last executing test programs: 3m13.580132232s ago: executing program 0 (id=105): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 3m13.12981285s ago: executing program 0 (id=109): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r4, 0x3, 0x80000}) 3m12.617132892s ago: executing program 0 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 3m12.189373622s ago: executing program 0 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd", 0x19}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x32, 0xba, 0x4, 0xfd, '\x00', 0x7, [0x2]}}) 3m10.25592771s ago: executing program 0 (id=123): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) 3m9.936948545s ago: executing program 0 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000e00be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/27], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 3m8.939290008s ago: executing program 4 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 3m8.510361397s ago: executing program 4 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd", 0x19}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x32, 0xba, 0x4, 0xfd, '\x00', 0x7, [0x2]}}) 3m7.226953399s ago: executing program 4 (id=139): r0 = dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m6.916550267s ago: executing program 4 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, 0x0) 3m6.639141237s ago: executing program 4 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 3m5.105595805s ago: executing program 4 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, 0x0, &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 3m3.756510412s ago: executing program 32 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, 0x0, &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 2m54.467367599s ago: executing program 33 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000e00be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/27], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 1m2.7556227s ago: executing program 3 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0xf}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 59.837063982s ago: executing program 3 (id=528): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)) 58.660681802s ago: executing program 3 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00'], 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 58.653065607s ago: executing program 3 (id=539): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x101042, 0x109) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) 58.052707904s ago: executing program 3 (id=545): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007e13c53e01a1971c40000006ac7f5841709fa22f22a3a9d7091459cdbf1972b2a4b08c8e422a753a0fdf7cd024430b18f9715a72b00abfe74a5aa6366136bf29028f5f96fffa778af6e99d67fb5ce42e8a73ebde402fc62fdc75c494ebd718fd6f55f1ac02fc29d969552f9376f47b0235c5caaa5c88cc65f1171e65f369ed9239fb1c651be99dd2429cbe135a64365e9abde18f5", @ANYRES16=r9, @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x4404c044}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000019400)={0x1, 0x2, 0x0, 0x2, {0x8, 0xfffffffffffffe45, 0x2, 0xfffffffffffffff9, 0xb4c}, [0x10000, 0x7]}}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000007c0)={0x0, 0x7, 0x3, 0x1}) 54.981652926s ago: executing program 3 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000", @ANYRES16=r2, @ANYBLOB="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"/265], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='9p_client_res\x00'}, 0x18) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, r4, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r3, 0x0, 0x3b55, 0xffffffffffffff80}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) accept4(r7, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004510002000020000ff06907864010101ffffffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cd530f4353cff9ccc02000000c3d9000048990cd4bc339589b7d7331e942e3474c8f35b05dbf9bd81ce78db24d983283608000000e04dab20abaa510527abb01d0d7d7e08c5689550b22007e43c8af532360a8ed0856b51ad0e87ab0535fb664024bcb8bd7d85bf1daf25cb59de3f41e35544e85d746467640e6b26b89d53783414"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111c00000000008510000002000000850000000500000095000000000000009500b50500000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = gettid() r10 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r8, @ANYBLOB="049c01000750", @ANYRES32=r9, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 53.651790049s ago: executing program 34 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000", @ANYRES16=r2, @ANYBLOB="1706000000000000002510000000114dcd72afea4f54c5ce317c19547d6bc57b7ebdd63586701bb712925c055db803ac2c1826bdeeb48bd1edcf8ccf3921928d95ab21bc2f28b6cbfc2ede1dbd3ac53de2eba298eb5c252e7e002886f0ca3535a6ea7f3c59aed79fbbe9f7b261f7f105c263f9a3fb1f120de827e1b5151f67011df27098d3f479a539203d95e5f346d7c6f37bde574ff272810a55bff1aa41eb290a7d1e1a8dc61ccbc36a87bc5b86734ebfbb2b2bc27c86a12005e3db4301e408f5415df4661dda844298e73a1f021a458ebf0f2d36dfe0cae84ffb43a718b836d632f4caab787b49676726fff25dccad2773edd57889b9090200"/265], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='9p_client_res\x00'}, 0x18) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, r4, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r3, 0x0, 0x3b55, 0xffffffffffffff80}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) accept4(r7, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004510002000020000ff06907864010101ffffffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cd530f4353cff9ccc02000000c3d9000048990cd4bc339589b7d7331e942e3474c8f35b05dbf9bd81ce78db24d983283608000000e04dab20abaa510527abb01d0d7d7e08c5689550b22007e43c8af532360a8ed0856b51ad0e87ab0535fb664024bcb8bd7d85bf1daf25cb59de3f41e35544e85d746467640e6b26b89d53783414"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111c00000000008510000002000000850000000500000095000000000000009500b50500000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = gettid() r10 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r8, @ANYBLOB="049c01000750", @ANYRES32=r9, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 44.650876386s ago: executing program 5 (id=607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00'], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 43.467750733s ago: executing program 5 (id=609): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 42.907059647s ago: executing program 5 (id=612): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 39.657246501s ago: executing program 5 (id=633): read$ptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000000108010100000000000000000000000006319fa8bbd0c7260130c286514a76f88b18e68860eda037f9ab785e9d0ab7ba5d9fb87a31d29188dbc148a3b839d8086640939440b08a8008707550d80ee03e40fe5b521d6c38040000008725f738622d7d55c45b3f7257407a9c00ebd3f9643effa029ddce68785cf8df4037bc30dbf7a109db21106fc53b16984668a23bb355801b110f2a99854e685e74e3a686b8a2f60a09b8ae6aa226ffffffffffffffdf6cca403fb366bcbec07f0a3da570a3ac7e72d8e6b0b94d4da2f63308716151"], 0x14}}, 0x40) 37.967198173s ago: executing program 5 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 37.01959311s ago: executing program 5 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x401}, 0x78) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xff0f, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8000000008}, 0x18) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 25.567147144s ago: executing program 8 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 25.207896671s ago: executing program 8 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 24.699740972s ago: executing program 8 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x5) 24.162047624s ago: executing program 8 (id=704): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 23.141675242s ago: executing program 8 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000380)) 22.346487111s ago: executing program 8 (id=714): sync() 21.507764742s ago: executing program 35 (id=714): sync() 21.352605661s ago: executing program 36 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x401}, 0x78) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xff0f, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8000000008}, 0x18) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 7.861134977s ago: executing program 7 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001cc0)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x29) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) 7.295870699s ago: executing program 7 (id=779): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.98007067s ago: executing program 7 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0xf}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x3}], 0x1, 0x0, 0x0) 4.152616812s ago: executing program 6 (id=792): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) utimes(&(0x7f0000000200)='./file1\x00', 0x0) 3.827117548s ago: executing program 6 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) 3.727468346s ago: executing program 6 (id=795): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c965", 0x2}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 3.389738243s ago: executing program 1 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, 0x0, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x40004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)=[{0x2, 0x2, 0x4, 0x2}], 0x10, 0x674}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r8, 0x4b4b, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 2.479232951s ago: executing program 2 (id=798): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 2.430289282s ago: executing program 1 (id=799): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1000000, 0x12) 2.339261033s ago: executing program 2 (id=800): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r1, {}, {0x1}, {0xc, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}}, 0x40) 2.275076888s ago: executing program 1 (id=801): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_tables_targets\x00') read$rfkill(r4, &(0x7f0000000440), 0x8) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000014c0)=""/208, 0xd0}], 0x1, 0x4, 0xfffff25a) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x80) 1.885186244s ago: executing program 7 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 1.080229974s ago: executing program 6 (id=803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") 975.688722ms ago: executing program 2 (id=804): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}]}}}}}}}, 0x0) 913.223946ms ago: executing program 1 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) 690.886746ms ago: executing program 1 (id=806): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 679.454095ms ago: executing program 2 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 530.433418ms ago: executing program 6 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x1000}) socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x1010, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffe6f, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x8000000) semget$private(0x0, 0x1, 0xb4) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x800200a0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000300100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8d, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00074c6926f2cadd70aa79b697263dcfdfa4fc0a7b00"/34, @ANYRES16=r5, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) 482.136205ms ago: executing program 7 (id=809): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[], 0x28}], 0x1}, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 467.861731ms ago: executing program 1 (id=810): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 422.792207ms ago: executing program 2 (id=811): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x28, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 247.259801ms ago: executing program 7 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0xf}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 246.84341ms ago: executing program 2 (id=813): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c965", 0x2}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) 0s ago: executing program 6 (id=814): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000004c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@usrquota}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") kernel console output (not intermixed with test programs): 879100][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.904558][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.931902][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.020221][ T2043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.060947][ T2043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.099946][ T5835] veth0_macvtap: entered promiscuous mode [ 113.143417][ T5835] veth1_macvtap: entered promiscuous mode [ 113.184395][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.203901][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.219234][ T5837] veth0_vlan: entered promiscuous mode [ 113.266242][ T2043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.285277][ T2043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.314061][ T5837] veth1_vlan: entered promiscuous mode [ 113.361478][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.362512][ T5833] Bluetooth: hci0: command tx timeout [ 113.389115][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.406213][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.423365][ T5836] veth0_vlan: entered promiscuous mode [ 113.432001][ T5845] Bluetooth: hci4: command tx timeout [ 113.437575][ T5833] Bluetooth: hci1: command tx timeout [ 113.459208][ T4890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.467102][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.468066][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.486816][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.497122][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.511962][ T5845] Bluetooth: hci3: command tx timeout [ 113.517362][ T5845] Bluetooth: hci5: command tx timeout [ 113.530175][ T5833] Bluetooth: hci2: command tx timeout [ 113.537191][ T4890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.658747][ T5836] veth1_vlan: entered promiscuous mode [ 113.703118][ T5837] veth0_macvtap: entered promiscuous mode [ 113.799993][ T5837] veth1_macvtap: entered promiscuous mode [ 113.942038][ T4890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.957292][ T4890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.049762][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.079899][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.112596][ T5977] netlink: 12 bytes leftover after parsing attributes in process `ÿ'. [ 114.113309][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.135538][ T5836] veth0_macvtap: entered promiscuous mode [ 114.199993][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.238015][ T5843] veth0_vlan: entered promiscuous mode [ 114.255469][ T5836] veth1_macvtap: entered promiscuous mode [ 114.290106][ T4890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.312700][ T3538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.333187][ T5981] random: crng reseeded on system resumption [ 114.364831][ T3538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.394858][ T5843] veth1_vlan: entered promiscuous mode [ 114.460540][ T3538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.497800][ T5843] veth0_macvtap: entered promiscuous mode [ 114.662363][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.686074][ T5843] veth1_macvtap: entered promiscuous mode [ 114.703873][ T5986] wireguard0: entered promiscuous mode [ 114.709436][ T5986] wireguard0: entered allmulticast mode [ 115.452475][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.778874][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.797173][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.945563][ T3538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.955267][ T3538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.977711][ T3538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.986830][ T3538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.018890][ T3538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.030064][ T3538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.049213][ T3418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.060506][ T3538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.082743][ T3418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.089797][ T3538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.182111][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.272788][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.317947][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.364711][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.444728][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.502905][ T30] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 116.539902][ T3729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.571974][ T30] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 116.601301][ T3729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.610048][ T30] usb 2-1: config 1 interface 1 has no altsetting 0 [ 116.643821][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.653455][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.662227][ T30] usb 2-1: Product: syz [ 116.671262][ T30] usb 2-1: Manufacturer: syz [ 116.677338][ T30] usb 2-1: SerialNumber: syz [ 116.756076][ T30] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 116.836495][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.857104][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.933815][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.977111][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.076836][ T6012] SET target dimension over the limit! [ 117.104741][ T2043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.154283][ T2043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.466439][ T31] audit: type=1326 audit(1766719634.542:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 117.583167][ T31] audit: type=1326 audit(1766719634.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 117.698281][ T31] audit: type=1326 audit(1766719634.542:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 117.853827][ T31] audit: type=1326 audit(1766719634.572:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 117.991433][ T31] audit: type=1326 audit(1766719634.572:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.020065][ T31] audit: type=1326 audit(1766719634.582:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.047336][ T31] audit: type=1326 audit(1766719634.582:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.111236][ T31] audit: type=1326 audit(1766719634.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.161103][ T31] audit: type=1326 audit(1766719634.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.288057][ T31] audit: type=1326 audit(1766719634.592:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1798f749 code=0x7ffc0000 [ 118.559248][ T30] usb 2-1: USB disconnect, device number 2 [ 120.157995][ T6065] loop1: detected capacity change from 0 to 512 [ 120.202951][ T6067] loop4: detected capacity change from 0 to 512 [ 120.294463][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 120.297082][ T6065] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.307614][ T6075] tipc: Started in network mode [ 120.354902][ T6067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 120.365555][ T6065] EXT4-fs (loop1): mount failed [ 120.374761][ T6067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.387784][ T6067] EXT4-fs warning (device loop4): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 120.431848][ T6075] tipc: Node identity , cluster identity 4711 [ 120.463781][ T6067] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 120.478533][ T6075] tipc: Failed to obtain node identity [ 120.486199][ T6067] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.34: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.524483][ T6075] tipc: Enabling of bearer rejected, failed to enable media [ 120.556412][ T6067] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.34: couldn't read orphan inode 13 (err -117) [ 120.618009][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.802029][ T6067] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 120.914154][ T6067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 121.075347][ T6067] EXT4-fs warning (device loop4): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.419465][ T6093] loop0: detected capacity change from 0 to 1024 [ 121.634912][ T6093] ======================================================= [ 121.634912][ T6093] WARNING: The mand mount option has been deprecated and [ 121.634912][ T6093] and is ignored by this kernel. Remove the mand [ 121.634912][ T6093] option from the mount to silence this warning. [ 121.634912][ T6093] ======================================================= [ 122.194956][ T6093] EXT4-fs: Ignoring removed oldalloc option [ 122.208101][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.389377][ T6093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.445355][ T6100] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 122.504551][ T6093] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.599144][ T6103] erspan1: entered allmulticast mode [ 122.616299][ T6093] EXT4-fs error (device loop0): ext4_free_blocks:6727: comm syz.0.43: Freeing blocks not in datazone - block = 0, count = 16 [ 122.658671][ T6103] team0: Port device erspan1 added [ 123.146111][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.606863][ T31] kauditd_printk_skb: 110 callbacks suppressed [ 123.606889][ T31] audit: type=1326 audit(1766719640.682:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 123.740606][ T31] audit: type=1326 audit(1766719640.682:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 123.879344][ T31] audit: type=1326 audit(1766719640.712:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.011773][ T31] audit: type=1326 audit(1766719640.712:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.082030][ T31] audit: type=1326 audit(1766719640.712:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.138619][ T31] audit: type=1326 audit(1766719640.712:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.744868][ T31] audit: type=1326 audit(1766719640.712:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.745418][ T31] audit: type=1326 audit(1766719640.712:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.745849][ T31] audit: type=1326 audit(1766719640.712:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 124.746114][ T31] audit: type=1326 audit(1766719640.712:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 125.011082][ T6137] syzkaller0: entered promiscuous mode [ 125.080389][ T6137] syzkaller0: entered allmulticast mode [ 125.490908][ T6154] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.157601][ T6154] loop3: detected capacity change from 0 to 1024 [ 126.198675][ T6154] EXT4-fs: Ignoring removed orlov option [ 126.277840][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.486828][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 126.597040][ T6173] mmap: syz.3.61 (6173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.929236][ T6175] random: crng reseeded on system resumption [ 127.906196][ T6168] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 127.936063][ T6168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 127.979409][ T6168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 128.291060][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.299081][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 129.763463][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 129.763489][ T31] audit: type=1326 audit(1766719646.842:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 129.845353][ T31] audit: type=1326 audit(1766719646.872:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 129.917090][ T6207] loop2: detected capacity change from 0 to 1024 [ 129.926523][ T31] audit: type=1326 audit(1766719646.872:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 129.961394][ T6207] EXT4-fs: Ignoring removed orlov option [ 130.048708][ T31] audit: type=1326 audit(1766719646.872:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 130.090478][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.172869][ T31] audit: type=1326 audit(1766719646.872:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 130.177526][ T6207] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.282432][ T31] audit: type=1326 audit(1766719646.872:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 130.413474][ T31] audit: type=1326 audit(1766719646.872:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a9b8f749 code=0x7ffc0000 [ 130.597434][ T31] audit: type=1326 audit(1766719647.062:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f018f749 code=0x7ffc0000 [ 130.620906][ T31] audit: type=1326 audit(1766719647.062:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f018f749 code=0x7ffc0000 [ 130.644611][ T31] audit: type=1326 audit(1766719647.062:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe9f018f749 code=0x7ffc0000 [ 130.655927][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.311368][ T6227] syzkaller0: entered promiscuous mode [ 132.339038][ T6227] syzkaller0: entered allmulticast mode [ 132.395832][ T6241] process 'syz.0.88' launched './file0' with NULL argv: empty string added [ 132.407019][ T6233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.658940][ T6246] 9p: Bad value for 'rfdno' [ 132.735628][ T6249] syz.0.91 uses obsolete (PF_INET,SOCK_PACKET) [ 133.051146][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 133.665585][ T6258] hsr_slave_0: left promiscuous mode [ 133.675013][ T6258] hsr_slave_1: left promiscuous mode [ 134.095121][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 134.142495][ T6273] IPVS: Unknown mcast interface: vetN1_macvtap [ 134.227397][ T6276] loop0: detected capacity change from 0 to 512 [ 134.337717][ T6276] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 134.440325][ T6276] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.487027][ T6276] FAT-fs (loop0): FAT read failed (blocknr 128) [ 135.448832][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 135.448858][ T31] audit: type=1326 audit(1766719652.512:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.552939][ T31] audit: type=1326 audit(1766719652.522:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.635039][ T6298] 9p: Bad value for 'rfdno' [ 135.648400][ T31] audit: type=1326 audit(1766719652.522:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.732202][ T31] audit: type=1326 audit(1766719652.522:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.768874][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 135.807732][ T31] audit: type=1326 audit(1766719652.552:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.866759][ T6302] loop3: detected capacity change from 0 to 512 [ 135.907239][ T31] audit: type=1326 audit(1766719652.592:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.952198][ T31] audit: type=1326 audit(1766719652.592:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 135.975428][ T31] audit: type=1326 audit(1766719652.592:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 136.003938][ T31] audit: type=1326 audit(1766719652.592:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 136.014098][ T6302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.026271][ T31] audit: type=1326 audit(1766719652.592:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.5.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 136.091909][ T6302] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.278198][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.288533][ T6305] syzkaller0: entered promiscuous mode [ 136.341907][ T6305] syzkaller0: entered allmulticast mode [ 136.515090][ T6316] program syz.0.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.560239][ T6316] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 136.664900][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 138.200638][ T6343] loop1: detected capacity change from 0 to 512 [ 138.224485][ T6343] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 138.243051][ T6343] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.288444][ T6343] FAT-fs (loop1): FAT read failed (blocknr 128) [ 138.501575][ T6325] IPVS: Unknown mcast interface: vetN1_macvtap [ 138.822633][ T6353] 9p: Bad value for 'rfdno' [ 138.847501][ T6356] loop4: detected capacity change from 0 to 512 [ 138.889149][ T6356] EXT4-fs: Ignoring removed i_version option [ 138.950476][ T5840] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.962562][ T6356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.997786][ T6355] loop5: detected capacity change from 0 to 2048 [ 139.013065][ T5840] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.015366][ T6356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.045472][ T6358] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 139.083003][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 139.119910][ T6355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.162565][ T6358] veth0_macvtap: left promiscuous mode [ 139.179630][ T6356] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.218970][ T6356] EXT4-fs (loop4): 1 truncate cleaned up [ 139.303963][ T6356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.599184][ T6368] fido_id[6368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.735730][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.011400][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.335595][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 140.352766][ T6387] IPVS: Unknown mcast interface: vetN1_macvtap [ 140.958120][ T6393] syzkaller0: entered promiscuous mode [ 140.964021][ T6393] syzkaller0: entered allmulticast mode [ 141.889902][ T6404] 9p: Bad value for 'rfdno' [ 142.420443][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.427089][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.515836][ T6415] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.143'. [ 143.914355][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 144.021106][ T6429] IPVS: Unknown mcast interface: vetN1_macvtap [ 144.405454][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.381546][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 145.381569][ T31] audit: type=1326 audit(1766719662.452:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.551112][ T31] audit: type=1326 audit(1766719662.522:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.607508][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.680831][ T31] audit: type=1326 audit(1766719662.522:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.704368][ T31] audit: type=1326 audit(1766719662.522:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.728185][ T31] audit: type=1326 audit(1766719662.522:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.750646][ T31] audit: type=1326 audit(1766719662.522:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.789395][ T31] audit: type=1326 audit(1766719662.522:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.868272][ T31] audit: type=1326 audit(1766719662.522:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 145.974598][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.976204][ T31] audit: type=1326 audit(1766719662.522:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 146.059257][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.070901][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.079114][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.099343][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.107416][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.128421][ T31] audit: type=1326 audit(1766719662.522:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 146.203499][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.417581][ T6456] syzkaller0: entered promiscuous mode [ 146.423181][ T6456] syzkaller0: entered allmulticast mode [ 148.233001][ T5833] Bluetooth: hci5: command tx timeout [ 149.623510][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 149.695609][ T6480] IPVS: Unknown mcast interface: vetN1_macvtap [ 149.865146][ T78] bridge_slave_1: left allmulticast mode [ 149.933662][ T78] bridge_slave_1: left promiscuous mode [ 150.007642][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.351783][ T5833] Bluetooth: hci5: command tx timeout [ 150.744249][ T78] bridge_slave_0: left allmulticast mode [ 150.749943][ T78] bridge_slave_0: left promiscuous mode [ 150.767401][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.388671][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.411560][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.423623][ T78] bond0 (unregistering): Released all slaves [ 152.392412][ T5833] Bluetooth: hci5: command tx timeout [ 152.421876][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 152.467289][ T6522] IPVS: Unknown mcast interface: ip [ 152.531004][ T6527] netlink: 'syz.5.182': attribute type 1 has an invalid length. [ 152.717789][ T6526] syzkaller0: entered promiscuous mode [ 152.780164][ T6526] syzkaller0: entered allmulticast mode [ 154.475119][ T5833] Bluetooth: hci5: command tx timeout [ 154.785132][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.806412][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.814099][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.829800][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.841418][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.001742][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 155.001768][ T31] audit: type=1326 audit(1766719672.072:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.5.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 155.088259][ T31] audit: type=1326 audit(1766719672.072:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.5.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 155.125055][ T31] audit: type=1326 audit(1766719672.072:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.5.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 155.150575][ T31] audit: type=1326 audit(1766719672.072:257): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.5.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 156.079621][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.195'. [ 156.124044][ T6575] syzkaller0: entered promiscuous mode [ 156.129608][ T6575] syzkaller0: entered allmulticast mode [ 156.874697][ T5833] Bluetooth: hci6: command tx timeout [ 157.244410][ T6589] IPVS: Unknown mcast interface: ip [ 157.285546][ T78] hsr_slave_0: left promiscuous mode [ 157.314661][ T78] hsr_slave_1: left promiscuous mode [ 157.331335][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.369033][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.409465][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.441909][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.524703][ T78] veth1_macvtap: left promiscuous mode [ 157.544443][ T78] veth0_macvtap: left promiscuous mode [ 157.573156][ T78] veth1_vlan: left promiscuous mode [ 157.578607][ T78] veth0_vlan: left promiscuous mode [ 157.602194][ T3568] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.613672][ T3568] Bluetooth: hci0: Frame reassembly failed (-90) [ 157.629615][ T6607] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.951699][ T5845] Bluetooth: hci6: command tx timeout [ 159.131465][ T78] team0 (unregistering): Port device team_slave_1 removed [ 159.167637][ T78] team0 (unregistering): Port device team_slave_0 removed [ 159.681858][ T5833] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.688859][ T5845] Bluetooth: hci0: command 0x1003 tx timeout [ 160.472073][ T6620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.531094][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 160.725296][ T6631] lo speed is unknown, defaulting to 1000 [ 160.879648][ T6631] lo speed is unknown, defaulting to 1000 [ 160.900339][ T6567] chnl_net:caif_netlink_parms(): no params data found [ 160.959558][ T6631] lo speed is unknown, defaulting to 1000 [ 160.999333][ T6631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.052789][ T5833] Bluetooth: hci6: command tx timeout [ 161.113598][ T6631] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.208022][ T6631] lo speed is unknown, defaulting to 1000 [ 162.217339][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.241867][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.258610][ T6453] bridge_slave_0: entered allmulticast mode [ 162.270021][ T6453] bridge_slave_0: entered promiscuous mode [ 162.306333][ T6655] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 162.316480][ T6655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 162.326196][ T6655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 162.401864][ T31] audit: type=1800 audit(1766719679.382:258): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.214" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 162.524748][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.532977][ T6631] lo speed is unknown, defaulting to 1000 [ 162.563331][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.570615][ T6453] bridge_slave_1: entered allmulticast mode [ 162.649427][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 162.649956][ T6453] bridge_slave_1: entered promiscuous mode [ 162.727090][ T6631] lo speed is unknown, defaulting to 1000 [ 163.002686][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.009863][ T6631] lo speed is unknown, defaulting to 1000 [ 163.163123][ T5833] Bluetooth: hci6: command tx timeout [ 163.660942][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.668395][ T6567] bridge_slave_0: entered allmulticast mode [ 163.676367][ T6567] bridge_slave_0: entered promiscuous mode [ 163.715783][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.730463][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.800209][ T6453] team0: Port device team_slave_0 added [ 163.809685][ T6453] team0: Port device team_slave_1 added [ 163.861262][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.869734][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.903845][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.917654][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.928004][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.961723][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.001831][ T6631] lo speed is unknown, defaulting to 1000 [ 164.750584][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.761809][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.772228][ T6567] bridge_slave_1: entered allmulticast mode [ 164.780485][ T6567] bridge_slave_1: entered promiscuous mode [ 164.788590][ T6631] lo speed is unknown, defaulting to 1000 [ 164.842485][ T6453] hsr_slave_0: entered promiscuous mode [ 164.849504][ T6453] hsr_slave_1: entered promiscuous mode [ 164.858441][ T6453] debugfs: 'hsr0' already exists in 'hsr' [ 164.868026][ T6453] Cannot create hsr debugfs directory [ 165.502627][ T6631] lo speed is unknown, defaulting to 1000 [ 165.561507][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.741061][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.747425][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'. [ 165.795244][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.824491][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.893062][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.026403][ T6690] IPVS: Unknown mcast interface: ip [ 166.139055][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.239187][ T6567] team0: Port device team_slave_0 added [ 166.288384][ T6567] team0: Port device team_slave_1 added [ 167.567013][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.678752][ T6720] Zero length message leads to an empty skb [ 167.714581][ T6711] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 167.724113][ T6711] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 167.735558][ T6711] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 167.793414][ T31] audit: type=1800 audit(1766719684.792:259): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 167.844232][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.5.229'. [ 169.201439][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.405507][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.518774][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.773525][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.794426][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.871718][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.191105][ T6749] siw: device registration error -23 [ 171.156247][ T6757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.883829][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'. [ 172.939386][ T6567] hsr_slave_0: entered promiscuous mode [ 172.946887][ T6567] hsr_slave_1: entered promiscuous mode [ 172.955543][ T6567] debugfs: 'hsr0' already exists in 'hsr' [ 172.961516][ T6567] Cannot create hsr debugfs directory [ 172.988776][ T6780] IPVS: Unknown mcast interface: ipvla [ 173.015611][ T6453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.073501][ T6453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.138949][ T6453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.293376][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 174.765964][ T6453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.900911][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.032203][ T78] bridge_slave_1: left allmulticast mode [ 176.056072][ T78] bridge_slave_1: left promiscuous mode [ 176.086692][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.111569][ T78] bridge_slave_0: left allmulticast mode [ 176.118872][ T78] bridge_slave_0: left promiscuous mode [ 176.128529][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.832701][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.851381][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.866816][ T78] bond0 (unregistering): Released all slaves [ 176.920159][ T6811] syzkaller0: entered promiscuous mode [ 176.925900][ T6811] syzkaller0: entered allmulticast mode [ 176.965411][ T6817] lo speed is unknown, defaulting to 1000 [ 176.977750][ T6819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.044271][ T6818] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 177.055525][ T6818] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 177.065190][ T6818] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 177.072424][ T31] audit: type=1800 audit(1766719694.122:260): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.245" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 178.170623][ T6817] lo speed is unknown, defaulting to 1000 [ 178.259711][ T6817] lo speed is unknown, defaulting to 1000 [ 178.354098][ T6817] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.875336][ T6817] lo speed is unknown, defaulting to 1000 [ 179.911573][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.029739][ T6817] lo speed is unknown, defaulting to 1000 [ 180.100647][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 180.141212][ T6817] lo speed is unknown, defaulting to 1000 [ 180.251743][ T6860] IPVS: Unknown mcast interface: ipvla [ 180.261996][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.269150][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.297443][ T6817] lo speed is unknown, defaulting to 1000 [ 180.389363][ T6817] lo speed is unknown, defaulting to 1000 [ 180.487454][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.494685][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.537381][ T6817] lo speed is unknown, defaulting to 1000 [ 180.571186][ T6817] lo speed is unknown, defaulting to 1000 [ 180.588420][ T6567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.657332][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 182.218810][ T78] hsr_slave_0: left promiscuous mode [ 182.275915][ T78] hsr_slave_1: left promiscuous mode [ 182.285694][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.549381][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.560731][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.571120][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.597853][ T78] veth1_macvtap: left promiscuous mode [ 182.606133][ T78] veth0_macvtap: left promiscuous mode [ 182.613891][ T78] veth1_vlan: left promiscuous mode [ 182.619410][ T78] veth0_vlan: left promiscuous mode [ 182.972613][ T78] team0 (unregistering): Port device team_slave_1 removed [ 183.009920][ T78] team0 (unregistering): Port device team_slave_0 removed [ 183.348634][ T6567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.454177][ T6890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.683563][ T6567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.787993][ T6050] lo speed is unknown, defaulting to 1000 [ 183.874207][ T6567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.201219][ T6906] syzkaller0: entered promiscuous mode [ 184.216227][ T6906] syzkaller0: entered allmulticast mode [ 184.373681][ T6901] syz.5.261 (6901) used greatest stack depth: 17544 bytes left [ 184.770309][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.5.266'. [ 185.896301][ T6945] siw: device registration error -23 [ 186.180889][ T6930] IPVS: Unknown mcast interface: ipvla [ 189.067160][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.312019][ T6964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.451492][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.562259][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.677315][ T6971] syzkaller0: entered promiscuous mode [ 189.692085][ T6971] syzkaller0: entered allmulticast mode [ 189.897749][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.905068][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.006125][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.013368][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.553847][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.282'. [ 192.490865][ T7003] IPVS: Unknown mcast interface: ipvlan [ 192.782866][ T7025] siw: device registration error -23 [ 193.108035][ T6453] veth0_vlan: entered promiscuous mode [ 193.169599][ T6453] veth1_vlan: entered promiscuous mode [ 195.268892][ T6453] veth0_macvtap: entered promiscuous mode [ 195.294077][ T6453] veth1_macvtap: entered promiscuous mode [ 195.437448][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.927866][ T7053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.311819][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.407561][ T3538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.874955][ T3538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.985119][ T3538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.098494][ T3538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.803774][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.047999][ T7078] siw: device registration error -23 [ 198.239678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.267298][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.373366][ T7074] syzkaller0: entered promiscuous mode [ 198.378996][ T7074] syzkaller0: entered allmulticast mode [ 198.461579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.501553][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.029141][ T7125] 9p: Bad value for 'rfdno' [ 202.429598][ T7135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.269433][ T6567] veth0_vlan: entered promiscuous mode [ 203.390677][ T6567] veth1_vlan: entered promiscuous mode [ 203.468456][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'. [ 203.495124][ T7145] IPVS: Unknown mcast interface: ipvlan [ 203.838998][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.845574][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.404414][ T7151] siw: device registration error -23 [ 204.938737][ T6567] veth0_macvtap: entered promiscuous mode [ 206.441088][ T7166] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 206.450949][ T7166] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 206.460976][ T7166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 206.941068][ T6567] veth1_macvtap: entered promiscuous mode [ 207.155301][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.245056][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.320709][ T6027] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.359068][ T6027] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.384643][ T60] Bluetooth: hci0: Frame reassembly failed (-90) [ 207.594122][ T7186] syzkaller0: entered promiscuous mode [ 207.599963][ T7186] syzkaller0: entered allmulticast mode [ 207.617303][ T6027] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.049047][ T7190] syzkaller0: entered promiscuous mode [ 208.095223][ T7190] syzkaller0: entered allmulticast mode [ 208.556077][ T6027] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.368488][ T7196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.432773][ T5845] Bluetooth: hci0: command 0x1003 tx timeout [ 209.442454][ T5833] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.745417][ T7223] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 212.754934][ T7223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 212.764559][ T7223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 213.172771][ T7234] siw: device registration error -23 [ 213.334294][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.358546][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.516280][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.581550][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.446986][ T7254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.207867][ T7260] syzkaller0: entered promiscuous mode [ 215.215189][ T7260] syzkaller0: entered allmulticast mode [ 217.001303][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.011344][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.041168][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.191726][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.207662][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.914327][ T7277] lo speed is unknown, defaulting to 1000 [ 218.220208][ T7294] siw: device registration error -23 [ 218.420733][ T7295] syzkaller0: entered promiscuous mode [ 218.431431][ T7295] syzkaller0: entered allmulticast mode [ 219.352983][ T5845] Bluetooth: hci0: command tx timeout [ 220.205589][ T6020] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.444303][ T5845] Bluetooth: hci0: command tx timeout [ 222.974450][ T7317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.123184][ T6020] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.574076][ T5845] Bluetooth: hci0: command tx timeout [ 224.286834][ T7349] syzkaller0: entered promiscuous mode [ 224.327519][ T7349] syzkaller0: entered allmulticast mode [ 225.594503][ T5845] Bluetooth: hci0: command tx timeout [ 227.842993][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.6.367'. [ 228.856463][ T6020] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.910987][ T7370] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 228.920396][ T7370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 228.930258][ T7370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 228.980270][ T7414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.281194][ T6020] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.349154][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.6.369'. [ 229.376790][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.6.369'. [ 229.442768][ T7429] siw: device registration error -23 [ 229.470105][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 231.762224][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 231.768267][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 231.774410][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 232.623774][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 233.417944][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.637562][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'. [ 233.733135][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.957714][ T7277] bridge_slave_0: entered allmulticast mode [ 233.966291][ T7277] bridge_slave_0: entered promiscuous mode [ 234.025366][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.035971][ T7463] netlink: 68 bytes leftover after parsing attributes in process `syz.6.380'. [ 234.133396][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.218225][ T7277] bridge_slave_1: entered allmulticast mode [ 234.265355][ T7277] bridge_slave_1: entered promiscuous mode [ 234.779320][ T7493] siw: device registration error -23 [ 234.910321][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.076669][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.122110][ T6020] bridge_slave_1: left allmulticast mode [ 237.127818][ T6020] bridge_slave_1: left promiscuous mode [ 237.323580][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.096754][ T6020] bridge_slave_0: left allmulticast mode [ 238.106626][ T6020] bridge_slave_0: left promiscuous mode [ 238.118619][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.274989][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 239.609117][ T6020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.623116][ T6020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.634184][ T6020] bond0 (unregistering): Released all slaves [ 239.652961][ T7277] team0: Port device team_slave_0 added [ 239.773493][ T7277] team0: Port device team_slave_1 added [ 240.082802][ T7566] 9p: Bad value for 'wfdno' [ 242.650780][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.661622][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.694399][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.768785][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.791229][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.816018][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.885793][ T7595] capability: warning: `syz.3.411' uses deprecated v2 capabilities in a way that may be insecure [ 245.094097][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.413'. [ 246.026424][ T7617] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 246.035848][ T7617] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 246.045456][ T7617] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 246.389148][ T6020] hsr_slave_0: left promiscuous mode [ 246.403044][ T6020] hsr_slave_1: left promiscuous mode [ 246.413921][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.421547][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.436032][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.445050][ T7629] 9p: Bad value for 'wfdno' [ 246.452331][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.475220][ T7632] siw: device registration error -23 [ 246.532566][ T6020] veth1_macvtap: left promiscuous mode [ 246.540898][ T6020] veth0_macvtap: left promiscuous mode [ 246.556941][ T6020] veth1_vlan: left promiscuous mode [ 246.580898][ T6020] veth0_vlan: left promiscuous mode [ 248.273851][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 248.374918][ T6020] team0 (unregistering): Port device team_slave_0 removed [ 248.714586][ T5845] Bluetooth: hci6: command 0x1003 tx timeout [ 248.721445][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 249.203282][ T7277] hsr_slave_0: entered promiscuous mode [ 249.233266][ T7277] hsr_slave_1: entered promiscuous mode [ 250.680115][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'. [ 250.770003][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 251.041149][ T7677] loop3: detected capacity change from 0 to 8192 [ 251.103137][ T7677] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.639548][ T7697] random: crng reseeded on system resumption [ 252.595501][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 253.899664][ T7277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 254.008784][ T7731] usb usb8: usbfs: process 7731 (syz.5.447) did not claim interface 0 before use [ 254.043979][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 254.094242][ T7277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 254.259089][ T7738] vlan2: entered allmulticast mode [ 254.311710][ T7738] dummy0: entered allmulticast mode [ 254.513229][ T7747] loop2: detected capacity change from 0 to 512 [ 254.530831][ T7277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 254.570849][ T7747] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.448: error while reading EA inode 32 err=-116 [ 254.694604][ T7744] loop5: detected capacity change from 0 to 2048 [ 254.705241][ T7277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 254.713290][ T7747] EXT4-fs (loop2): Remounting filesystem read-only [ 254.751768][ T7747] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -30) [ 254.793840][ T7744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.829186][ T7747] EXT4-fs (loop2): 1 orphan inode deleted [ 254.880019][ T7747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.942373][ T7744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.023154][ T7747] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.224410][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 255.494693][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.543282][ T7768] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 255.668614][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.774181][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.781347][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.844881][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.852070][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.020010][ T7778] syzkaller0: entered promiscuous mode [ 256.035504][ T7778] syzkaller0: entered allmulticast mode [ 256.855883][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 257.125898][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.583165][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 258.246810][ T31] audit: type=1326 audit(1766719775.322:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 258.316412][ T7750] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 258.340369][ T31] audit: type=1326 audit(1766719775.322:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 258.451839][ T31] audit: type=1326 audit(1766719775.332:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 258.518012][ T7277] veth0_vlan: entered promiscuous mode [ 258.540030][ T31] audit: type=1326 audit(1766719775.332:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 258.594610][ T7277] veth1_vlan: entered promiscuous mode [ 259.011196][ T7277] veth0_macvtap: entered promiscuous mode [ 259.035827][ T7277] veth1_macvtap: entered promiscuous mode [ 259.686581][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.794257][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.835089][ T7853] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 259.867456][ T6036] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.911806][ T6036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.951769][ T7853] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 259.960280][ T7853] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 259.969226][ T6036] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.011715][ T6036] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.086846][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 260.341819][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.386276][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.590957][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.627556][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.630711][ T7874] loop2: detected capacity change from 0 to 512 [ 260.679216][ T6098] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 260.737559][ T6098] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 260.781708][ T6098] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 260.821358][ T7874] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 260.905078][ T7874] EXT4-fs (loop2): group descriptors corrupted! [ 260.941399][ T6098] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 261.501797][ T31] audit: type=1326 audit(1766719778.542:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 261.717719][ T31] audit: type=1326 audit(1766719778.542:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 261.899850][ T31] audit: type=1326 audit(1766719778.542:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 261.958925][ T7882] fido_id[7882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.020909][ T31] audit: type=1326 audit(1766719778.542:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 262.105403][ T31] audit: type=1326 audit(1766719778.542:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 262.158135][ T7895] loop7: detected capacity change from 0 to 2048 [ 262.274728][ T31] audit: type=1326 audit(1766719778.552:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 262.314945][ T7895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.802369][ T7899] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 263.124699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.292670][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 263.292695][ T31] audit: type=1326 audit(1766719780.372:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 263.418573][ T31] audit: type=1326 audit(1766719780.402:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.485676][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 263.514056][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 263.542438][ T31] audit: type=1326 audit(1766719780.402:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.637574][ T31] audit: type=1326 audit(1766719780.412:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.729343][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.738495][ T31] audit: type=1326 audit(1766719780.412:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.738567][ T31] audit: type=1326 audit(1766719780.412:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.738636][ T31] audit: type=1326 audit(1766719780.412:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.738704][ T31] audit: type=1326 audit(1766719780.412:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.738771][ T31] audit: type=1326 audit(1766719780.412:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.738838][ T31] audit: type=1326 audit(1766719780.412:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.7.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c877c2005 code=0x7ffc0000 [ 263.786873][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 263.859566][ T7924] usb usb1: usbfs: process 7924 (syz.3.496) did not claim interface 0 before use [ 265.281360][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.302703][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.598375][ T5840] IPVS: starting estimator thread 0... [ 265.744754][ T7956] IPVS: using max 23 ests per chain, 55200 per kthread [ 266.186417][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.516'. [ 266.468873][ T7986] syzkaller0: entered promiscuous mode [ 266.504468][ T7986] syzkaller0: entered allmulticast mode [ 266.524490][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.516'. [ 266.780419][ T7999] ref_ctr increment failed for inode: 0x27d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807cf48000 [ 267.079760][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.521'. [ 267.198804][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.521'. [ 269.426501][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 269.426526][ T31] audit: type=1326 audit(1766719786.502:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.533727][ T31] audit: type=1326 audit(1766719786.542:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.606811][ T31] audit: type=1326 audit(1766719786.542:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.711379][ T31] audit: type=1326 audit(1766719786.542:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.771848][ T31] audit: type=1326 audit(1766719786.542:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.862704][ T31] audit: type=1326 audit(1766719786.552:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 269.977928][ T31] audit: type=1326 audit(1766719786.552:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 270.045322][ T8045] loop3: detected capacity change from 0 to 512 [ 270.057842][ T31] audit: type=1326 audit(1766719786.552:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 270.086259][ T31] audit: type=1326 audit(1766719786.552:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 270.145709][ T8045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.179344][ T8045] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.200477][ T31] audit: type=1326 audit(1766719786.552:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 270.320956][ T8059] loop7: detected capacity change from 0 to 512 [ 270.362910][ T8059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 270.407190][ C0] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 270.412933][ T8059] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.537: bad orphan inode 131083 [ 270.417141][ T8045] loop3: detected capacity change from 512 to 0 [ 270.457588][ T8059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.467886][ T8060] EXT4-fs error (device loop3): __ext4_find_entry:1613: inode #2: comm syz.3.539: reading directory lblock 0 [ 270.521512][ T8060] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 270.580434][ T8060] EXT4-fs (loop3): I/O error while writing superblock [ 270.605754][ T8060] EXT4-fs (loop3): Remounting filesystem read-only [ 270.724233][ T8063] syzkaller0: entered promiscuous mode [ 270.729783][ T8063] syzkaller0: entered allmulticast mode [ 271.063258][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.104907][ T8049] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 271.368232][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.769481][ T8077] netlink: 'syz.5.548': attribute type 9 has an invalid length. [ 271.809117][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 272.119188][ T8084] loop1: detected capacity change from 0 to 512 [ 272.165077][ T8084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.198454][ T8084] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.479408][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 273.818126][ T8099] siw: device registration error -23 [ 274.035877][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.432697][ T3568] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.585131][ T3568] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.727858][ T3568] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.834518][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.836848][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.837756][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.838814][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.839549][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.013628][ T8135] syzkaller0: entered promiscuous mode [ 277.032397][ T8135] syzkaller0: entered allmulticast mode [ 277.094300][ T3568] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.226801][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 278.226825][ T31] audit: type=1326 audit(1766719795.302:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.7.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 278.257759][ T31] audit: type=1326 audit(1766719795.332:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.7.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 278.285707][ T31] audit: type=1326 audit(1766719795.332:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.7.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 278.324749][ T31] audit: type=1326 audit(1766719795.332:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.7.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 278.356407][ T31] audit: type=1326 audit(1766719795.332:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.7.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 278.872454][ T5845] Bluetooth: hci4: command tx timeout [ 279.053384][ T8155] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 279.063190][ T8155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 279.073000][ T8155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 279.128954][ T8137] lo speed is unknown, defaulting to 1000 [ 279.199938][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.578'. [ 279.300963][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.578'. [ 279.521099][ T8175] loop2: detected capacity change from 0 to 164 [ 279.581390][ T8175] Unable to read rock-ridge attributes [ 279.657482][ T3568] bridge_slave_1: left allmulticast mode [ 279.695437][ T3568] bridge_slave_1: left promiscuous mode [ 279.701274][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.756872][ T31] audit: type=1326 audit(1766719796.822:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.5.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 279.817434][ T3568] bridge_slave_0: left allmulticast mode [ 279.835719][ T3568] bridge_slave_0: left promiscuous mode [ 279.871508][ T31] audit: type=1326 audit(1766719796.822:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.5.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 279.911981][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.961741][ T37] Bluetooth: hci6: Frame reassembly failed (-84) [ 279.969615][ T31] audit: type=1326 audit(1766719796.822:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.5.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da998f749 code=0x7ffc0000 [ 280.116337][ T8193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.123921][ T8193] IPv6: NLM_F_CREATE should be set when creating new route [ 280.467473][ T3568] team0: Port device erspan1 removed [ 280.898309][ T8200] Unable to read rock-ridge attributes [ 280.991855][ T52] Bluetooth: hci4: command tx timeout [ 281.668846][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.685236][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.704030][ T3568] bond0 (unregistering): Released all slaves [ 281.747089][ T8208] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 281.757569][ T8208] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 281.767528][ T8208] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 282.001677][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 282.002074][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 282.197046][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.595'. [ 282.358219][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 282.501706][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.595'. [ 282.655209][ T8235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 283.036051][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.075361][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.100033][ T8137] bridge_slave_0: entered allmulticast mode [ 283.113481][ T5845] Bluetooth: hci4: command tx timeout [ 283.219067][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.602'. [ 283.696756][ T8137] bridge_slave_0: entered promiscuous mode [ 283.858018][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.865648][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.873009][ T8137] bridge_slave_1: entered allmulticast mode [ 283.881424][ T8137] bridge_slave_1: entered promiscuous mode [ 284.876778][ T8271] random: crng reseeded on system resumption [ 285.212458][ T5845] Bluetooth: hci4: command tx timeout [ 285.354666][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.398863][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.710988][ T31] audit: type=1326 audit(1766719802.782:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 285.754595][ T8137] team0: Port device team_slave_0 added [ 285.776751][ T8137] team0: Port device team_slave_1 added [ 285.791815][ T31] audit: type=1326 audit(1766719802.782:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 285.863380][ T31] audit: type=1326 audit(1766719802.802:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 285.981719][ T31] audit: type=1326 audit(1766719802.802:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.074103][ T31] audit: type=1326 audit(1766719802.802:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.142083][ T8288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.611'. [ 286.149467][ T31] audit: type=1326 audit(1766719802.802:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.185494][ T31] audit: type=1326 audit(1766719802.802:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.211137][ T31] audit: type=1326 audit(1766719802.802:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.279482][ T31] audit: type=1326 audit(1766719802.802:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 286.305212][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.313692][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.344212][ T31] audit: type=1326 audit(1766719802.812:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d4f791667 code=0x7ffc0000 [ 286.367148][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.382130][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 286.403465][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.421689][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.470777][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.530771][ T3568] hsr_slave_0: left promiscuous mode [ 286.543343][ T3568] hsr_slave_1: left promiscuous mode [ 286.559863][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.595924][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.637706][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.671814][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.762447][ T3568] veth1_macvtap: left promiscuous mode [ 286.768585][ T3568] veth1_vlan: left promiscuous mode [ 286.780223][ T3568] veth0_vlan: left promiscuous mode [ 287.030102][ T8299] loop6: detected capacity change from 0 to 1024 [ 287.104663][ T8299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.402563][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.743704][ T8317] loop7: detected capacity change from 0 to 128 [ 287.772695][ T8317] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.826535][ T8317] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.054664][ T7277] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.294612][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 288.355769][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 288.877518][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 289.147597][ T8137] hsr_slave_0: entered promiscuous mode [ 289.184655][ T8137] hsr_slave_1: entered promiscuous mode [ 289.207970][ T8137] debugfs: 'hsr0' already exists in 'hsr' [ 289.231668][ T8137] Cannot create hsr debugfs directory [ 289.934230][ T8343] veth2: entered promiscuous mode [ 290.037396][ T8343] veth2: entered allmulticast mode [ 290.913057][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 290.913082][ T31] audit: type=1326 audit(1766719807.982:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.025756][ T31] audit: type=1326 audit(1766719807.982:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.111886][ T31] audit: type=1326 audit(1766719808.022:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.229519][ T31] audit: type=1326 audit(1766719808.032:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.326931][ T31] audit: type=1326 audit(1766719808.032:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.433660][ T31] audit: type=1326 audit(1766719808.032:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.540495][ T31] audit: type=1326 audit(1766719808.032:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.564733][ T31] audit: type=1326 audit(1766719808.052:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.587441][ T31] audit: type=1326 audit(1766719808.052:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 291.610016][ T31] audit: type=1326 audit(1766719808.052:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8778f749 code=0x7ffc0000 [ 292.219848][ T8137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 292.308987][ T8137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 292.390340][ T8137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 292.458371][ T8137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 292.818970][ T8404] dvmrp1: entered allmulticast mode [ 292.855682][ T8405] dvmrp1: left allmulticast mode [ 293.103540][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.191508][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.246423][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.253648][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.383664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.390893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.608192][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.883673][ T8472] loop7: detected capacity change from 0 to 512 [ 296.933077][ T8472] EXT4-fs (loop7): orphan cleanup on readonly fs [ 297.002585][ T8472] EXT4-fs warning (device loop7): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 297.024472][ T8472] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 297.055845][ T8472] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 297.124946][ T8472] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.665: couldn't read orphan inode 13 (err -117) [ 297.214826][ T8472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.342506][ T8472] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 297.377013][ T8472] EXT4-fs warning (device loop7): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 297.493846][ T8472] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 297.559159][ T8472] EXT4-fs warning (device loop7): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 298.496115][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.588590][ T8497] siw: device registration error -23 [ 298.814313][ T8137] veth0_vlan: entered promiscuous mode [ 298.824335][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 298.824356][ T31] audit: type=1326 audit(1766719815.902:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 298.890934][ T8505] loop7: detected capacity change from 0 to 512 [ 298.899840][ T8137] veth1_vlan: entered promiscuous mode [ 298.913900][ T8505] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.006780][ T31] audit: type=1326 audit(1766719815.902:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 299.052214][ T8137] veth0_macvtap: entered promiscuous mode [ 299.061365][ T8505] EXT4-fs (loop7): 1 orphan inode deleted [ 299.070740][ T8137] veth1_macvtap: entered promiscuous mode [ 299.088161][ T8505] EXT4-fs (loop7): 1 truncate cleaned up [ 299.097015][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.111978][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.128791][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.138480][ T31] audit: type=1326 audit(1766719815.902:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 299.178069][ T8505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.189474][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.263057][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.272852][ T31] audit: type=1326 audit(1766719815.902:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 299.339527][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.342518][ T8505] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1322: inode #12: block 7: comm syz.7.672: path /40/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 299.470747][ T31] audit: type=1326 audit(1766719816.022:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22298f749 code=0x7ffc0000 [ 299.505754][ T8505] EXT4-fs (loop7): Remounting filesystem read-only [ 299.762560][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.821716][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.025814][ T6691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.053023][ T6691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.084491][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.175098][ T8526] loop2: detected capacity change from 0 to 1024 [ 300.476291][ T8526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 300.663294][ T8526] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.886702][ T8526] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 301.194936][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.559979][ T8541] Cannot find set identified by id 0 to match [ 302.212875][ T31] audit: type=1326 audit(1766719819.282:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.8.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbd18f749 code=0x7ffc0000 [ 302.296005][ T31] audit: type=1326 audit(1766719819.342:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.8.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fbd18f749 code=0x7ffc0000 [ 302.346936][ T31] audit: type=1326 audit(1766719819.342:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.8.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbd18f749 code=0x7ffc0000 [ 302.453232][ T31] audit: type=1326 audit(1766719819.342:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.8.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7fbd18f749 code=0x7ffc0000 [ 302.528369][ T8562] siw: device registration error -23 [ 302.563879][ T31] audit: type=1326 audit(1766719819.342:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.8.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbd18f749 code=0x7ffc0000 [ 302.842348][ T8566] loop2: detected capacity change from 0 to 128 [ 302.877479][ T8566] EXT4-fs error (device loop2): __ext4_fill_super:5553: inode #2: comm syz.2.687: iget: checksum invalid [ 302.974567][ T8566] EXT4-fs (loop2): get root inode failed [ 303.005732][ T8566] EXT4-fs (loop2): mount failed [ 303.135459][ T8566] syz_tun: entered allmulticast mode [ 303.158666][ T8565] syz_tun: left allmulticast mode [ 303.480522][ T8573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.690'. [ 303.524728][ T8573] ksmbd: Unknown IPC event: 4, ignore. [ 303.553659][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.692'. [ 303.926221][ T8585] loop1: detected capacity change from 0 to 1024 [ 303.948940][ T8585] journal_path: Non-blockdev passed as './file1' [ 303.972121][ T8585] EXT4-fs: error: could not find journal device path [ 304.443322][ T8594] siw: device registration error -23 [ 304.526190][ T8595] syzkaller0: entered promiscuous mode [ 304.532096][ T8595] syzkaller0: entered allmulticast mode [ 305.018178][ T8610] loop8: detected capacity change from 0 to 1024 [ 305.217953][ T8610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.262351][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 305.337713][ T8615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.393174][ T8617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.415678][ T8610] loop8: detected capacity change from 1024 to 64 [ 305.427126][ T8617] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 305.466104][ T8620] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.704: corrupted xattr entries [ 305.503329][ T8617] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 305.525599][ T8620] EXT4-fs error (device loop8): get_max_inline_xattr_value_size:73: inode #15: comm syz.8.704: corrupt xattr in inline inode [ 305.575045][ T8620] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.704: corrupted xattr entries [ 305.663836][ T8618] lo speed is unknown, defaulting to 1000 [ 305.779523][ T8137] EXT4-fs error (device loop8): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: directory entry overrun - offset=0, inode=17104912, rec_len=158052, size=1024 fake=0 [ 305.988432][ T8137] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.024386][ T8611] kmmpd-loop8: attempt to access beyond end of device [ 306.024386][ T8611] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 306.062278][ T8611] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 306.347749][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 307.385858][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.549714][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.716'. [ 307.793587][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.859419][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.076948][ T8645] lo speed is unknown, defaulting to 1000 [ 308.184153][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.207247][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.215119][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.226896][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.235090][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.279016][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.297172][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.310260][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.320714][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.330531][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.340689][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.859912][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.889640][ T8655] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 309.089326][ T8650] lo speed is unknown, defaulting to 1000 [ 309.164526][ T8648] lo speed is unknown, defaulting to 1000 [ 309.460798][ T8660] loop1: detected capacity change from 0 to 1024 [ 309.508102][ T8660] EXT4-fs: Ignoring removed bh option [ 309.541885][ T8660] ext3: Unknown parameter 'defcontext' [ 310.079008][ T8665] program syz.2.724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.233773][ T37] bridge_slave_1: left allmulticast mode [ 310.251992][ T37] bridge_slave_1: left promiscuous mode [ 310.295610][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.311679][ T5845] Bluetooth: hci4: command tx timeout [ 310.380457][ T37] bridge_slave_0: left allmulticast mode [ 310.401666][ T5845] Bluetooth: hci6: command tx timeout [ 310.431760][ T37] bridge_slave_0: left promiscuous mode [ 310.437556][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.405191][ T5845] Bluetooth: hci4: command tx timeout [ 312.471685][ T5845] Bluetooth: hci6: command tx timeout [ 312.780820][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.821446][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.886613][ T37] bond0 (unregistering): Released all slaves [ 313.582727][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 313.582753][ T31] audit: type=1326 audit(1766719830.662:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 313.757437][ T31] audit: type=1326 audit(1766719830.692:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 313.889760][ T8711] tipc: Started in network mode [ 313.897190][ T31] audit: type=1326 audit(1766719830.692:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 313.940045][ T8711] tipc: Node identity ac14140f, cluster identity 4711 [ 313.994858][ T31] audit: type=1326 audit(1766719830.702:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.043890][ T8711] tipc: New replicast peer: 255.255.255.83 [ 314.093934][ T31] audit: type=1326 audit(1766719830.702:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.157659][ T8711] tipc: Enabled bearer , priority 10 [ 314.191985][ T31] audit: type=1326 audit(1766719830.712:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.234740][ T31] audit: type=1326 audit(1766719830.712:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.297627][ T31] audit: type=1326 audit(1766719830.712:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.382748][ T31] audit: type=1326 audit(1766719830.712:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.473115][ T5845] Bluetooth: hci4: command tx timeout [ 314.499808][ T31] audit: type=1326 audit(1766719830.752:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69738f749 code=0x7ffc0000 [ 314.552525][ T5845] Bluetooth: hci6: command tx timeout [ 314.660445][ T8650] chnl_net:caif_netlink_parms(): no params data found [ 315.086909][ T8740] loop1: detected capacity change from 0 to 512 [ 315.101949][ T8740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.155548][ T8740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002] [ 315.171763][ T8740] System zones: 0-2, 18-18, 34-34 [ 315.212694][ T8740] EXT4-fs (loop1): orphan cleanup on readonly fs [ 315.282942][ T8740] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 315.348410][ T8740] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 315.363803][ T8740] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.748: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 315.399093][ T8740] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.748: couldn't read orphan inode 13 (err -117) [ 315.434462][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.478902][ T37] hsr_slave_0: left promiscuous mode [ 315.503916][ T37] hsr_slave_1: left promiscuous mode [ 315.522224][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.533567][ T8740] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 315.549673][ T8749] netlink: 7 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.559048][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.572438][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.581503][ T8740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002] [ 315.591533][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.603711][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.611315][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.623458][ T8740] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 315.676045][ T37] veth1_macvtap: left promiscuous mode [ 315.685375][ T8752] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 315.703489][ T37] veth0_macvtap: left promiscuous mode [ 315.715985][ T37] veth1_vlan: left promiscuous mode [ 315.724949][ T8756] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 315.741796][ T37] veth0_vlan: left promiscuous mode [ 315.761722][ T8756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002] [ 315.780163][ T8749] netlink: 7 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.791211][ T8756] EXT4-fs warning (device loop1): ext4_enable_quotas:7217: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 315.802457][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.859928][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 315.982144][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.194682][ T4890] Bluetooth: hci3: Frame reassembly failed (-84) [ 316.243612][ T8749] netlink: 7 bytes leftover after parsing attributes in process `syz.7.751'. [ 316.275291][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 316.300331][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.751'. [ 316.533980][ T8769] IPv6: Can't replace route, no match found [ 316.561730][ T52] Bluetooth: hci4: command tx timeout [ 316.641651][ T52] Bluetooth: hci6: command tx timeout [ 317.220249][ T37] team0 (unregistering): Port device team_slave_1 removed [ 317.301233][ T37] team0 (unregistering): Port device team_slave_0 removed [ 317.482563][ T8790] loop7: detected capacity change from 0 to 512 [ 317.516132][ T8790] EXT4-fs error (device loop7): ext4_xattr_inode_iget:444: comm syz.7.762: error while reading EA inode 32 err=-116 [ 317.563196][ T8790] EXT4-fs (loop7): Remounting filesystem read-only [ 317.592234][ T8790] EXT4-fs warning (device loop7): ext4_evict_inode:255: couldn't mark inode dirty (err -30) [ 317.615176][ T8790] EXT4-fs (loop7): 1 orphan inode deleted [ 317.633442][ T8790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.753573][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.902626][ T8273] tipc: Node number set to 2886997007 [ 318.056389][ T8775] syzkaller0: entered promiscuous mode [ 318.071881][ T8775] syzkaller0: entered allmulticast mode [ 318.233423][ T5845] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 318.234268][ T52] Bluetooth: hci3: command 0x1003 tx timeout [ 320.314774][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 320.574806][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.598199][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.622965][ T8650] bridge_slave_0: entered allmulticast mode [ 320.645732][ T8650] bridge_slave_0: entered promiscuous mode [ 320.702001][ T8830] loop7: detected capacity change from 0 to 1024 [ 320.751754][ T8833] xt_CT: No such helper "pptp" [ 320.760769][ T8830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.832007][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.839180][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.931888][ T8650] bridge_slave_1: entered allmulticast mode [ 320.970988][ T8650] bridge_slave_1: entered promiscuous mode [ 321.115866][ T7277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.168577][ T8847] loop6: detected capacity change from 0 to 512 [ 321.241444][ T8847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.258587][ T8851] loop1: detected capacity change from 0 to 512 [ 321.267964][ T8847] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.323777][ T8851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.345623][ T8650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.370436][ T8851] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.441167][ T8847] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 321.497628][ T8851] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.776: Attempting to read directory block (0) that is past i_size (3) [ 321.541125][ T8650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.583047][ T8851] EXT4-fs (loop1): Remounting filesystem read-only [ 321.684094][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.707650][ T8865] loop2: detected capacity change from 0 to 1024 [ 321.783018][ T8870] netlink: 27 bytes leftover after parsing attributes in process `syz.7.779'. [ 321.796586][ T8865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.819416][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.851942][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.853038][ T8865] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.861922][ T8648] bridge_slave_0: entered allmulticast mode [ 321.877538][ T8648] bridge_slave_0: entered promiscuous mode [ 321.954902][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.970764][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 322.031628][ T12] __quota_error: 46 callbacks suppressed [ 322.031653][ T12] Quota error (device loop1): write_blk: dquota write failed [ 322.082923][ T8650] team0: Port device team_slave_0 added [ 322.088763][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.101117][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.101677][ T12] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 322.113857][ T8648] bridge_slave_1: entered allmulticast mode [ 322.144584][ T8648] bridge_slave_1: entered promiscuous mode [ 322.169803][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.225712][ T8650] team0: Port device team_slave_1 added [ 322.519158][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.831716][ T5937] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 323.230445][ T5937] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 323.291287][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.356938][ T8880] syzkaller0: entered promiscuous mode [ 323.378560][ T8880] syzkaller0: entered allmulticast mode [ 323.381637][ T5937] usb 2-1: Product: syz [ 323.391056][ T5937] usb 2-1: Manufacturer: syz [ 323.401658][ T5937] usb 2-1: SerialNumber: syz [ 323.420651][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.434093][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.460629][ T8650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.495251][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.549670][ T8897] loop6: detected capacity change from 0 to 512 [ 323.589162][ T8897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.615562][ T8897] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.662321][ T8897] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.787: corrupted inode contents [ 323.668556][ T8884] loop1: detected capacity change from 0 to 512 [ 323.688094][ T8897] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.787: mark_inode_dirty error [ 323.688956][ T8884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 323.725924][ T8884] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.733874][ T8897] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.787: corrupted inode contents [ 323.753085][ T8897] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.787: mark_inode_dirty error [ 323.793596][ T8884] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4214: comm syz.1.781: Allocating blocks 41-42 which overlap fs metadata [ 323.864948][ T8884] Quota error (device loop1): write_blk: dquota write failed [ 323.873183][ T8884] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 323.877305][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.903721][ T8884] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 323.940323][ T8884] EXT4-fs error (device loop1): ext4_acquire_dquot:6984: comm syz.1.781: Failed to acquire dquot type 1 [ 323.966584][ T8884] EXT4-fs error (device loop1): mb_free_blocks:2034: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 324.004117][ T8884] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.781: corrupted inode contents [ 324.045027][ T8884] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.781: mark_inode_dirty error [ 324.064136][ T8884] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.781: corrupted inode contents [ 324.103339][ T8884] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.781: mark_inode_dirty error [ 324.145020][ T8884] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.781: corrupted inode contents [ 324.190376][ T8884] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 324.218835][ T8884] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.781: corrupted inode contents [ 324.260284][ T8884] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.781: mark_inode_dirty error [ 324.292193][ T8884] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 324.319176][ T8884] EXT4-fs (loop1): 1 truncate cleaned up [ 324.352492][ T8884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.354614][ T8917] loop6: detected capacity change from 0 to 1024 [ 324.404496][ T8917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.450063][ T8917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 324.492821][ T8917] System zones: 0-1, 3-36 [ 324.516192][ T8917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.629568][ T5937] rtl8150 2-1:1.0: couldn't reset the device [ 324.673003][ T5937] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 324.733934][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.743281][ T5937] usb 2-1: USB disconnect, device number 3 [ 324.929818][ T31] audit: type=1326 audit(1766719842.006:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 324.968294][ T31] audit: type=1326 audit(1766719842.006:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 325.025286][ T31] audit: type=1326 audit(1766719842.046:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 325.055366][ T31] audit: type=1326 audit(1766719842.046:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 325.084693][ T31] audit: type=1326 audit(1766719842.046:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f78f749 code=0x7ffc0000 [ 325.357409][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.520742][ T8943] netlink: 'syz.2.798': attribute type 9 has an invalid length. [ 326.665690][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 326.926219][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.933600][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.965249][ T8650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.967606][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.982884][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.935722][ T8955] netlink: 'syz.7.802': attribute type 10 has an invalid length. [ 327.979076][ T8957] loop6: detected capacity change from 0 to 512 [ 327.986574][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.7.802'. [ 328.016518][ T8648] team0: Port device team_slave_0 added [ 328.029566][ T8955] ipvlan2: entered promiscuous mode [ 328.039582][ T8955] bridge0: port 3(ipvlan2) entered blocking state [ 328.046402][ T8955] bridge0: port 3(ipvlan2) entered disabled state [ 328.054179][ T8955] ipvlan2: entered allmulticast mode [ 328.059559][ T8955] bridge0: entered allmulticast mode [ 328.065761][ T8957] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.068182][ T8955] ipvlan2: left allmulticast mode [ 328.080253][ T8955] bridge0: left allmulticast mode [ 328.113511][ T8957] __quota_error: 319 callbacks suppressed [ 328.113538][ T8957] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 328.131514][ T8957] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 328.140051][ T8648] team0: Port device team_slave_1 added [ 328.173933][ T8957] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.803: Failed to acquire dquot type 1 [ 328.191879][ T8957] EXT4-fs (loop6): 1 truncate cleaned up [ 328.209470][ T8957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 328.219465][ T8650] hsr_slave_0: entered promiscuous mode [ 328.264572][ T8650] hsr_slave_1: entered promiscuous mode [ 328.271078][ T8650] debugfs: 'hsr0' already exists in 'hsr' [ 328.276969][ T8650] Cannot create hsr debugfs directory [ 328.376000][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 328.387575][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.401637][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.511610][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.560469][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.577735][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.579609][ T8974] loop1: detected capacity change from 0 to 512 [ 328.642471][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.662752][ T8974] ext4: Unknown parameter 'seclabel' [ 328.697321][ T8979] loop6: detected capacity change from 0 to 764 [ 328.946492][ T8980] syzkaller0: entered promiscuous mode [ 328.970037][ T8980] syzkaller0: entered allmulticast mode [ 329.348128][ T8988] loop6: detected capacity change from 0 to 512 [ 329.801074][ T8988] ------------[ cut here ]------------ [ 329.806991][ T8988] EA inode 11 i_nlink=2 [ 329.807018][ T8988] WARNING: fs/ext4/xattr.c:1056 at ext4_xattr_inode_update_ref+0x4b7/0x5b0, CPU#0: syz.6.814/8988 [ 329.821934][ T8988] Modules linked in: [ 329.827145][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.6.814 Not tainted syzkaller #0 PREEMPT(full) [ 329.837467][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.847954][ T8988] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 329.854832][ T8988] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f1 00 00 00 48 8d 3d 39 11 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a e9 06 ff ff ff e8 93 06 2b ff 48 8d 7b 40 48 b8 00 [ 329.876112][ T8988] RSP: 0018:ffffc90003ebf178 EFLAGS: 00010246 [ 329.882282][ T8988] RAX: dffffc0000000000 RBX: ffff888056e862d8 RCX: ffffc900150fa000 [ 329.890279][ T8988] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff908ee0a0 [ 329.893627][ T8648] hsr_slave_0: entered promiscuous mode [ 329.898358][ T8988] RBP: ffffc90003ebf240 R08: 0000000000000005 R09: 0000000000000001 [ 329.912919][ T8988] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 329.916463][ T8648] hsr_slave_1: entered promiscuous mode [ 329.920908][ T8988] R13: ffffffffffffffff R14: 1ffff920007d7e32 R15: ffff888056e864c8 [ 329.936866][ T8988] FS: 00007f8d506126c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 329.943774][ T8648] debugfs: 'hsr0' already exists in 'hsr' [ 329.946813][ T8988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.958219][ T8988] CR2: 0000200000000600 CR3: 0000000030eb8000 CR4: 0000000000350ef0 [ 329.960630][ T8648] Cannot create hsr debugfs directory [ 329.966336][ T8988] Call Trace: [ 329.974982][ T8988] [ 329.977928][ T8988] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 329.984375][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.990053][ T8988] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 329.995770][ T8988] ext4_xattr_set_entry+0x158f/0x1f00 [ 330.001229][ T8988] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 330.007085][ T8988] ? xattr_find_entry+0x289/0x330 [ 330.012246][ T8988] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 330.017535][ T8988] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 330.023761][ T8988] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 330.030110][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.036790][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.043344][ T8988] ? dquot_initialize_needed+0x183/0x2a0 [ 330.049093][ T8988] __ext4_expand_extra_isize+0x346/0x480 [ 330.054914][ T8988] __ext4_mark_inode_dirty+0x544/0x840 [ 330.060444][ T8988] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 330.066529][ T8988] ? __pfx___might_resched+0x10/0x10 [ 330.072318][ T8988] ? ext4_journal_check_start+0x22b/0x340 [ 330.078083][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.083959][ T8988] ? __ext4_journal_start_sb+0x19e/0x640 [ 330.089720][ T8988] ? ext4_evict_inode+0x595/0x1730 [ 330.094984][ T8988] ext4_evict_inode+0x713/0x1730 [ 330.099989][ T8988] ? __pfx_ext4_evict_inode+0x10/0x10 [ 330.105468][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.111159][ T8988] ? __pfx_ext4_evict_inode+0x10/0x10 [ 330.116645][ T8988] evict+0x3c2/0xad0 [ 330.120593][ T8988] ? __pfx_evict+0x10/0x10 [ 330.125120][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.130793][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.137456][ T8988] iput.part.0+0x621/0x1190 [ 330.142881][ T8988] iput+0x35/0x40 [ 330.146564][ T8988] ext4_orphan_cleanup+0x731/0x11e0 [ 330.152044][ T8988] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 330.157712][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.163420][ T8988] ? ext4_register_li_request+0xec/0x9b0 [ 330.169161][ T8988] ext4_fill_super+0x7ec1/0xb570 [ 330.174259][ T8988] ? __pfx_ext4_fill_super+0x10/0x10 [ 330.179562][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.185296][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.190954][ T8988] ? sb_set_blocksize+0xfe/0x320 [ 330.196016][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.201831][ T8988] ? setup_bdev_super+0x369/0x730 [ 330.206898][ T8988] get_tree_bdev_flags+0x38c/0x620 [ 330.212108][ T8988] ? __pfx_ext4_fill_super+0x10/0x10 [ 330.217472][ T8988] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 330.223198][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.228872][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.234633][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.241018][ T8988] ? security_capable+0x7e/0x260 [ 330.246863][ T8988] vfs_get_tree+0x8e/0x330 [ 330.251367][ T8988] path_mount+0x7bf/0x23a0 [ 330.255873][ T8988] ? rcu_is_watching+0x12/0xc0 [ 330.260701][ T8988] ? __pfx_path_mount+0x10/0x10 [ 330.265873][ T8988] ? kmem_cache_free+0x2d8/0x770 [ 330.270865][ T8988] ? putname+0xf5/0x1a0 [ 330.275123][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.280766][ T8988] ? putname+0xf5/0x1a0 [ 330.285010][ T8988] ? __x64_sys_mount+0x293/0x310 [ 330.289967][ T8988] __x64_sys_mount+0x293/0x310 [ 330.294855][ T8988] ? __pfx___x64_sys_mount+0x10/0x10 [ 330.300179][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.305924][ T8988] do_syscall_64+0xcd/0xf80 [ 330.310473][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.316443][ T8988] RIP: 0033:0x7f8d4f790eea [ 330.320889][ T8988] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.340611][ T8988] RSP: 002b:00007f8d50611e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 330.350006][ T8988] RAX: ffffffffffffffda RBX: 00007f8d50611ef0 RCX: 00007f8d4f790eea [ 330.358942][ T8988] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007f8d50611eb0 [ 330.366999][ T8988] RBP: 00002000000002c0 R08: 00007f8d50611ef0 R09: 0000000000800700 [ 330.375017][ T8988] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 330.383048][ T8988] R13: 00007f8d50611eb0 R14: 000000000000046f R15: 000000000000002c [ 330.391081][ T8988] [ 330.394265][ T8988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.401560][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.6.814 Not tainted syzkaller #0 PREEMPT(full) [ 330.410781][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.420836][ T8988] Call Trace: [ 330.424124][ T8988] [ 330.427049][ T8988] dump_stack_lvl+0x3d/0x1f0 [ 330.431666][ T8988] vpanic+0x640/0x6f0 [ 330.435657][ T8988] ? ext4_xattr_inode_update_ref+0x4b7/0x5b0 [ 330.441660][ T8988] panic+0xca/0xd0 [ 330.445407][ T8988] ? __pfx_panic+0x10/0x10 [ 330.449846][ T8988] check_panic_on_warn+0xab/0xb0 [ 330.454800][ T8988] __warn+0x108/0x3c0 [ 330.458811][ T8988] __report_bug+0x2a0/0x520 [ 330.463340][ T8988] ? ext4_xattr_inode_update_ref+0x4b7/0x5b0 [ 330.469354][ T8988] ? __pfx___report_bug+0x10/0x10 [ 330.474420][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.480079][ T8988] report_bug_entry+0xe1/0x290 [ 330.484872][ T8988] ? ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 330.490885][ T8988] handle_bug+0x18a/0x260 [ 330.495232][ T8988] exc_invalid_op+0x17/0x50 [ 330.499758][ T8988] asm_exc_invalid_op+0x1a/0x20 [ 330.504623][ T8988] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 330.511245][ T8988] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f1 00 00 00 48 8d 3d 39 11 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a e9 06 ff ff ff e8 93 06 2b ff 48 8d 7b 40 48 b8 00 [ 330.530872][ T8988] RSP: 0018:ffffc90003ebf178 EFLAGS: 00010246 [ 330.536957][ T8988] RAX: dffffc0000000000 RBX: ffff888056e862d8 RCX: ffffc900150fa000 [ 330.544944][ T8988] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff908ee0a0 [ 330.552935][ T8988] RBP: ffffc90003ebf240 R08: 0000000000000005 R09: 0000000000000001 [ 330.560914][ T8988] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 330.568896][ T8988] R13: ffffffffffffffff R14: 1ffff920007d7e32 R15: ffff888056e864c8 [ 330.576900][ T8988] ? ext4_xattr_inode_update_ref+0x491/0x5b0 [ 330.582922][ T8988] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 330.589292][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.594939][ T8988] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 330.600437][ T8988] ext4_xattr_set_entry+0x158f/0x1f00 [ 330.605861][ T8988] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 330.611612][ T8988] ? xattr_find_entry+0x289/0x330 [ 330.616672][ T8988] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 330.621907][ T8988] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 330.627866][ T8988] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 330.634157][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.639891][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.645542][ T8988] ? dquot_initialize_needed+0x183/0x2a0 [ 330.651225][ T8988] __ext4_expand_extra_isize+0x346/0x480 [ 330.656897][ T8988] __ext4_mark_inode_dirty+0x544/0x840 [ 330.662380][ T8988] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 330.668377][ T8988] ? __pfx___might_resched+0x10/0x10 [ 330.673683][ T8988] ? ext4_journal_check_start+0x22b/0x340 [ 330.679415][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.685151][ T8988] ? __ext4_journal_start_sb+0x19e/0x640 [ 330.690791][ T8988] ? ext4_evict_inode+0x595/0x1730 [ 330.696021][ T8988] ext4_evict_inode+0x713/0x1730 [ 330.700981][ T8988] ? __pfx_ext4_evict_inode+0x10/0x10 [ 330.706371][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.712036][ T8988] ? __pfx_ext4_evict_inode+0x10/0x10 [ 330.717425][ T8988] evict+0x3c2/0xad0 [ 330.721352][ T8988] ? __pfx_evict+0x10/0x10 [ 330.725804][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.731464][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.737124][ T8988] iput.part.0+0x621/0x1190 [ 330.741672][ T8988] iput+0x35/0x40 [ 330.745338][ T8988] ext4_orphan_cleanup+0x731/0x11e0 [ 330.750570][ T8988] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 330.756234][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.761887][ T8988] ? ext4_register_li_request+0xec/0x9b0 [ 330.767551][ T8988] ext4_fill_super+0x7ec1/0xb570 [ 330.772545][ T8988] ? __pfx_ext4_fill_super+0x10/0x10 [ 330.777849][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.783503][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.789148][ T8988] ? sb_set_blocksize+0xfe/0x320 [ 330.794094][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.799742][ T8988] ? setup_bdev_super+0x369/0x730 [ 330.804782][ T8988] get_tree_bdev_flags+0x38c/0x620 [ 330.809907][ T8988] ? __pfx_ext4_fill_super+0x10/0x10 [ 330.815218][ T8988] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 330.820864][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.826517][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.832162][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.837807][ T8988] ? security_capable+0x7e/0x260 [ 330.842782][ T8988] vfs_get_tree+0x8e/0x330 [ 330.847230][ T8988] path_mount+0x7bf/0x23a0 [ 330.851672][ T8988] ? rcu_is_watching+0x12/0xc0 [ 330.856456][ T8988] ? __pfx_path_mount+0x10/0x10 [ 330.861334][ T8988] ? kmem_cache_free+0x2d8/0x770 [ 330.866302][ T8988] ? putname+0xf5/0x1a0 [ 330.870487][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.876133][ T8988] ? putname+0xf5/0x1a0 [ 330.880315][ T8988] ? __x64_sys_mount+0x293/0x310 [ 330.885276][ T8988] __x64_sys_mount+0x293/0x310 [ 330.890068][ T8988] ? __pfx___x64_sys_mount+0x10/0x10 [ 330.895381][ T8988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.901039][ T8988] do_syscall_64+0xcd/0xf80 [ 330.905577][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.911479][ T8988] RIP: 0033:0x7f8d4f790eea [ 330.915896][ T8988] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.935518][ T8988] RSP: 002b:00007f8d50611e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 330.943942][ T8988] RAX: ffffffffffffffda RBX: 00007f8d50611ef0 RCX: 00007f8d4f790eea [ 330.951916][ T8988] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007f8d50611eb0 [ 330.959891][ T8988] RBP: 00002000000002c0 R08: 00007f8d50611ef0 R09: 0000000000800700 [ 330.967866][ T8988] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 330.975841][ T8988] R13: 00007f8d50611eb0 R14: 000000000000046f R15: 000000000000002c [ 330.983851][ T8988] [ 330.987188][ T8988] Kernel Offset: disabled [ 330.991506][ T8988] Rebooting in 86400 seconds..