ T7868] EXT4-fs (loop0): orphan cleanup on readonly fs [ 190.276539][ T7868] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 190.305571][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 190.305594][ T30] audit: type=1800 audit(18760212.757:284): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.575" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 190.342899][ T7868] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #3: comm syz.0.574: mark_inode_dirty error [ 190.360014][ T7868] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.574: Invalid block bitmap block 3 in block_group 0 [ 190.417409][ T7868] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.574: Invalid block bitmap block 3 in block_group 0 [ 190.457525][ T7870] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 190.588935][ T7868] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.574: Invalid block bitmap block 3 in block_group 0 [ 190.648092][ T7868] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 190.710474][ T7868] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #3: comm syz.0.574: mark_inode_dirty error [ 190.723350][ T7868] Quota error (device loop0): write_blk: dquota write failed [ 190.732997][ T7868] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm syz.0.574: lblock 6 mapped to illegal pblock 1 (length 1) [ 190.749855][ T7868] Quota error (device loop0): write_blk: dquota write failed [ 190.759602][ T7868] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 190.769785][ T7868] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.574: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.003496][ T7868] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 191.183577][ T7868] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.574: Failed to acquire dquot type 0 [ 191.450235][ T7868] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 49: comm syz.0.574: lblock 1 mapped to illegal pblock 49 (length 1) [ 191.516600][ T7847] warn_alloc: 1 callbacks suppressed [ 191.516623][ T7847] syz.5.568: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 191.522962][ T7868] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 191.561871][ T7847] ,cpuset=/,mems_allowed=0-1 [ 191.573743][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: syz.5.568 Not tainted 6.14.0-syzkaller #0 [ 191.573779][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.573795][ T7847] Call Trace: [ 191.573803][ T7847] [ 191.573814][ T7847] dump_stack_lvl+0x241/0x360 [ 191.573853][ T7847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.573881][ T7847] ? __pfx__printk+0x10/0x10 [ 191.573912][ T7847] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 191.573948][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.573995][ T7847] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 191.574032][ T7847] warn_alloc+0x278/0x410 [ 191.574065][ T7847] ? __pfx_warn_alloc+0x10/0x10 [ 191.574101][ T7847] ? hash_netiface_create+0x356/0x1040 [ 191.574141][ T7847] ? __get_vm_area_node+0x1c8/0x2d0 [ 191.574182][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574222][ T7847] ? __get_vm_area_node+0x25c/0x2d0 [ 191.574268][ T7847] __vmalloc_node_range_noprof+0x62f/0x1380 [ 191.574341][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574380][ T7847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.574423][ T7847] ? hash_netiface_create+0x356/0x1040 [ 191.574459][ T7847] ? __get_vm_area_node+0x1c8/0x2d0 [ 191.574495][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574534][ T7847] ? __get_vm_area_node+0x25c/0x2d0 [ 191.574586][ T7847] __vmalloc_node_range_noprof+0x53a/0x1380 [ 191.574630][ T7847] ? hash_netiface_create+0x356/0x1040 [ 191.574668][ T7847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.574724][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574766][ T7847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.574809][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574848][ T7847] ? rcu_is_watching+0x15/0xb0 [ 191.574878][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574917][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.574955][ T7847] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 191.574993][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.575032][ T7847] ? __kvmalloc_node_noprof+0x72/0x190 [ 191.575080][ T7847] __kvmalloc_node_noprof+0x142/0x190 [ 191.575125][ T7847] ? hash_netiface_create+0x356/0x1040 [ 191.575164][ T7847] hash_netiface_create+0x356/0x1040 [ 191.575210][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.575256][ T7847] ? __pfx_hash_netiface_create+0x10/0x10 [ 191.575296][ T7847] ip_set_create+0xa7a/0x1960 [ 191.575342][ T7847] ? ip_set_create+0x48a/0x1960 [ 191.575387][ T7847] ? __pfx_ip_set_create+0x10/0x10 [ 191.575455][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.575498][ T7847] ? nfnetlink_rcv_msg+0x225/0x1180 [ 191.575542][ T7847] nfnetlink_rcv_msg+0xbee/0x1180 [ 191.575585][ T7847] ? nfnetlink_rcv_msg+0x225/0x1180 [ 191.575647][ T7847] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.575684][ T7847] ? stack_trace_save+0x118/0x1d0 [ 191.575745][ T7847] ? dev_hard_start_xmit+0x27c/0x7d0 [ 191.575773][ T7847] ? __dev_queue_xmit+0x1b73/0x3f50 [ 191.575801][ T7847] ? __netlink_deliver_tap+0x561/0x7f0 [ 191.575833][ T7847] ? netlink_deliver_tap+0x19d/0x1b0 [ 191.575863][ T7847] ? netlink_unicast+0x7c4/0x990 [ 191.575888][ T7847] ? netlink_sendmsg+0x8de/0xcb0 [ 191.575918][ T7847] ? __sock_sendmsg+0x223/0x270 [ 191.575956][ T7847] ? ____sys_sendmsg+0x53a/0x860 [ 191.575984][ T7847] ? __sys_sendmsg+0x269/0x350 [ 191.576027][ T7847] netlink_rcv_skb+0x208/0x480 [ 191.576059][ T7847] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.576102][ T7847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.576147][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576186][ T7847] ? apparmor_capable+0x13b/0x1b0 [ 191.576221][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576259][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576298][ T7847] ? security_capable+0x7e/0x2d0 [ 191.576343][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576387][ T7847] nfnetlink_rcv+0x297/0x2ab0 [ 191.576424][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576469][ T7847] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.576508][ T7847] ? __dev_queue_xmit+0x2f4/0x3f50 [ 191.576540][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576585][ T7847] ? __dev_queue_xmit+0x1775/0x3f50 [ 191.576613][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576657][ T7847] ? kasan_save_track+0x51/0x80 [ 191.576693][ T7847] ? ____sys_sendmsg+0x53a/0x860 [ 191.576725][ T7847] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.576763][ T7847] ? __dev_queue_xmit+0x2f4/0x3f50 [ 191.576797][ T7847] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.576844][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576883][ T7847] ? ref_tracker_free+0x643/0x7e0 [ 191.576909][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.576948][ T7847] ? __asan_memcpy+0x40/0x70 [ 191.576971][ T7847] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.576994][ T7847] ? __skb_clone+0x5c/0x6c0 [ 191.577030][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.577078][ T7847] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.577107][ T7847] ? skb_clone+0x240/0x390 [ 191.577137][ T7847] ? __pfx_lock_release+0x10/0x10 [ 191.577181][ T7847] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 191.577223][ T7847] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.577257][ T7847] netlink_unicast+0x7f8/0x990 [ 191.577294][ T7847] ? __pfx_netlink_unicast+0x10/0x10 [ 191.577320][ T7847] ? __virt_addr_valid+0x45f/0x530 [ 191.577345][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.577385][ T7847] ? __phys_addr_symbol+0x2f/0x70 [ 191.577408][ T7847] ? __check_object_size+0x47a/0x730 [ 191.577451][ T7847] netlink_sendmsg+0x8de/0xcb0 [ 191.577498][ T7847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.577535][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.577574][ T7847] ? aa_sock_msg_perm+0x91/0x160 [ 191.577624][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.577667][ T7847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.577698][ T7847] __sock_sendmsg+0x223/0x270 [ 191.577739][ T7847] ____sys_sendmsg+0x53a/0x860 [ 191.577767][ T7847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.577815][ T7847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.577840][ T7847] ? __fget_files+0x2a/0x410 [ 191.577887][ T7847] ? __fget_files+0x2a/0x410 [ 191.577933][ T7847] __sys_sendmsg+0x269/0x350 [ 191.577961][ T7847] ? __pfx_futex_wake+0x10/0x10 [ 191.578010][ T7847] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.578085][ T7847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.578129][ T7847] ? do_syscall_64+0x100/0x230 [ 191.578157][ T7847] ? do_syscall_64+0xb6/0x230 [ 191.578184][ T7847] do_syscall_64+0xf3/0x230 [ 191.578212][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.578247][ T7847] RIP: 0033:0x7f6b4e78d169 [ 191.578269][ T7847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.578289][ T7847] RSP: 002b:00007f6b4f5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.578316][ T7847] RAX: ffffffffffffffda RBX: 00007f6b4e9a5fa0 RCX: 00007f6b4e78d169 [ 191.578334][ T7847] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.578350][ T7847] RBP: 00007f6b4e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.578365][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.578380][ T7847] R13: 0000000000000000 R14: 00007f6b4e9a5fa0 R15: 00007ffeb44a82d8 [ 191.578414][ T7847] [ 192.285524][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.295655][ T7868] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 192.337397][ T7868] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.574: Failed to acquire dquot type 0 [ 192.348946][ T7847] Mem-Info: [ 192.379860][ T7868] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 192.397049][ T7847] active_anon:21352 inactive_anon:0 isolated_anon:0 [ 192.397049][ T7847] active_file:5104 inactive_file:47919 isolated_file:0 [ 192.397049][ T7847] unevictable:768 dirty:197 writeback:0 [ 192.397049][ T7847] slab_reclaimable:10628 slab_unreclaimable:103264 [ 192.397049][ T7847] mapped:34853 shmem:18501 pagetables:818 [ 192.397049][ T7847] sec_pagetables:0 bounce:0 [ 192.397049][ T7847] kernel_misc_reclaimable:0 [ 192.397049][ T7847] free:1260498 free_pcp:580 free_cma:0 [ 192.512798][ T7868] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #15: comm syz.0.574: mark_inode_dirty error [ 192.528365][ T7847] Node 0 active_anon:89040kB inactive_anon:0kB active_file:20416kB inactive_file:191576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143512kB dirty:796kB writeback:0kB shmem:75868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11356kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no [ 192.565107][ T7847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 192.597531][ T7847] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.629034][ T7847] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 192.634892][ T7847] Node 0 DMA32 free:1108492kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:94300kB inactive_anon:0kB active_file:20416kB inactive_file:191260kB unevictable:1536kB writepending:796kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:2288kB local_pcp:1652kB free_cma:0kB [ 192.665716][ T7847] lowmem_reserve[]: 0 0 0 0 0 [ 192.670723][ T7847] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 192.715658][ T7868] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 192.726288][ T7868] EXT4-fs (loop0): 1 orphan inode deleted [ 192.734343][ T7847] lowmem_reserve[]: 0 0 0 0 0 [ 192.735394][ T7868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.763516][ T7847] Node 1 Normal free:3908448kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.459377][ T7847] lowmem_reserve[]: 0 0 0 0 0 [ 193.496497][ T7847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.549600][ T7847] Node 0 DMA32: 3*4kB (ME) 2*8kB (UM) 11*16kB (UE) 8*32kB (UME) 8*64kB (UME) 3*128kB (UM) 22*256kB (ME) 10*512kB (M) 9*1024kB (ME) 5*2048kB (UM) 262*4096kB (M) = 1104716kB [ 193.616103][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.642556][ T7847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 193.691377][ T7847] Node 1 Normal: 214*4kB (UM) 45*8kB (UME) 44*16kB (UME) 211*32kB (UME) 96*64kB (UME) 31*128kB (UME) 14*256kB (UME) 12*512kB (UME) 7*1024kB (UME) 5*2048kB (UE) 943*4096kB (M) = 3908448kB [ 193.733212][ T7847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.742917][ T7847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.752471][ T7847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.762149][ T7847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.771666][ T7847] 71273 total pagecache pages [ 193.776359][ T7847] 0 pages in swap cache [ 193.780615][ T7847] Free swap = 124672kB [ 193.784782][ T7847] Total swap = 124996kB [ 193.788989][ T7847] 2097051 pages RAM [ 193.792810][ T7847] 0 pages HighMem/MovableOnly [ 193.800292][ T7847] 427874 pages reserved [ 193.804452][ T7847] 0 pages cma reserved [ 193.849892][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.814549][ T7930] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 195.510987][ T7939] netlink: 52 bytes leftover after parsing attributes in process `syz.1.596'. [ 195.823276][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 196.639611][ T7953] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.648550][ T7953] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.657547][ T7953] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.666273][ T7953] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.760950][ T7963] loop2: detected capacity change from 0 to 2048 [ 197.799374][ T7963] EXT4-fs: Ignoring removed bh option [ 197.884808][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.599271][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 198.939356][ T7983] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 199.020421][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.118160][ T30] audit: type=1326 audit(18760221.567:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 199.404363][ T30] audit: type=1326 audit(18760221.567:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 199.994877][ T30] audit: type=1326 audit(18760221.567:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 200.037447][ T30] audit: type=1326 audit(18760221.567:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 200.171958][ T30] audit: type=1326 audit(18760221.567:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 200.274666][ T7988] loop3: detected capacity change from 0 to 1024 [ 200.366195][ T7988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.119237][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 201.125396][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 201.133770][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 201.139993][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 201.148129][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 201.154236][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 201.347592][ T7968] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.497086][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.740967][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.428885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.781049][ T8003] syz.0.618: attempt to access beyond end of device [ 202.781049][ T8003] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 202.795363][ T8003] XFS (nbd0): SB validate failed with error -5. [ 202.997687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.778694][ T8036] netlink: 300 bytes leftover after parsing attributes in process `syz.3.629'. [ 205.214482][ T8056] loop0: detected capacity change from 0 to 1024 [ 205.269276][ T8056] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.275827][ T8056] EXT4-fs: inline encryption not supported [ 205.381288][ T8056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.523723][ T8053] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.532897][ T8053] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.541707][ T8053] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.550620][ T8053] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.597577][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 205.647790][ T8058] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.665399][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.678898][ T8058] IPv6: Can't replace route, no match found [ 205.786529][ T8055] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.216128][ T8071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.317391][ T8071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.435085][ T30] audit: type=1107 audit(18760228.887:290): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 206.529996][ T8075] syz.5.640: attempt to access beyond end of device [ 206.529996][ T8075] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 206.623682][ T8075] XFS (nbd5): SB validate failed with error -5. [ 206.647022][ T8088] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 206.691094][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.706045][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.794242][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.803204][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.242668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.447453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 208.177861][ T8109] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.007781][ T8128] netlink: 300 bytes leftover after parsing attributes in process `syz.4.660'. [ 211.691681][ T8145] syzkaller0: entered promiscuous mode [ 211.717340][ T8145] syzkaller0: entered allmulticast mode [ 211.755573][ T8148] loop3: detected capacity change from 0 to 256 [ 212.354562][ T8157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.670'. [ 212.574829][ T30] audit: type=1326 audit(18760235.027:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.609861][ T30] audit: type=1326 audit(18760235.057:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.664439][ T30] audit: type=1326 audit(18760235.057:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.715422][ T30] audit: type=1326 audit(18760235.057:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.780198][ T30] audit: type=1326 audit(18760235.057:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.836245][ T30] audit: type=1326 audit(18760235.057:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 212.995519][ T30] audit: type=1326 audit(18760235.057:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 213.066421][ T30] audit: type=1326 audit(18760235.057:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 213.097392][ T30] audit: type=1326 audit(18760235.057:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 213.165472][ T30] audit: type=1326 audit(18760235.057:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 213.972455][ T8137] Set syz1 is full, maxelem 65536 reached [ 217.179227][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 217.438957][ T8179] loop3: detected capacity change from 0 to 1024 [ 217.490389][ T8179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.667513][ T8192] gtp0: entered promiscuous mode [ 217.927481][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 217.927505][ T30] audit: type=1326 audit(18760240.337:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 217.989207][ T30] audit: type=1326 audit(18760240.337:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.012751][ T30] audit: type=1326 audit(18760240.357:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.035410][ T30] audit: type=1326 audit(18760240.357:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.697377][ T30] audit: type=1326 audit(18760240.357:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.817351][ T30] audit: type=1326 audit(18760240.357:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.956956][ T30] audit: type=1326 audit(18760240.357:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 218.979899][ T30] audit: type=1326 audit(18760240.367:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 219.002502][ T30] audit: type=1326 audit(18760240.367:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 219.026887][ T30] audit: type=1326 audit(18760240.367:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 219.143328][ T8216] netlink: 'syz.1.692': attribute type 2 has an invalid length. [ 219.195443][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.691'. [ 219.233040][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.636527][ T8230] pim6reg: entered allmulticast mode [ 219.652429][ T8230] pim6reg: left allmulticast mode [ 219.674062][ T8232] loop1: detected capacity change from 0 to 1024 [ 219.750385][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.002607][ T8242] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 220.021793][ T8242] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 220.034813][ T8242] EXT4-fs (loop1): This should not happen!! Data will be lost [ 220.034813][ T8242] [ 220.045459][ T8242] EXT4-fs (loop1): Total free blocks count 0 [ 220.052498][ T8242] EXT4-fs (loop1): Free/Dirty block details [ 220.052528][ T8243] 9pnet_fd: Insufficient options for proto=fd [ 220.064818][ T8242] EXT4-fs (loop1): free_blocks=4293918720 [ 220.070800][ T8242] EXT4-fs (loop1): dirty_blocks=48 [ 220.076012][ T8242] EXT4-fs (loop1): Block reservation details [ 220.082150][ T8242] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 220.493732][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.751437][ T8254] loop3: detected capacity change from 0 to 2048 [ 220.832814][ T8254] loop3: p1 < > p4 [ 220.878991][ T8254] loop3: p4 size 8388608 extends beyond EOD, truncated [ 220.933418][ T8256] loop0: detected capacity change from 0 to 1024 [ 221.138426][ T8256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.031482][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.210722][ T8276] tipc: Started in network mode [ 222.211106][ T8274] loop4: detected capacity change from 0 to 8192 [ 222.215972][ T8276] tipc: Node identity 7f000001, cluster identity 4711 [ 222.217015][ T8276] tipc: Enabled bearer , priority 10 [ 223.301212][ T47] tipc: Node number set to 2130706433 [ 224.012659][ T8294] loop0: detected capacity change from 0 to 2048 [ 224.044333][ T8294] EXT4-fs: Ignoring removed bh option [ 224.138805][ T8294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.359864][ T8307] 9pnet_fd: Insufficient options for proto=fd [ 224.664916][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.030696][ T8325] loop2: detected capacity change from 0 to 1024 [ 226.084268][ T8325] EXT4-fs: Ignoring removed orlov option [ 226.101594][ T8325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.547417][ T8325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.858604][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.948524][ T8333] 8021q: VLANs not supported on wg1 [ 228.001583][ T8333] siw: device registration error -23 [ 228.084694][ T8341] pim6reg: entered allmulticast mode [ 228.121518][ T8341] pim6reg: left allmulticast mode [ 228.368784][ T8348] vlan2: entered allmulticast mode [ 228.559915][ T8354] loop2: detected capacity change from 0 to 2048 [ 228.567941][ T8352] 9pnet_fd: Insufficient options for proto=fd [ 228.578245][ T8354] EXT4-fs: Ignoring removed bh option [ 229.583821][ T8354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.858528][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.036209][ T8340] @: renamed from vlan0 (while UP) [ 231.324425][ T8396] netlink: 'syz.0.752': attribute type 4 has an invalid length. [ 231.372796][ T8396] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.752'. [ 231.632330][ T8414] 9pnet_fd: Insufficient options for proto=fd [ 231.954023][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 231.954051][ T30] audit: type=1326 audit(18760254.407:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.009025][ T30] audit: type=1326 audit(18760254.407:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.033226][ T30] audit: type=1326 audit(18760254.437:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.105228][ T30] audit: type=1326 audit(18760254.437:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.163773][ T30] audit: type=1326 audit(18760254.437:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.250774][ T30] audit: type=1326 audit(18760254.447:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.297895][ T8440] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 232.327905][ T30] audit: type=1326 audit(18760254.447:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 232.371815][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.544922][ T8449] vlan2: entered allmulticast mode [ 232.676767][ T8456] 9pnet_fd: Insufficient options for proto=fd [ 232.764796][ T30] audit: type=1107 audit(18760255.217:374): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 233.232214][ T8473] loop0: detected capacity change from 0 to 764 [ 233.815424][ T8494] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 233.823820][ T8492] usb usb5: usbfs: process 8492 (syz.2.790) did not claim interface 0 before use [ 233.910845][ T8498] loop5: detected capacity change from 0 to 1024 [ 233.928411][ T8498] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.934973][ T8498] EXT4-fs: inline encryption not supported [ 233.999440][ T8498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.043142][ T8498] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.5.792: corrupted in-inode xattr: bad e_name length [ 234.064985][ T8505] capability: warning: `syz.4.794' uses deprecated v2 capabilities in a way that may be insecure [ 234.069656][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 234.087811][ T8498] EXT4-fs error (device loop5): ext4_xattr_ibody_get:653: inode #2: comm syz.5.792: corrupted in-inode xattr: bad e_name length [ 234.303576][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.308586][ T8510] 9pnet_fd: Insufficient options for proto=fd [ 234.450026][ T8521] Bluetooth: MGMT ver 1.23 [ 234.718260][ T8531] loop1: detected capacity change from 0 to 1024 [ 234.783436][ T8531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.839387][ T8531] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 235.003119][ T8547] loop5: detected capacity change from 0 to 256 [ 235.022833][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.235539][ T8521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.258331][ T8521] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 235.260474][ T8558] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 235.296977][ T30] audit: type=1107 audit(18760257.747:375): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 235.387620][ T8521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.393647][ T8521] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 235.438321][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.515279][ T8521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.556242][ T8521] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 235.658356][ T8521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.664335][ T8521] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 235.726377][ T8571] 9pnet_fd: Insufficient options for proto=fd [ 235.780741][ T8521] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.802100][ T8521] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 235.846105][ T8521] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.877648][ T8521] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 236.475959][ T8601] tipc: Started in network mode [ 236.484800][ T8601] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 236.525729][ T8601] tipc: Enabled bearer , priority 10 [ 236.803432][ T8612] loop5: detected capacity change from 0 to 4096 [ 236.820654][ T30] audit: type=1107 audit(18760259.277:376): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 236.889768][ T8612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.922371][ T8620] loop2: detected capacity change from 0 to 512 [ 236.998164][ T8620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.043925][ T8620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.097441][ T8620] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 237.134950][ T8612] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.824: corrupted inode contents [ 237.152731][ T8624] 9pnet_fd: Insufficient options for proto=fd [ 237.197596][ T30] audit: type=1326 audit(18760259.647:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.219693][ T8620] EXT4-fs (loop2): 1 truncate cleaned up [ 237.220778][ T8620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.285748][ T8612] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #15: comm syz.5.824: mark_inode_dirty error [ 237.295588][ T30] audit: type=1326 audit(18760259.687:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.343999][ T8612] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.824: corrupted inode contents [ 237.411138][ T30] audit: type=1326 audit(18760259.687:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.420479][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.437885][ T8612] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.824: mark_inode_dirty error [ 237.455907][ T30] audit: type=1326 audit(18760259.687:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.494068][ T8612] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.824: corrupted inode contents [ 237.524423][ T30] audit: type=1326 audit(18760259.687:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.534648][ T5939] tipc: Node number set to 4269801488 [ 237.577689][ T8612] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.824: mark_inode_dirty error [ 237.603217][ T30] audit: type=1326 audit(18760259.687:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.626883][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 237.638817][ T30] audit: type=1326 audit(18760259.687:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.665701][ T8612] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.824: corrupted inode contents [ 237.719862][ T30] audit: type=1326 audit(18760259.687:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.748595][ T8612] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.824: mark_inode_dirty error [ 237.808109][ T30] audit: type=1326 audit(18760259.687:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.811272][ T8612] EXT4-fs error (device loop5) in ext4_setattr:5569: Corrupt filesystem [ 237.888111][ T30] audit: type=1326 audit(18760259.687:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 237.981877][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.446280][ T8675] siw: device registration error -23 [ 239.764274][ T8683] loop0: detected capacity change from 0 to 1024 [ 239.772090][ T8683] EXT4-fs: Ignoring removed orlov option [ 239.777851][ T8683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.895339][ T8683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.441976][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.765259][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.847'. [ 240.900523][ T8704] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.837459][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 241.892888][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 242.095352][ T8727] loop0: detected capacity change from 0 to 512 [ 242.163521][ T8729] hub 9-0:1.0: USB hub found [ 242.179385][ T8729] hub 9-0:1.0: 1 port detected [ 242.233296][ T8727] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.855: iget: bogus i_mode (0) [ 242.239545][ T8735] loop3: detected capacity change from 0 to 512 [ 242.256673][ T8727] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.855: couldn't read orphan inode 17 (err -117) [ 242.271705][ T8727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.308555][ T8735] EXT4-fs: Ignoring removed i_version option [ 242.323763][ T8735] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.329381][ T8727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.855: bg 0: block 7: invalid block bitmap [ 242.346517][ T8735] ext4: Unknown parameter 'seclabel' [ 242.541948][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.755116][ T8756] netlink: 'syz.1.866': attribute type 4 has an invalid length. [ 242.790813][ T8759] loop0: detected capacity change from 0 to 256 [ 242.821685][ T8756] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.866'. [ 243.053099][ T8767] vlan2: entered allmulticast mode [ 243.076399][ T8768] loop1: detected capacity change from 0 to 1024 [ 243.152266][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 243.171752][ T8768] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.244189][ T8768] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.870: Invalid block bitmap block 0 in block_group 0 [ 243.278613][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 243.313975][ T8768] __quota_error: 104 callbacks suppressed [ 243.314005][ T8768] Quota error (device loop1): write_blk: dquota write failed [ 243.350029][ T8768] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 243.371053][ T8768] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.870: Failed to acquire dquot type 0 [ 243.449053][ T8768] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.870: Freeing blocks not in datazone - block = 0, count = 4096 [ 243.567278][ T8768] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.870: Invalid inode bitmap blk 0 in block_group 0 [ 243.689716][ T8768] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 243.733081][ T8768] EXT4-fs (loop1): 1 orphan inode deleted [ 243.775781][ T8768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.846587][ T48] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 244.682351][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 244.708484][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.082460][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.885'. [ 245.440066][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 245.636473][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 245.665952][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 246.197472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.741569][ T8873] netlink: 64 bytes leftover after parsing attributes in process `syz.5.897'. [ 247.750838][ T8873] netlink: 4972 bytes leftover after parsing attributes in process `syz.5.897'. [ 248.638006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.646732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.655796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.619881][ T8860] syz.0.898: attempt to access beyond end of device [ 249.619881][ T8860] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 249.633236][ T8860] XFS (nbd0): SB validate failed with error -5. [ 249.777631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.189752][ T8894] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 250.234674][ T8894] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.906'. [ 250.453948][ T8900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.551172][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 250.617301][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 250.969583][ T8913] loop0: detected capacity change from 0 to 1024 [ 251.021709][ T8913] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.168245][ T8913] EXT4-fs: inline encryption not supported [ 251.672729][ T8913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.685902][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 251.797413][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 251.837747][ T8919] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.871490][ T8919] IPv6: Can't replace route, no match found [ 251.925213][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.399127][ T8938] loop3: detected capacity change from 0 to 1024 [ 252.425294][ T8938] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.564994][ T8938] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.919: Invalid block bitmap block 0 in block_group 0 [ 252.583973][ T8938] Quota error (device loop3): write_blk: dquota write failed [ 252.592155][ T8938] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 252.603133][ T8938] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.919: Failed to acquire dquot type 0 [ 252.634516][ T8938] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.919: Freeing blocks not in datazone - block = 0, count = 4096 [ 252.695879][ T8938] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.919: Invalid inode bitmap blk 0 in block_group 0 [ 252.712552][ T8938] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 252.724451][ T8938] EXT4-fs (loop3): 1 orphan inode deleted [ 252.737300][ T8938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.897526][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 253.030314][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 253.237738][ T36] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 253.293660][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 253.444038][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.455073][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.091564][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 254.783666][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 255.111948][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.294689][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.529105][ T30] audit: type=1326 audit(18760277.987:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 255.610870][ T30] audit: type=1326 audit(18760277.987:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 255.723946][ T30] audit: type=1326 audit(18760277.987:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 255.790906][ T30] audit: type=1326 audit(18760277.987:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 255.858523][ T30] audit: type=1326 audit(18760277.987:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f318d169 code=0x7ffc0000 [ 255.933971][ T30] audit: type=1107 audit(18760278.127:496): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.231468][ T8993] loop4: detected capacity change from 0 to 1024 [ 256.268683][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 256.285524][ T8999] loop1: detected capacity change from 0 to 764 [ 256.297963][ T8994] loop2: detected capacity change from 0 to 512 [ 256.306877][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 256.308260][ T8993] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.328731][ T8994] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.357387][ T8993] EXT4-fs: inline encryption not supported [ 256.386499][ T8993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.400082][ T8994] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 256.409599][ T8994] EXT4-fs (loop2): orphan cleanup on readonly fs [ 256.479690][ T8994] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 256.520353][ T8999] Symlink component flag not implemented [ 256.567568][ T8994] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.568116][ T8999] Symlink component flag not implemented (129) [ 256.601511][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.676601][ T8999] rock: directory entry would overflow storage [ 256.684319][ T8994] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 256.693340][ T8999] rock: sig=0x4f50, size=4, remaining=3 [ 256.706483][ T8999] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 256.741267][ T8994] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 256.819803][ T8994] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 256.851404][ T8994] EXT4-fs (loop2): 1 truncate cleaned up [ 256.868946][ T8994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.039332][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 257.600079][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 257.924832][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.155706][ T9036] loop0: detected capacity change from 0 to 1024 [ 258.225047][ T9036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.280469][ T9036] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.959: missing EA_INODE flag [ 258.315580][ T9036] EXT4-fs (loop0): Remounting filesystem read-only [ 258.500957][ T9045] loop2: detected capacity change from 0 to 1024 [ 258.511988][ T9045] EXT4-fs: Ignoring removed orlov option [ 258.517895][ T9045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.190140][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.193266][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.437387][ T9049] block device autoloading is deprecated and will be removed. [ 259.482369][ T9049] syz.1.961: attempt to access beyond end of device [ 259.482369][ T9049] md31: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 259.500061][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.630948][ T9062] netlink: 36 bytes leftover after parsing attributes in process `syz.5.968'. [ 259.707418][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 259.707446][ T30] audit: type=1107 audit(18760282.157:498): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 260.802437][ T9085] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0 [ 261.485460][ T9099] loop1: detected capacity change from 0 to 512 [ 261.522844][ T9099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 261.588047][ T9099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.982: bg 0: block 248: padding at end of block bitmap is not set [ 261.698704][ T30] audit: type=1107 audit(18760284.147:499): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 261.733852][ T9099] Quota error (device loop1): write_blk: dquota write failed [ 261.753075][ T9099] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 261.790135][ T9111] veth2: entered promiscuous mode [ 261.795315][ T9111] veth2: entered allmulticast mode [ 261.817417][ T9099] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.982: Failed to acquire dquot type 1 [ 261.837588][ T9099] EXT4-fs (loop1): 1 truncate cleaned up [ 261.861483][ T9099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.047113][ T5838] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 262.073408][ T9124] loop2: detected capacity change from 0 to 512 [ 262.090134][ T5838] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 262.102370][ T9124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.134373][ T9124] EXT4-fs (loop2): 1 truncate cleaned up [ 262.151069][ T9124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.371409][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.634416][ T9141] loop0: detected capacity change from 0 to 1024 [ 262.745729][ T9141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.890768][ T9152] vlan2: entered allmulticast mode [ 262.962884][ T30] audit: type=1326 audit(18760285.237:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 262.986083][ T30] audit: type=1326 audit(18760285.237:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 263.018948][ T30] audit: type=1326 audit(18760285.237:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 263.057246][ T30] audit: type=1326 audit(18760285.257:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 263.281417][ T30] audit: type=1326 audit(18760285.737:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 263.357257][ T30] audit: type=1326 audit(18760285.737:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 263.412079][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 263.712388][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.928254][ T9174] 9pnet_fd: Insufficient options for proto=fd [ 264.253435][ T9185] siw: device registration error -23 [ 264.808446][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.845299][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.003401][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.015083][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.204867][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.244131][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.605694][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.893736][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.406901][ T9219] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 267.123722][ T9221] loop2: detected capacity change from 0 to 1024 [ 267.227405][ T9221] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.331946][ T9221] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1027: Invalid block bitmap block 0 in block_group 0 [ 267.347490][ T9221] Quota error (device loop2): write_blk: dquota write failed [ 267.355120][ T9221] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 267.365548][ T9221] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1027: Failed to acquire dquot type 0 [ 267.385052][ T9221] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.1027: Freeing blocks not in datazone - block = 0, count = 4096 [ 267.401472][ T9221] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1027: Invalid inode bitmap blk 0 in block_group 0 [ 267.415708][ T9221] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 267.425571][ T9221] EXT4-fs (loop2): 1 orphan inode deleted [ 267.436196][ T9221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.775882][ T9227] loop4: detected capacity change from 0 to 1024 [ 267.850251][ T9227] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.858232][ T1332] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 267.931851][ T1332] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 267.987725][ T9227] EXT4-fs: inline encryption not supported [ 268.018954][ T9231] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 268.073577][ T9227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.540697][ T36] gretap0: left allmulticast mode [ 268.588533][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.606915][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.618280][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.628168][ T36] gretap0: left promiscuous mode [ 268.634581][ T36] bridge0: port 3(gretap0) entered disabled state [ 268.656095][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.669861][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.680024][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.698495][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.707898][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.760699][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.768934][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.780533][ T9240] loop3: detected capacity change from 0 to 512 [ 268.787791][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.798173][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.806056][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.012118][ T9240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.059866][ T36] bridge_slave_1: left allmulticast mode [ 269.065685][ T36] bridge_slave_1: left promiscuous mode [ 269.148940][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.298280][ T36] bridge_slave_0: left allmulticast mode [ 269.330504][ T36] bridge_slave_0: left promiscuous mode [ 269.381710][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.399664][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.250636][ T36] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.264067][ T36] bond_slave_0: left promiscuous mode [ 270.283396][ T36] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.294139][ T36] bond_slave_1: left promiscuous mode [ 270.309473][ T36] $H (unregistering): Released all slaves [ 270.461184][ T36] bond0 (unregistering): Released all slaves [ 270.643934][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.815029][ T9269] mmap: syz.0.1045 (9269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.901203][ T55] Bluetooth: hci4: command tx timeout [ 270.982182][ T30] audit: type=1107 audit(18760293.437:506): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 271.503068][ T36] hsr_slave_0: left promiscuous mode [ 271.510038][ T36] hsr_slave_1: left promiscuous mode [ 271.524460][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.547684][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.562039][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.569349][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 271.576107][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.626156][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 271.644234][ T36] veth1_macvtap: left promiscuous mode [ 271.658570][ T36] veth0_macvtap: left promiscuous mode [ 271.671221][ T36] veth1_vlan: left promiscuous mode [ 271.689281][ T36] veth0_vlan: left promiscuous mode [ 272.530679][ T9314] syz.3.1057: attempt to access beyond end of device [ 272.530679][ T9314] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 272.589341][ T9314] XFS (nbd3): SB validate failed with error -5. [ 272.697428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 272.879455][ T36] team0 (unregistering): Port device team_slave_1 removed [ 272.977506][ T55] Bluetooth: hci4: command tx timeout [ 273.078139][ T36] team0 (unregistering): Port device team_slave_0 removed [ 274.016006][ T9300] netlink: 'syz.5.1053': attribute type 4 has an invalid length. [ 274.025650][ T9300] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1053'. [ 274.048698][ T9309] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 274.056640][ T9306] lo speed is unknown, defaulting to 1000 [ 274.062708][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 274.083033][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.105894][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.134530][ T972] infiniband syz1: ib_query_port failed (-19) [ 274.219023][ T9306] lo speed is unknown, defaulting to 1000 [ 274.233885][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 274.275944][ T9306] lo speed is unknown, defaulting to 1000 [ 274.357387][ T9306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 274.456337][ T30] audit: type=1107 audit(18760296.907:507): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 274.503975][ T9306] lo speed is unknown, defaulting to 1000 [ 274.511407][ T9341] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0 [ 274.564283][ T9306] lo speed is unknown, defaulting to 1000 [ 274.700107][ T9306] lo speed is unknown, defaulting to 1000 [ 274.708853][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.740213][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1068'. [ 274.745368][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.758640][ T9237] bridge_slave_0: entered allmulticast mode [ 274.766219][ T9237] bridge_slave_0: entered promiscuous mode [ 274.779195][ T9306] lo speed is unknown, defaulting to 1000 [ 274.810279][ T9306] lo speed is unknown, defaulting to 1000 [ 274.818641][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.826430][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.834232][ T9237] bridge_slave_1: entered allmulticast mode [ 274.842044][ T9237] bridge_slave_1: entered promiscuous mode [ 274.974145][ T9306] lo speed is unknown, defaulting to 1000 [ 275.024603][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.040075][ T9306] lo speed is unknown, defaulting to 1000 [ 275.042997][ T9356] netlink: 'syz.4.1072': attribute type 4 has an invalid length. [ 275.054068][ T55] Bluetooth: hci4: command tx timeout [ 275.082174][ T9356] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1072'. [ 275.097511][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.127561][ T9306] lo speed is unknown, defaulting to 1000 [ 275.220791][ T9358] tmpfs: Bad value for 'mpol' [ 275.234378][ T9358] loop4: detected capacity change from 0 to 512 [ 275.258738][ T9358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 275.285430][ T9358] EXT4-fs (loop4): 1 truncate cleaned up [ 275.312935][ T9237] team0: Port device team_slave_0 added [ 275.352663][ T9358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.379122][ T9237] team0: Port device team_slave_1 added [ 275.471038][ T30] audit: type=1326 audit(18760297.927:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.555449][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.566478][ T9350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.572697][ T9350] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 275.612377][ T30] audit: type=1326 audit(18760297.927:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.677229][ T30] audit: type=1326 audit(18760297.927:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.703549][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.710706][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.736822][ T30] audit: type=1326 audit(18760297.927:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.759320][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.777209][ T30] audit: type=1326 audit(18760297.927:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.809900][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.816916][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.864779][ T30] audit: type=1326 audit(18760297.927:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.917424][ T30] audit: type=1326 audit(18760297.927:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 275.939438][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.966662][ T9366] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 275.987402][ T30] audit: type=1107 audit(18760298.367:515): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 278.556704][ T30] audit: type=1326 audit(18760301.007:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532e18d169 code=0x7ffc0000 [ 278.606312][ T9237] hsr_slave_0: entered promiscuous mode [ 278.642662][ T9237] hsr_slave_1: entered promiscuous mode [ 278.651792][ T9390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1083'. [ 278.675453][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.701872][ T9237] Cannot create hsr debugfs directory [ 278.993590][ T5904] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.031625][ T5904] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.139287][ T9397] lo speed is unknown, defaulting to 1000 [ 279.220134][ T9411] loop5: detected capacity change from 0 to 512 [ 279.366343][ T9411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.501688][ T9411] sd 0:0:1:0: device reset [ 280.607500][ T9408] infiniband syz!: set active [ 280.634414][ T9408] infiniband syz!: added team_slave_0 [ 280.659162][ T9408] syz!: rxe_create_cq: returned err = -12 [ 280.691338][ T9408] infiniband syz!: Couldn't create ib_mad CQ [ 280.713213][ T9408] infiniband syz!: Couldn't open port 1 [ 280.796724][ T9408] RDS/IB: syz!: added [ 280.843005][ T9408] smc: adding ib device syz! with port count 1 [ 280.897928][ T9408] smc: ib device syz! port 1 has pnetid [ 281.867535][ T9428] loop3: detected capacity change from 0 to 1024 [ 281.875368][ T9428] EXT4-fs: Ignoring removed orlov option [ 281.881199][ T9428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.066028][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 282.066055][ T30] audit: type=1326 audit(18760304.497:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 282.105560][ T30] audit: type=1326 audit(18760304.497:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 282.138416][ T9428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.182438][ T30] audit: type=1326 audit(18760304.497:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 282.241957][ T9436] loop2: detected capacity change from 0 to 1024 [ 282.249311][ T9436] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.255947][ T9436] EXT4-fs: inline encryption not supported [ 282.312786][ T9436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.398953][ T9237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.456459][ T9237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.478239][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.501192][ T9237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.536128][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.550176][ T9237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.845182][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.898867][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.928883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.936066][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.977779][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.984974][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.481903][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 283.503185][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.521525][ T9461] IPVS: Error joining to the multicast group [ 284.214827][ T9237] veth0_vlan: entered promiscuous mode [ 284.230745][ T9237] veth1_vlan: entered promiscuous mode [ 284.274867][ T9442] lo speed is unknown, defaulting to 1000 [ 284.320521][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.392862][ T9237] veth0_macvtap: entered promiscuous mode [ 284.537057][ T9237] veth1_macvtap: entered promiscuous mode [ 284.582803][ T9477] loop5: detected capacity change from 0 to 1024 [ 284.601235][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.637574][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.655696][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.677264][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.735094][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.746070][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.760243][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.765064][ T9477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.796338][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.807837][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.818494][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.837428][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.842826][ T30] audit: type=1326 audit(18760307.267:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 284.847640][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.880906][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.892191][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.920792][ T9483] loop9: detected capacity change from 0 to 7 [ 284.928408][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.936344][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.969986][ T9237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.995708][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.006159][ T30] audit: type=1326 audit(18760307.267:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.015737][ T9477] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: inode #11: comm syz.5.1111: missing EA_INODE flag [ 285.046320][ T9237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.065372][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.067538][ T30] audit: type=1326 audit(18760307.267:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.087305][ T9237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.096703][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.118315][ T9477] EXT4-fs (loop5): Remounting filesystem read-only [ 285.125703][ T9237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.167009][ T30] audit: type=1326 audit(18760307.267:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.218897][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.236271][ T30] audit: type=1326 audit(18760307.267:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.240492][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.286875][ T9483] ldm_validate_partition_table(): Disk read failed. [ 285.296759][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.319488][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.321080][ T30] audit: type=1326 audit(18760307.267:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.356894][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.384685][ T30] audit: type=1326 audit(18760307.267:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 285.425579][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.435208][ T9483] Buffer I/O error on dev loop9, logical block 0, async page read [ 285.445285][ T9483] Dev loop9: unable to read RDB block 0 [ 285.451506][ T9483] loop9: unable to read partition table [ 285.458734][ T9483] loop9: partition table beyond EOD, truncated [ 285.464913][ T9483] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 285.464913][ T9483] U) failed (rc=-5) [ 285.480722][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.565022][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.590759][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.675911][ T9486] loop5: detected capacity change from 0 to 2048 [ 285.694790][ T9486] EXT4-fs: Ignoring removed bh option [ 285.858254][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'. [ 286.026022][ T9486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.080162][ T9502] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.136749][ T9502] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.360572][ T9502] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.393929][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.419903][ T9502] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.503715][ T9513] loop0: detected capacity change from 0 to 2048 [ 286.534034][ T9513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.547686][ T9508] loop2: detected capacity change from 0 to 512 [ 286.555521][ T9502] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.556036][ T9508] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.568175][ T9502] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.690177][ T9502] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.710597][ T9520] loop3: detected capacity change from 0 to 8192 [ 286.726711][ T9502] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.784741][ T9508] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 286.807105][ T9520] tipc: Started in network mode [ 286.812161][ T9520] tipc: Node identity 7f000001, cluster identity 4711 [ 286.822185][ T9520] tipc: Enabling of bearer rejected, failed to enable media [ 286.836793][ T9520] tipc: Enabled bearer , priority 0 [ 286.899041][ T9508] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.994720][ T9508] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.153253][ T9508] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 287.165825][ T9502] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.185048][ T9502] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.209902][ T9508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 287.232748][ T9502] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.241908][ T9508] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 287.251890][ T9502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.266398][ T9508] EXT4-fs (loop2): 1 truncate cleaned up [ 287.291156][ T9508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.318045][ T9502] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.331865][ T9502] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.350858][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 287.350878][ T30] audit: type=1326 audit(18760309.807:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.461688][ T9502] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.494753][ T30] audit: type=1326 audit(18760309.837:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.578230][ T9502] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.707073][ T30] audit: type=1326 audit(18760309.837:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.733830][ T30] audit: type=1326 audit(18760309.847:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.756432][ T30] audit: type=1326 audit(18760309.847:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.833049][ T30] audit: type=1326 audit(18760309.847:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 287.947400][ T47] tipc: Node number set to 2130706433 [ 287.988867][ T30] audit: type=1326 audit(18760309.847:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 288.096532][ T30] audit: type=1326 audit(18760309.847:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 288.197247][ T30] audit: type=1326 audit(18760309.847:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 288.395539][ T9544] loop4: detected capacity change from 0 to 512 [ 288.411366][ T9544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.588793][ T30] audit: type=1326 audit(18760309.847:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a38d169 code=0x7ffc0000 [ 289.095102][ T9544] EXT4-fs (loop4): 1 truncate cleaned up [ 289.106057][ T9544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.421317][ T9547] loop6: detected capacity change from 0 to 1024 [ 289.634321][ T9547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.858904][ T9547] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 291.630205][ T9237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.679016][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.779303][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.053432][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.900927][ T9598] loop3: detected capacity change from 0 to 1024 [ 292.952717][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.971688][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 293.168562][ T9604] IPVS: Error joining to the multicast group [ 294.233298][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.275747][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 294.275768][ T30] audit: type=1326 audit(18760316.727:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 294.358915][ T30] audit: type=1326 audit(18760316.807:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 294.507692][ T30] audit: type=1326 audit(18760316.807:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 294.584427][ T30] audit: type=1326 audit(18760316.807:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 294.737615][ T30] audit: type=1326 audit(18760316.817:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 294.952967][ T9638] loop6: detected capacity change from 0 to 1024 [ 294.963596][ T9638] EXT4-fs: Ignoring removed orlov option [ 294.969958][ T9638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.167526][ T9638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.671779][ T30] audit: type=1326 audit(18760316.817:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 295.694639][ T30] audit: type=1326 audit(18760316.817:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 295.716975][ T30] audit: type=1326 audit(18760316.817:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 295.742310][ T9237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.757096][ T30] audit: type=1326 audit(18760316.817:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 295.780478][ T30] audit: type=1326 audit(18760316.817:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.5.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4e78d169 code=0x7ffc0000 [ 296.120157][ T9657] loop6: detected capacity change from 0 to 1024 [ 296.660778][ T9657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.077793][ T5938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 297.212549][ T9673] gtp0: entered promiscuous mode [ 297.307291][ T5938] usb 4-1: device descriptor read/64, error -71 [ 297.350027][ T9670] loop5: detected capacity change from 0 to 2048 [ 297.444021][ T9670] loop5: p1 < > p4 < > [ 297.548628][ T5938] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 297.558129][ T9683] 9pnet_fd: Insufficient options for proto=fd [ 297.704386][ T9237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.731174][ T5938] usb 4-1: device descriptor read/64, error -71 [ 297.741046][ T9694] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.833303][ T9696] loop4: detected capacity change from 0 to 1024 [ 297.863048][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 297.887598][ T5938] usb usb4-port1: attempt power cycle [ 297.893417][ T9696] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.893480][ T9696] EXT4-fs: inline encryption not supported [ 297.911221][ T9694] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.963663][ T9696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.966373][ T9697] 8021q: adding VLAN 0 to HW filter on device team1 [ 298.049690][ T9694] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.097095][ T9707] process 'syz.6.1195' launched './file2' with NULL argv: empty string added [ 298.141887][ T9694] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.176601][ T9708] lo speed is unknown, defaulting to 1000 [ 298.233064][ T9694] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.276943][ T9694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.289528][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.303174][ T9694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.319144][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.335790][ T5938] usb 4-1: device descriptor read/8, error -71 [ 298.386532][ T9694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.587628][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 298.638082][ T5938] usb 4-1: device descriptor read/8, error -71 [ 298.661603][ T9719] loop2: detected capacity change from 0 to 2048 [ 298.731363][ T9719] loop2: p1 < > p4 < > [ 298.748055][ T5938] usb usb4-port1: unable to enumerate USB device [ 298.901930][ T9731] 9pnet_fd: Insufficient options for proto=fd [ 299.437541][ T9742] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.615621][ T9750] loop4: detected capacity change from 0 to 1024 [ 299.689602][ T9742] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.714872][ T9750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.741070][ T9757] tipc: Started in network mode [ 299.745083][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 299.745103][ T30] audit: type=1800 audit(18760322.197:685): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1211" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 299.747451][ T9757] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 299.808258][ T9750] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 299.822450][ T9757] tipc: Enabled bearer , priority 0 [ 299.909132][ T9762] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 299.929520][ T9742] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.960200][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.026240][ T9762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.039755][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'. [ 300.111035][ T9768] loop4: detected capacity change from 0 to 2048 [ 300.169803][ T9768] loop4: p1 < > p4 < > [ 300.284344][ T9742] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.149110][ T5901] tipc: Node number set to 11578026 [ 301.187849][ T9773] loop2: detected capacity change from 0 to 1024 [ 301.209349][ T9742] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.261620][ T9773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.300201][ T9773] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1218: missing EA_INODE flag [ 301.319856][ T9773] EXT4-fs (loop2): Remounting filesystem read-only [ 301.364908][ T9742] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.429124][ T9742] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.443991][ T9742] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.842418][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.924569][ T9801] pim6reg: entered allmulticast mode [ 302.966262][ T9806] pim6reg: left allmulticast mode [ 302.998796][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 303.084975][ T9809] loop6: detected capacity change from 0 to 1024 [ 303.169200][ T47] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 303.188432][ T9809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.202212][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.211561][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.227251][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.239833][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.249272][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.260640][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.267411][ T30] audit: type=1800 audit(18760325.707:686): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1229" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 303.271726][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.299308][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.310639][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.318744][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.328200][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.339532][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.347688][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.356772][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.418177][ T30] audit: type=1107 audit(18760325.877:687): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 303.431041][ T9809] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 303.449263][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.491892][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.516886][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.663833][ T9237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.791465][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.799292][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.809129][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.820267][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.828072][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.836994][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.853476][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.318236][ T47] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 304.741771][ T47] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 304.750923][ T47] usb 3-1: Product: syz [ 304.755120][ T47] usb 3-1: Manufacturer: syz [ 304.760437][ T47] usb 3-1: SerialNumber: syz [ 304.817991][ T47] usb 3-1: config 0 descriptor?? [ 304.920673][ T47] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 305.171802][ T972] usb 3-1: USB disconnect, device number 2 [ 305.187410][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1240'. [ 305.224531][ T972] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 305.809104][ T9842] siw: device registration error -23 [ 305.815386][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1241'. [ 305.837502][ T9842] IPv6: Can't replace route, no match found [ 306.661999][ T30] audit: type=1107 audit(18760329.117:688): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 306.729077][ T9854] pim6reg: entered allmulticast mode [ 306.810038][ T9851] pim6reg: left allmulticast mode [ 307.657366][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 308.019715][ T9871] loop5: detected capacity change from 0 to 512 [ 308.027892][ T9871] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.179847][ T9871] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 308.188260][ T9871] EXT4-fs (loop5): orphan cleanup on readonly fs [ 308.207603][ T9871] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 308.218148][ T9871] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 308.646412][ T9871] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 308.687315][ T5903] usb 3-1: device descriptor read/64, error -71 [ 308.719054][ T9871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 308.757664][ T9871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 308.767335][ T9871] EXT4-fs (loop5): 1 truncate cleaned up [ 308.774028][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.937294][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 309.020776][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.054548][ T9884] loop3: detected capacity change from 0 to 512 [ 309.100227][ T9884] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 309.137553][ T9884] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 309.187309][ T5903] usb 3-1: device descriptor read/64, error -71 [ 309.304939][ T5903] usb usb3-port1: attempt power cycle [ 309.565865][ T30] audit: type=1107 audit(18760332.007:689): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 309.667811][ T5903] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 309.701897][ T5903] usb 3-1: device descriptor read/8, error -71 [ 309.940060][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 310.001463][ T5903] usb 3-1: device descriptor read/8, error -71 [ 310.056007][ T30] audit: type=1326 audit(18760332.507:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.103276][ T9902] loop9: detected capacity change from 0 to 7 [ 310.122168][ T9902] buffer_io_error: 4 callbacks suppressed [ 310.122192][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.151930][ T30] audit: type=1326 audit(18760332.547:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.193075][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.240245][ T30] audit: type=1326 audit(18760332.547:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.302466][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.346555][ T5903] usb usb3-port1: unable to enumerate USB device [ 310.352238][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.354375][ T30] audit: type=1326 audit(18760332.547:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.383103][ T30] audit: type=1326 audit(18760332.547:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.404325][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.405415][ T30] audit: type=1326 audit(18760332.557:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.436125][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.444205][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.452254][ T30] audit: type=1326 audit(18760332.557:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682f58d169 code=0x7ffc0000 [ 310.482476][ T9902] ldm_validate_partition_table(): Disk read failed. [ 310.500384][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.527674][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.553911][ T9902] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.590162][ T9902] Dev loop9: unable to read RDB block 0 [ 310.606919][ T9902] loop9: unable to read partition table [ 310.636270][ T9902] loop9: partition table beyond EOD, truncated [ 310.665626][ T9902] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 310.665626][ T9902] U) failed (rc=-5) [ 311.019428][ T9917] loop6: detected capacity change from 0 to 1024 [ 311.026659][ T9917] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.063846][ T9917] EXT4-fs: inline encryption not supported [ 311.103401][ T9924] loop0: detected capacity change from 0 to 512 [ 311.108354][ T9917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.160155][ T9924] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.233066][ T9924] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 311.423570][ T9237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.601550][ T9933] siw: device registration error -23 [ 311.618544][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1277'. [ 311.637297][ T9933] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.651280][ T9933] IPv6: Can't replace route, no match found [ 311.659052][ T9935] loop0: detected capacity change from 0 to 2048 [ 311.738514][ T9935] loop0: p1 < > p4 < > [ 312.136387][ T9947] trusted_key: syz.0.1283 sent an empty control message without MSG_MORE. [ 312.308394][ T9951] loop4: detected capacity change from 0 to 1024 [ 312.319243][ T9951] EXT4-fs: Ignoring removed orlov option [ 312.325069][ T9951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.569967][ T9951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.088523][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.344587][ T9966] loop5: detected capacity change from 0 to 512 [ 313.406481][ T9966] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.438778][ T9966] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 313.602383][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 313.602410][ T30] audit: type=1326 audit(18760336.057:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 313.681741][ T30] audit: type=1326 audit(18760336.087:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 313.753620][ T30] audit: type=1326 audit(18760336.107:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 313.805175][ T30] audit: type=1326 audit(18760336.107:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 313.889533][ T9980] vlan2: entered allmulticast mode [ 313.902478][ T30] audit: type=1326 audit(18760336.107:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 313.917378][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 314.027232][ T30] audit: type=1326 audit(18760336.127:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 314.097572][ T30] audit: type=1326 audit(18760336.127:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 314.199636][ T30] audit: type=1326 audit(18760336.127:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 314.272704][ T30] audit: type=1326 audit(18760336.137:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 314.543822][ T30] audit: type=1326 audit(18760336.137:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e3d8d169 code=0x7ffc0000 [ 314.712154][ T9997] loop3: detected capacity change from 0 to 1024 [ 314.719408][ T9997] EXT4-fs: Ignoring removed orlov option [ 314.725120][ T9997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.253295][T10004] tipc: Enabled bearer , priority 0 [ 316.483562][ T9997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.729325][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.819189][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.925141][T10015] netlink: 'syz.6.1309': attribute type 1 has an invalid length. [ 317.038292][T10015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.223303][T10025] vlan2: entered allmulticast mode [ 318.072175][T10053] loop4: detected capacity change from 0 to 256 [ 319.115572][T10076] loop5: detected capacity change from 0 to 1024 [ 319.126158][T10076] EXT4-fs: Ignoring removed orlov option [ 319.132158][T10076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.797348][T10060] syz.2.1319: attempt to access beyond end of device [ 319.797348][T10060] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 319.815919][T10060] XFS (nbd2): SB validate failed with error -5. [ 319.880582][T10076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.199968][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.232304][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 320.232326][ T30] audit: type=1326 audit(18760342.687:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.6.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488cd8d169 code=0x7ffc0000 [ 320.356582][ T30] audit: type=1326 audit(18760342.687:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.6.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488cd8d169 code=0x7ffc0000 [ 320.391871][ T30] audit: type=1326 audit(18760342.697:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.6.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488cd8d169 code=0x7ffc0000 [ 320.427853][ T30] audit: type=1326 audit(18760342.697:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.6.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488cd8d169 code=0x7ffc0000 [ 320.531141][ T30] audit: type=1326 audit(18760342.697:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.6.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488cd8d169 code=0x7ffc0000 [ 320.563853][T10098] netlink: 'syz.5.1330': attribute type 1 has an invalid length. [ 320.606665][ T0] ================================================================== [ 320.614778][ T0] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 320.622446][ T0] Read of size 8 at addr 1fffffff87706080 by task swapper/1/0 [ 320.629915][ T0] [ 320.632245][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-syzkaller #0 [ 320.632272][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.632288][ T0] Call Trace: [ 320.632300][ T0] [ 320.632310][ T0] dump_stack_lvl+0x241/0x360 [ 320.632346][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.632373][ T0] ? __pfx__printk+0x10/0x10 [ 320.632399][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.632444][ T0] ? _printk+0xd5/0x120 [ 320.632470][ T0] print_report+0xe3/0x5b0 [ 320.632507][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.632545][ T0] ? __virt_addr_valid+0x58/0x530 [ 320.632573][ T0] ? __lock_acquire+0xc94/0x2100 [ 320.632613][ T0] kasan_report+0x143/0x180 [ 320.632645][ T0] ? __lock_acquire+0xc94/0x2100 [ 320.632687][ T0] kasan_check_range+0x282/0x290 [ 320.632722][ T0] __lock_acquire+0xc94/0x2100 [ 320.632766][ T0] ? mark_lock+0x9a/0x360 [ 320.632793][ T0] lock_acquire+0x1ed/0x550 [ 320.632831][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 320.632866][ T0] ? mark_lock+0x9a/0x360 [ 320.632898][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 320.632934][ T0] ? rcu_note_context_switch+0xd44/0x1060 [ 320.632985][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.633029][ T0] _raw_spin_lock_nested+0x31/0x40 [ 320.633071][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 320.633103][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 320.633137][ T0] __schedule+0x357/0x4c90 [ 320.633174][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.633216][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 320.633255][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.633298][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.633337][ T0] ? __pfx___schedule+0x10/0x10 [ 320.633373][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 320.633407][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.633448][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 320.633479][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 320.633512][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.633554][ T0] schedule_idle+0x56/0x90 [ 320.633589][ T0] do_idle+0x567/0x5c0 [ 320.633628][ T0] ? __pfx_do_idle+0x10/0x10 [ 320.633669][ T0] cpu_startup_entry+0x42/0x60 [ 320.633703][ T0] start_secondary+0x102/0x110 [ 320.633740][ T0] common_startup_64+0x13e/0x147 [ 320.633777][ T0] [ 320.633786][ T0] ================================================================== [ 320.871689][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.878887][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-syzkaller #0 [ 320.887134][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.897207][ T0] Call Trace: [ 320.900520][ T0] [ 320.903448][ T0] dump_stack_lvl+0x241/0x360 [ 320.908134][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.913335][ T0] ? __pfx__printk+0x10/0x10 [ 320.917923][ T0] ? rcu_is_watching+0x15/0xb0 [ 320.922692][ T0] ? lock_release+0xbf/0xa30 [ 320.927296][ T0] ? common_startup_64+0x13e/0x147 [ 320.932412][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.938189][ T0] ? vscnprintf+0x5d/0x90 [ 320.942531][ T0] panic+0x349/0x880 [ 320.946423][ T0] ? check_panic_on_warn+0x21/0xb0 [ 320.951551][ T0] ? __pfx_panic+0x10/0x10 [ 320.955960][ T0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 320.961170][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.966817][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 320.972725][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.979152][ T0] ? print_report+0xe3/0x5b0 [ 320.983752][ T0] check_panic_on_warn+0x86/0xb0 [ 320.988707][ T0] ? __lock_acquire+0xc94/0x2100 [ 320.993662][ T0] end_report+0x77/0x160 [ 320.997917][ T0] kasan_report+0x154/0x180 [ 321.002427][ T0] ? __lock_acquire+0xc94/0x2100 [ 321.007384][ T0] kasan_check_range+0x282/0x290 [ 321.012327][ T0] __lock_acquire+0xc94/0x2100 [ 321.017109][ T0] ? mark_lock+0x9a/0x360 [ 321.021442][ T0] lock_acquire+0x1ed/0x550 [ 321.025960][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 321.031513][ T0] ? mark_lock+0x9a/0x360 [ 321.035869][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 321.040912][ T0] ? rcu_note_context_switch+0xd44/0x1060 [ 321.046652][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.052302][ T0] _raw_spin_lock_nested+0x31/0x40 [ 321.057428][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 321.062980][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 321.068366][ T0] __schedule+0x357/0x4c90 [ 321.072800][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.078451][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 321.084702][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.090352][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.096693][ T0] ? __pfx___schedule+0x10/0x10 [ 321.101551][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 321.106844][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.112492][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 321.118655][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 321.124291][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.129942][ T0] schedule_idle+0x56/0x90 [ 321.134373][ T0] do_idle+0x567/0x5c0 [ 321.138481][ T0] ? __pfx_do_idle+0x10/0x10 [ 321.143083][ T0] cpu_startup_entry+0x42/0x60 [ 321.147852][ T0] start_secondary+0x102/0x110 [ 321.152623][ T0] common_startup_64+0x13e/0x147 [ 321.157571][ T0] [ 321.160901][ T0] Kernel Offset: disabled [ 321.165245][ T0] Rebooting in 86400 seconds..