last executing test programs: 26m36.775120188s ago: executing program 32 (id=135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xffffff7f) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$PIO_UNIMAP(r5, 0x5608, 0x0) 23m34.79889335s ago: executing program 3 (id=501): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) 23m33.538539269s ago: executing program 33 (id=480): r0 = socket(0xa, 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) keyctl$assume_authority(0x10, r2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000340)=0x4) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mount$nfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x3f, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) getsockname$packet(r3, 0x0, &(0x7f0000000200)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x3, {0x2, 0xff}, 0xfe}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005680)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@max_inline={'max_inline', 0x3d, [0x36, 0x6b, 0x30, 0x39, 0x30]}}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@compress}, {@user_subvol_rm}, {@datacow}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 23m33.400106829s ago: executing program 3 (id=504): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r4, 0x680822d7e3b5f37d}, 0x14}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x101, 0x6000000}, 0x14}}, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d63703433372c756d61736b3d303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030353237362c00"/104], 0x3, 0x6b5, &(0x7f0000001300)="$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") mkdir(&(0x7f0000000440)='./control\x00', 0x0) 23m32.367353489s ago: executing program 3 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000080000001400030076657468305f766906005f776966690024001a8020000a8014000700fe8800000000000000000000000000010500080002000000"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xff61) pwrite64(0xffffffffffffffff, &(0x7f0000000080)='3', 0x500, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000007d40), &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0xa, 0x0, r7}) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000700)) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r8, 0x8b20, &(0x7f0000000040)) 23m30.869395189s ago: executing program 3 (id=509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) 23m30.436271778s ago: executing program 3 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2400, 0x0) read(r5, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x5) ioctl$TCGETA(r8, 0x8926, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x3c, r7, 0x1, 0x200000, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}]}, 0x3c}}, 0x4000) 23m28.058746608s ago: executing program 3 (id=513): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 23m12.129081102s ago: executing program 34 (id=513): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 18m32.999551419s ago: executing program 6 (id=1037): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setreuid(0x0, 0xee01) 18m32.72427831s ago: executing program 6 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) 18m30.865013923s ago: executing program 6 (id=1040): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000200)="968b524b3b9a", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='1'], 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x2004804c) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080), 0x2000011a) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 18m27.529801698s ago: executing program 6 (id=1046): mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x162) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioperm(0x7, 0x5, 0x9) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x27, 0x2, 0x0, "a677c17a5ac1f393f65906a68dd1f8822c8800", 0x584e4f53}) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) 18m25.656350922s ago: executing program 6 (id=1052): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) 18m22.840495756s ago: executing program 6 (id=1056): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_open_dev$loop(&(0x7f0000000100), 0xece, 0x571140) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r7, 0xffffffffffffffff, 0x0) 18m7.620651431s ago: executing program 35 (id=1056): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_open_dev$loop(&(0x7f0000000100), 0xece, 0x571140) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r7, 0xffffffffffffffff, 0x0) 11m32.392392091s ago: executing program 1 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0), 0x4f) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {0xffffffffffffffff, 0x1000}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x6578]}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000002380)=0x18) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffffff, '\x00', @string=&(0x7f0000000100)=0x8f}}) r6 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b0, &(0x7f0000001100)={0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m27.363942645s ago: executing program 1 (id=1907): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/18, @ANYRES32=0x0, @ANYBLOB], 0x90}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB]) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) 11m25.45918077s ago: executing program 1 (id=1913): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$KVM_NMI(r4, 0xae9a) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m22.452398046s ago: executing program 1 (id=1920): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060103"], 0x14}}, 0x0) 11m21.301386257s ago: executing program 1 (id=1924): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4cf490c960cff544dc6de273318543c2d7f162cfcdd0a78921b224ad8f49fa89885d735cadedeb4cf8d23d8fd6b907da8fadcd39b103ceb247759dca4bc3cc1a0ec28da8900ef1526c82e233a4e54a7945b49f7b02ba6ea85ac94c6652b57f17c7a6951b65ddc971666ace8f1d376b58", 0x70}, {0x0}, {0x0}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000004c000000000000000000000007000000071f07ac1414bb64010102ac14143bac1414bbac1414bbe0000002e0000001940b831e0df50f7db36e5a94040100440c2e137f00000100000fcc000000000000140000000000000000000000020000003a0d000000000000140000000000000000000000010000000080000000000000b1"], 0x98}, 0x48000) r1 = socket(0x28, 0x6, 0x10000051) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdc0c}, 0x1c) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009800)={0x18, 0x3c, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000003c0)='-6', 0x2}], 0x2) 11m19.838648622s ago: executing program 1 (id=1926): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) unshare(0x22020400) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bind$isdn_base(r1, 0x0, 0x0) 11m5.329565026s ago: executing program 36 (id=1926): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) unshare(0x22020400) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bind$isdn_base(r1, 0x0, 0x0) 9m38.236270867s ago: executing program 2 (id=2148): mkdir(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) 9m34.408261903s ago: executing program 2 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7f, 0x8000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101b}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x4}, @in6={0xa, 0x4e22, 0xfff, @private2, 0x28000}], 0x48) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) readv(r2, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/214, 0xd6}], 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f00000ef000/0x3000)=nil, 0x3000, 0x15) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1e) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_create_ruleset(&(0x7f0000001880)={0xa002}, 0x10, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 9m33.850794734s ago: executing program 2 (id=2163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/18, @ANYRES32=0x0, @ANYBLOB], 0x90}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB]) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r5}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) 9m32.396254527s ago: executing program 2 (id=2168): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 9m30.19446687s ago: executing program 2 (id=2171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 9m27.859687784s ago: executing program 2 (id=2177): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000", 0x1a) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f00000000c0)=@assoc_value, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048010) shutdown(r3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m27.432488885s ago: executing program 37 (id=2177): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000", 0x1a) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f00000000c0)=@assoc_value, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048010) shutdown(r3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m50.188207359s ago: executing program 8 (id=2535): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6m48.431221512s ago: executing program 8 (id=2538): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0xf0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000c300)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='sched_process_wait\x00', r2}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000200), 0x2, r4}) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) socket(0x10, 0x803, 0x0) 6m43.2644763s ago: executing program 8 (id=2552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000114000300"], 0xc0}}, 0x0) 6m42.713393991s ago: executing program 8 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_emit_ethernet(0x19, &(0x7f0000000280)={@multicast, @link_local, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0xffc}}, {@x25={0x805, {0x2, 0x9, 0x23}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0042, &(0x7f0000000040)={[{}, {@resgid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7e}}, {@noload}, {@inode_readahead_blks}, {@nombcache}]}, 0x1, 0x480, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 6m41.764429812s ago: executing program 8 (id=2559): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6m40.243979315s ago: executing program 8 (id=2564): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4cf490c960cff544dc6de273318543c2d7f162cfcdd0a78921b224ad8f49fa89885d735cadedeb4cf8d23d8fd6b907da8fadcd39b103ceb247759dca4bc3cc1a0ec28da8900ef1526c82e233a4e54a7945b49f7b02ba6ea85ac94c6652b57f17c7a6951b65ddc971666ace8f1d376b58", 0x70}, {0x0}, {0x0}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000004c000000000000000000000007000000071f07ac1414bb64010102ac14143bac1414bbac1414bbe0000002e0000001940b831e0df50f7db36e5a94040100440c2e137f00000100000fcc000000000000140000000000000000000000020000003a0d000000000000140000000000000000000000010000000080000000000000b1"], 0x98}, 0x48000) r1 = socket(0x28, 0x6, 0x10000051) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdc0c}, 0x1c) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009800)={0x18, 0x3c, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 6m39.246853197s ago: executing program 38 (id=2564): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4cf490c960cff544dc6de273318543c2d7f162cfcdd0a78921b224ad8f49fa89885d735cadedeb4cf8d23d8fd6b907da8fadcd39b103ceb247759dca4bc3cc1a0ec28da8900ef1526c82e233a4e54a7945b49f7b02ba6ea85ac94c6652b57f17c7a6951b65ddc971666ace8f1d376b58", 0x70}, {0x0}, {0x0}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000004c000000000000000000000007000000071f07ac1414bb64010102ac14143bac1414bbac1414bbe0000002e0000001940b831e0df50f7db36e5a94040100440c2e137f00000100000fcc000000000000140000000000000000000000020000003a0d000000000000140000000000000000000000010000000080000000000000b1"], 0x98}, 0x48000) r1 = socket(0x28, 0x6, 0x10000051) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdc0c}, 0x1c) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009800)={0x18, 0x3c, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 9.976424903s ago: executing program 0 (id=3840): unshare(0x62040200) openat$null(0xffffffffffffff9c, 0x0, 0x4001c3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 8.894770756s ago: executing program 4 (id=3843): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x80000000}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 8.758043497s ago: executing program 0 (id=3845): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0xea, 0x0, 0x4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x2b, 0x1, 0x1) r4 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 7.076138453s ago: executing program 0 (id=3847): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000200)="968b524b3b9a", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='1'], 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x2004804c) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080), 0x2000011a) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 6.450051776s ago: executing program 4 (id=3849): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) accept4(r2, 0x0, 0x0, 0x80000) shutdown(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000007375ded048993e24bc29000000000000000000fa644dac49519c084207b4b01edf4b0d295bbb9eeca8340891759ef337f6f5c54389e2922a7767cf1cfe98a1a88c4b2afef315", @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) close(r6) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="25ebad88000000002000128009000100766c616e00", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040001}}], 0x1, 0x24000000) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, 0x0, 0x20044090) 6.121692116s ago: executing program 4 (id=3850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_getscheduler(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r2 = signalfd4(r0, &(0x7f0000003400)={[0x9]}, 0x8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000033c0)={0xe7, @time={0x0, 0x9}, 0x0, {0x29}, 0x0, 0x0, 0x8}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000005}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, 0x0) tkill(0x0, 0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.681986578s ago: executing program 4 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) dup2(r1, r2) 5.432105659s ago: executing program 4 (id=3854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.393488813s ago: executing program 7 (id=3855): creat(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 4.118727614s ago: executing program 9 (id=3857): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0xea, 0x0, 0x4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x2b, 0x1, 0x1) r4 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 4.038867124s ago: executing program 7 (id=3858): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x5, 0x10000, 0x43, @mcast1, @loopback={0x4000000, 0x460c6}, 0x8, 0x8, 0x1, 0x6}}) 3.841718165s ago: executing program 7 (id=3859): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x8000, 0x0, &(0x7f0000000080)=0x0, 0x0, {0x40}, &(0x7f0000000240)=""/91, 0x5b, &(0x7f0000000100)=""/31, &(0x7f0000000180)}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000140)={0xf, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000380), 0x0, 0x20000000, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000890000000000000000", @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.794234245s ago: executing program 5 (id=3860): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) accept4(r2, 0x0, 0x0, 0x80000) shutdown(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000007375ded048993e24bc29000000000000000000fa644dac49519c084207b4b01edf4b0d295bbb9eeca8340891759ef337f6f5c54389e2922a7767cf1cfe98a1a88c4b2afef315", @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) close(r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="25ebad88000000002000128009000100766c616e00", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040001}}], 0x1, 0x24000000) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x20044090) 2.737717979s ago: executing program 9 (id=3861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 2.64549775s ago: executing program 7 (id=3862): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f000000c300)=""/102386, 0x18ff2}, {0x0}], 0x2, 0xa30e, 0x0) 2.53580026s ago: executing program 9 (id=3863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/18, @ANYRES32=0x0, @ANYBLOB], 0x90}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB]) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966309f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd27940415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b00"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r7}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) 2.52497766s ago: executing program 5 (id=3864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_getscheduler(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000003400)={[0x9]}, 0x8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000033c0)={0xe7, @time={0x0, 0x9}, 0x0, {0x29}, 0x0, 0x0, 0x8}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000005}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, 0x0) tkill(0x0, 0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.280410811s ago: executing program 0 (id=3865): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0], 0x1, 0x23d, &(0x7f00000002c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_rdma(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=r']) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = getpid() setreuid(0xee00, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x17140000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) 1.996237922s ago: executing program 4 (id=3866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0xbf, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.989800532s ago: executing program 5 (id=3867): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.761207543s ago: executing program 5 (id=3868): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.520207394s ago: executing program 7 (id=3869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xe}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0xfffffffe}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0xb107}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.421836984s ago: executing program 5 (id=3870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSW2(r3, 0x5437, 0x0) 1.402001154s ago: executing program 0 (id=3871): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0xea, 0x0, 0x4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x2b, 0x1, 0x1) r4 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 1.328509314s ago: executing program 9 (id=3872): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r0, &(0x7f00000001c0)=0x700, 0x12) 1.207633685s ago: executing program 7 (id=3873): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x8000, 0x0, &(0x7f0000000080)=0x0, 0x0, {0x40}, &(0x7f0000000240)=""/91, 0x5b, &(0x7f0000000100)=""/31, &(0x7f0000000180)}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000140)={0xf, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000380), 0x0, 0x20000000, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000890000000000000000", @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.158666735s ago: executing program 9 (id=3874): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) accept4(r2, 0x0, 0x0, 0x80000) shutdown(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000007375ded048993e24bc29000000000000000000fa644dac49519c084207b4b01edf4b0d295bbb9eeca8340891759ef337f6f5c54389e2922a7767cf1cfe98a1a88c4b2afef315", @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) close(r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="25ebad88000000002000128009000100766c616e00", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040001}}], 0x1, 0x24000000) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x20044090) 1.032259006s ago: executing program 5 (id=3875): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14) fallocate(r1, 0x0, 0x7, 0x2) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0x7e}) 136.631299ms ago: executing program 9 (id=3876): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=3877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1521.311663][T17537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.594687][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1521.624307][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1521.675974][T17629] device veth0_vlan entered promiscuous mode [ 1521.700928][T18017] fuse: Bad value for 'user_id' [ 1521.731387][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1521.761046][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1521.790514][T17629] device veth1_vlan entered promiscuous mode [ 1521.903185][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1521.918801][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1521.934449][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1521.958289][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1521.968728][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1521.979959][T17629] device veth0_macvtap entered promiscuous mode [ 1522.017206][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1522.062101][T17629] device veth1_macvtap entered promiscuous mode [ 1522.124020][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.221296][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.467534][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.523881][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.166618][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.222497][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.233026][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.261309][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.408761][T18028] block nbd7: shutting down sockets [ 1525.434157][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.471231][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.482090][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.492385][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.502922][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.512816][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.537778][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.605061][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.620093][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.851035][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.384573][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1526.455631][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1526.506019][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1526.748562][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.954705][T17629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.159479][T17629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.197700][T17629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.233289][T17629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.220728][T18077] fuse: Bad value for 'user_id' [ 1528.362874][T13756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.383948][T17537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.435117][T13756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.526332][T17537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.635941][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1528.678351][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1529.084183][T18091] loop5: detected capacity change from 0 to 64 [ 1529.187854][T18091] hfs: unable to parse mount options [ 1529.442941][T18098] autofs4:pid:18098:autofs_fill_super: called with bogus options [ 1530.653967][T18096] loop4: detected capacity change from 0 to 256 [ 1530.841980][T18096] FAT-fs (loop4): Directory bread(block 64) failed [ 1530.875907][T18096] FAT-fs (loop4): Directory bread(block 65) failed [ 1530.919390][T18096] FAT-fs (loop4): Directory bread(block 66) failed [ 1530.925982][T18096] FAT-fs (loop4): Directory bread(block 67) failed [ 1530.985949][T18096] FAT-fs (loop4): Directory bread(block 68) failed [ 1531.000372][T18096] FAT-fs (loop4): Directory bread(block 69) failed [ 1531.024491][T18096] FAT-fs (loop4): Directory bread(block 70) failed [ 1531.329285][T18096] FAT-fs (loop4): Directory bread(block 71) failed [ 1531.336728][T18096] FAT-fs (loop4): Directory bread(block 72) failed [ 1531.343776][T18096] FAT-fs (loop4): Directory bread(block 73) failed [ 1531.583588][T18108] loop7: detected capacity change from 0 to 128 [ 1531.710550][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1531.710567][ T27] audit: type=1326 audit(1733954759.300:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1531.929706][T18108] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1531.937505][ T4266] block nbd9: Receive control failed (result -32) [ 1531.947383][T18105] block nbd9: shutting down sockets [ 1532.066046][ T27] audit: type=1326 audit(1733954759.300:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1532.154638][ T27] audit: type=1326 audit(1733954759.300:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1532.291010][ T27] audit: type=1326 audit(1733954759.300:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc84ef7e9cf code=0x7ffc0000 [ 1532.447366][T18107] sysv_free_block: trying to free block not in datazone [ 1532.454730][T18107] sysv_free_block: trying to free block not in datazone [ 1532.462438][T18107] sysv_free_block: getblk() failed [ 1532.467580][T18107] sysv_free_block: getblk() failed [ 1532.473508][T18107] sysv_free_block: getblk() failed [ 1532.478704][T18107] sysv_free_block: getblk() failed [ 1533.229769][T18107] sysv_free_block: getblk() failed [ 1533.235021][T18107] sysv_free_block: getblk() failed [ 1533.240167][T18107] sysv_free_block: getblk() failed [ 1533.245366][T18107] sysv_free_block: getblk() failed [ 1533.250529][T18107] sysv_free_block: getblk() failed [ 1533.255744][T18107] sysv_free_block: getblk() failed [ 1533.261010][T18107] sysv_free_block: getblk() failed [ 1533.266182][T18107] sysv_free_block: getblk() failed [ 1533.271336][T18107] sysv_free_block: getblk() failed [ 1533.276647][T18107] sysv_free_block: getblk() failed [ 1533.281843][T18107] sysv_free_block: getblk() failed [ 1533.287046][T18107] sysv_free_block: getblk() failed [ 1533.292202][T18107] sysv_free_block: getblk() failed [ 1533.297317][T18107] sysv_free_block: getblk() failed [ 1533.302674][T18107] sysv_free_block: getblk() failed [ 1533.307804][T18107] sysv_free_block: getblk() failed [ 1533.312959][T18107] sysv_free_block: getblk() failed [ 1533.318096][T18107] sysv_free_block: getblk() failed [ 1533.323245][T18107] sysv_free_block: getblk() failed [ 1533.328363][T18107] sysv_free_block: getblk() failed [ 1533.333527][T18107] sysv_free_block: getblk() failed [ 1533.338763][T18107] sysv_free_block: getblk() failed [ 1533.344080][T18107] sysv_free_block: getblk() failed [ 1533.349244][T18107] sysv_free_block: getblk() failed [ 1533.354410][T18107] sysv_free_block: getblk() failed [ 1533.359575][T18107] sysv_free_block: getblk() failed [ 1533.364710][T18107] sysv_free_block: getblk() failed [ 1533.369883][T18107] sysv_free_block: getblk() failed [ 1533.375110][T18107] sysv_free_block: getblk() failed [ 1533.380261][T18107] sysv_free_block: getblk() failed [ 1533.385580][T18107] sysv_free_block: getblk() failed [ 1533.390747][T18107] sysv_free_block: getblk() failed [ 1533.395928][T18107] sysv_free_block: getblk() failed [ 1533.401262][T18107] sysv_free_block: getblk() failed [ 1533.406535][T18107] sysv_free_block: trying to free block not in datazone [ 1533.413516][T18107] sysv_free_block: trying to free block not in datazone [ 1533.420647][T18107] sysv_free_block: trying to free block not in datazone [ 1533.456709][ T27] audit: type=1326 audit(1733954759.300:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1534.516131][ T8275] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1534.653182][ T27] audit: type=1326 audit(1733954759.300:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1534.821750][ T27] audit: type=1326 audit(1733954762.471:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18130 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1534.932615][T18135] fuse: Bad value for 'fd' [ 1535.000161][ T27] audit: type=1326 audit(1733954762.471:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18130 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1535.268516][ T27] audit: type=1326 audit(1733954762.471:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18130 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1535.779103][ T27] audit: type=1326 audit(1733954762.471:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18130 comm="syz.5.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1536.259714][T18160] loop5: detected capacity change from 0 to 1024 [ 1536.485626][T18160] EXT4-fs: Ignoring removed orlov option [ 1536.870097][T18160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1537.123028][T18171] loop9: detected capacity change from 0 to 64 [ 1537.236616][T18171] hfs: unable to parse mount options [ 1537.271898][T18176] fuse: Bad value for 'fd' [ 1537.296236][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1538.346462][T18186] netlink: 'syz.0.2945': attribute type 4 has an invalid length. [ 1538.575995][T18187] block device autoloading is deprecated and will be removed. [ 1538.951872][T18202] overlayfs: unrecognized mount option "/" or missing value [ 1539.253750][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1539.374789][T18208] loop6: detected capacity change from 0 to 7 [ 1539.638282][T18208] Dev loop6: unable to read RDB block 7 [ 1539.757084][T18208] loop6: unable to read partition table [ 1539.891684][T18208] loop6: partition table beyond EOD, truncated [ 1540.037642][T18208] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1540.037642][T18208] ) failed (rc=-5) [ 1541.558820][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1541.558838][ T27] audit: type=1326 audit(1733954769.631:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1541.580419][T18234] fuse: Bad value for 'fd' [ 1541.642596][ T27] audit: type=1326 audit(1733954769.652:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1541.726739][ T27] audit: type=1326 audit(1733954769.673:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1541.844332][ T27] audit: type=1326 audit(1733954769.673:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1541.943820][ T27] audit: type=1326 audit(1733954769.673:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1542.027814][ T27] audit: type=1326 audit(1733954769.673:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1542.160981][ T27] audit: type=1326 audit(1733954769.673:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1542.254590][ T27] audit: type=1326 audit(1733954769.673:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1542.330197][ T27] audit: type=1326 audit(1733954769.684:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1542.474566][ T27] audit: type=1326 audit(1733954769.684:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18230 comm="syz.0.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1545.176685][T18299] loop4: detected capacity change from 0 to 764 [ 1547.459174][T18319] loop9: detected capacity change from 0 to 64 [ 1547.536193][T18319] hfs: unable to parse mount options [ 1547.707966][T18331] loop4: detected capacity change from 0 to 512 [ 1547.843975][T18331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1547.940019][T18331] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.186086][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1548.402408][T18346] overlayfs: unrecognized mount option "/" or missing value [ 1548.928805][T18361] loop7: detected capacity change from 0 to 512 [ 1549.021289][T18361] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1549.067240][T18361] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.522302][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1549.998839][T18371] loop4: detected capacity change from 0 to 128 [ 1550.046926][T18371] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1550.140622][T18369] sysv_free_block: trying to free block not in datazone [ 1550.147931][T18369] sysv_free_block: trying to free block not in datazone [ 1550.155467][T18369] sysv_free_block: getblk() failed [ 1550.160712][T18369] sysv_free_block: getblk() failed [ 1550.165956][T18369] sysv_free_block: getblk() failed [ 1550.171142][T18369] sysv_free_block: getblk() failed [ 1550.176303][T18369] sysv_free_block: getblk() failed [ 1550.181456][T18369] sysv_free_block: getblk() failed [ 1550.186571][T18369] sysv_free_block: getblk() failed [ 1550.191909][T18369] sysv_free_block: getblk() failed [ 1550.197058][T18369] sysv_free_block: getblk() failed [ 1550.202231][T18369] sysv_free_block: getblk() failed [ 1550.207507][T18369] sysv_free_block: getblk() failed [ 1550.213230][T18369] sysv_free_block: getblk() failed [ 1550.218426][T18369] sysv_free_block: getblk() failed [ 1550.223698][T18369] sysv_free_block: getblk() failed [ 1550.229115][T18369] sysv_free_block: getblk() failed [ 1550.234233][T18369] sysv_free_block: getblk() failed [ 1550.239412][T18369] sysv_free_block: getblk() failed [ 1550.244534][T18369] sysv_free_block: getblk() failed [ 1550.249811][T18369] sysv_free_block: getblk() failed [ 1550.255015][T18369] sysv_free_block: getblk() failed [ 1550.260477][T18369] sysv_free_block: getblk() failed [ 1550.265638][T18369] sysv_free_block: getblk() failed [ 1550.270774][T18369] sysv_free_block: getblk() failed [ 1550.275943][T18369] sysv_free_block: getblk() failed [ 1550.281075][T18369] sysv_free_block: getblk() failed [ 1550.286273][T18369] sysv_free_block: getblk() failed [ 1550.291533][T18369] sysv_free_block: getblk() failed [ 1550.296715][T18369] sysv_free_block: getblk() failed [ 1550.301946][T18369] sysv_free_block: getblk() failed [ 1550.307102][T18369] sysv_free_block: getblk() failed [ 1550.312727][T18369] sysv_free_block: getblk() failed [ 1550.317879][T18369] sysv_free_block: getblk() failed [ 1550.323071][T18369] sysv_free_block: getblk() failed [ 1550.328204][T18369] sysv_free_block: getblk() failed [ 1550.333528][T18369] sysv_free_block: getblk() failed [ 1550.338667][T18369] sysv_free_block: getblk() failed [ 1550.343859][T18369] sysv_free_block: getblk() failed [ 1550.349175][T18369] sysv_free_block: getblk() failed [ 1550.354327][T18369] sysv_free_block: trying to free block not in datazone [ 1550.361298][T18369] sysv_free_block: trying to free block not in datazone [ 1550.368428][T18369] sysv_free_block: trying to free block not in datazone [ 1550.761613][T17629] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1550.845095][T18381] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2997'. [ 1551.037619][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1551.037636][ T27] audit: type=1326 audit(1733954779.584:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18392 comm="syz.7.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1551.066131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.177138][ T27] audit: type=1326 audit(1733954779.658:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18392 comm="syz.7.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1551.283333][ T27] audit: type=1326 audit(1733954779.658:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18392 comm="syz.7.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1551.305688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.407372][ T27] audit: type=1326 audit(1733954779.658:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18392 comm="syz.7.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1551.833492][T18413] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1551.938237][ T27] audit: type=1800 audit(1733954780.529:353): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3010" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1553.949607][T13585] block nbd7: Receive control failed (result -32) [ 1553.967339][T18458] block nbd7: shutting down sockets [ 1554.208427][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.215991][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.244139][T18463] loop7: detected capacity change from 0 to 64 [ 1554.253321][T18463] hfs: unable to parse mount options [ 1554.293964][T13729] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1554.662800][T18468] overlayfs: overlapping lowerdir path [ 1554.945002][T18419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.022363][T18419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.728573][T18470] syz.7.3022[18470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1555.728734][T18470] syz.7.3022[18470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1555.743492][T18470] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1555.762821][T18419] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.775461][T18419] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.785739][T18419] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.798054][T18419] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.707690][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3032'. [ 1556.894604][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3032'. [ 1559.472595][T18503] block nbd9: shutting down sockets [ 1560.050565][T18531] loop4: detected capacity change from 0 to 2048 [ 1560.215347][T18531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1561.510679][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1562.305906][T18575] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1562.318123][T18575] ubi0: attaching mtd0 [ 1562.323405][T18575] ubi0: scanning is finished [ 1562.840499][T18575] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1563.114066][T18592] loop5: detected capacity change from 0 to 164 [ 1563.219741][T13729] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1563.610016][T13585] block nbd7: Receive control failed (result -32) [ 1563.788345][T18589] block nbd7: shutting down sockets [ 1564.397553][ T27] audit: type=1326 audit(1733954793.611:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.5.3058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x0 [ 1565.131127][T18630] loop5: detected capacity change from 0 to 1024 [ 1565.148476][T18629] loop7: detected capacity change from 0 to 2048 [ 1565.221817][T18636] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1565.239873][T18636] ubi0: attaching mtd0 [ 1565.248635][T18636] ubi0: scanning is finished [ 1565.546763][T18636] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1565.554467][T18636] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1565.561822][T18636] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1565.568835][T18636] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1565.576323][T18636] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1565.583308][T18636] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1565.591532][T18636] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2268251930 [ 1565.601818][T18636] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1565.645939][T18637] ubi0: detaching mtd0 [ 1565.772217][T18637] ubi0: mtd0 is detached [ 1565.801785][T18629] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1565.820187][T18630] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 1565.899122][T18630] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1565.968752][T18630] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.3062: Failed to acquire dquot type 0 [ 1566.129955][T18630] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1566.150970][T18630] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.3062: corrupted inode contents [ 1566.164555][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1566.275155][T18630] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #13: comm syz.5.3062: mark_inode_dirty error [ 1566.318001][T18630] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.3062: corrupted inode contents [ 1566.504850][T18630] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.3062: mark_inode_dirty error [ 1566.612960][T18653] hub 6-0:1.0: USB hub found [ 1566.621479][T18653] hub 6-0:1.0: 1 port detected [ 1567.455168][T18630] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.3062: corrupted inode contents [ 1567.535759][T18630] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1567.583406][T18630] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.3062: corrupted inode contents [ 1567.695962][T18630] EXT4-fs error (device loop5): ext4_truncate:4311: inode #13: comm syz.5.3062: mark_inode_dirty error [ 1567.747801][T18630] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1567.830486][T18630] EXT4-fs (loop5): 1 truncate cleaned up [ 1567.844941][T18630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1568.026600][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1568.225118][T18675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1568.714656][ T27] audit: type=1326 audit(1733954798.136:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.7.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1568.846017][ T27] audit: type=1326 audit(1733954798.136:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.7.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1568.976235][T18697] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1568.988936][T18697] ubi0: attaching mtd0 [ 1568.994257][T18697] ubi0: scanning is finished [ 1569.528940][T18697] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1569.719787][T18701] loop7: detected capacity change from 0 to 1024 [ 1569.728647][ T27] audit: type=1326 audit(1733954798.136:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.7.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1569.794906][ T27] audit: type=1326 audit(1733954798.136:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.7.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1569.818923][ T27] audit: type=1326 audit(1733954798.136:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.7.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1569.838749][T18701] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1569.880050][ T27] audit: type=1326 audit(1733954799.364:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1569.902440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.967239][T18701] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1570.059401][T18701] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 60 with max blocks 4 with error 28 [ 1570.104856][T18701] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1570.104856][T18701] [ 1570.158373][ T27] audit: type=1326 audit(1733954799.417:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1570.277195][T18701] EXT4-fs (loop7): Total free blocks count 0 [ 1570.302044][ T27] audit: type=1326 audit(1733954799.427:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1570.306104][T18701] EXT4-fs (loop7): Free/Dirty block details [ 1570.359844][T18701] EXT4-fs (loop7): free_blocks=68451041280 [ 1570.409822][T18701] EXT4-fs (loop7): dirty_blocks=64 [ 1570.428235][T18701] EXT4-fs (loop7): Block reservation details [ 1570.438130][T18701] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1570.459749][ T27] audit: type=1326 audit(1733954799.427:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1570.502632][T18700] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 60 with error 28 [ 1570.609373][ T27] audit: type=1326 audit(1733954799.427:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1570.631756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.780263][ T27] audit: type=1800 audit(1733954799.438:365): pid=18701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3081" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1570.933178][ T27] audit: type=1326 audit(1733954799.438:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1572.026834][T18747] loop9: detected capacity change from 0 to 2048 [ 1572.052466][T18747] EXT4-fs: Ignoring removed mblk_io_submit option [ 1572.125177][T18747] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1572.275006][T18757] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3091: bg 0: block 234: padding at end of block bitmap is not set [ 1572.348829][T18757] EXT4-fs (loop9): Remounting filesystem read-only [ 1572.414622][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 1572.478078][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 1572.621038][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1577.952627][T18798] device vlan2 entered promiscuous mode [ 1577.981766][T18798] device team0 entered promiscuous mode [ 1577.997179][T18798] device team_slave_0 entered promiscuous mode [ 1578.038012][T18798] device team_slave_1 entered promiscuous mode [ 1578.102655][T18798] team0: Device vlan2 is already an upper device of the team interface [ 1578.122221][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1578.122239][ T27] audit: type=1326 audit(1733954808.015:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.202391][T18798] device team0 left promiscuous mode [ 1578.224375][T18798] device team_slave_0 left promiscuous mode [ 1578.253590][ T27] audit: type=1326 audit(1733954808.015:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.286827][T18798] device team_slave_1 left promiscuous mode [ 1578.371190][ T27] audit: type=1326 audit(1733954808.015:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.478741][ T27] audit: type=1326 audit(1733954808.015:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.539233][ T27] audit: type=1326 audit(1733954808.026:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.671545][ T27] audit: type=1326 audit(1733954808.099:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1578.870550][ T27] audit: type=1326 audit(1733954808.099:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1579.019245][ T27] audit: type=1326 audit(1733954808.099:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.9.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1580.114753][ T27] audit: type=1326 audit(1733954808.456:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18804 comm="syz.9.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1580.127416][T18816] loop4: detected capacity change from 0 to 512 [ 1580.143928][ T27] audit: type=1326 audit(1733954808.477:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18804 comm="syz.9.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1580.300284][T18816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1580.329337][T18816] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.548159][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1581.106322][T18852] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3118'. [ 1581.125895][T18852] ubi0: attaching mtd0 [ 1581.134609][T18852] ubi0: scanning is finished [ 1581.716796][T18852] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1583.301110][T18885] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1583.340435][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 1583.340452][ T27] audit: type=1326 audit(1733954813.496:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1583.468030][ T27] audit: type=1326 audit(1733954813.538:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1583.516310][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1583.553015][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1583.599268][ T27] audit: type=1326 audit(1733954813.538:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1583.632531][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1583.664938][T18892] device bridge_slave_0 left promiscuous mode [ 1583.704782][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.715272][ T27] audit: type=1326 audit(1733954813.538:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1583.778400][T18892] device bridge_slave_1 left promiscuous mode [ 1583.802170][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.826695][ T27] audit: type=1326 audit(1733954813.538:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1583.895417][T18892] bond0: (slave bond_slave_0): Releasing backup interface [ 1583.970624][T18892] bond0: (slave bond_slave_1): Releasing backup interface [ 1583.998113][ T27] audit: type=1326 audit(1733954813.548:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1584.291901][ T27] audit: type=1326 audit(1733954813.548:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1584.432455][ T27] audit: type=1326 audit(1733954813.548:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1584.454839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.677657][T18892] team0: Port device team_slave_0 removed [ 1584.714099][ T27] audit: type=1326 audit(1733954813.548:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1584.736445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.831401][T18892] team0: Port device team_slave_1 removed [ 1584.860373][ T27] audit: type=1326 audit(1733954813.548:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18883 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1584.882807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.886241][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.925008][T18892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.988597][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.031655][T18892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.119921][T18896] team0: Mode changed to "loadbalance" [ 1585.642266][T18926] loop4: detected capacity change from 0 to 4096 [ 1585.654753][T18935] Cannot find set identified by id 0 to match [ 1586.596034][T18926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1586.678721][T18926] EXT4-fs (loop4): unmounting filesystem. [ 1586.690434][T18958] fuse: Unknown parameter 'user_i00000000000000000000' [ 1586.721279][T18959] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3143'. [ 1586.730892][T18045] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1588.346105][T18045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.368753][T18045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1588.414644][T18045] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1588.429418][T18045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.446621][T18045] usb 6-1: config 0 descriptor?? [ 1588.685875][T18948] device macsec1 entered promiscuous mode [ 1588.725106][T18948] device team0 entered promiscuous mode [ 1588.738112][T18948] device team_slave_0 entered promiscuous mode [ 1588.819300][T18948] device team_slave_1 entered promiscuous mode [ 1590.533987][T18982] netlink: 212884 bytes leftover after parsing attributes in process `syz.9.3150'. [ 1590.553010][T18981] ubi0: attaching mtd0 [ 1590.557959][T18981] ubi0: scanning is finished [ 1590.580996][T18948] team0: Device macsec1 is already an upper device of the team interface [ 1590.869942][T18948] device team0 left promiscuous mode [ 1590.875345][T18948] device team_slave_0 left promiscuous mode [ 1590.896026][T18981] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1590.914536][T18948] device team_slave_1 left promiscuous mode [ 1591.929434][T18045] usbhid 6-1:0.0: can't add hid device: -71 [ 1591.946837][T18045] usbhid: probe of 6-1:0.0 failed with error -71 [ 1591.975058][T18045] usb 6-1: USB disconnect, device number 2 [ 1593.126194][T19005] fuse: Unknown parameter 'user_i00000000000000000000' [ 1593.544598][T19021] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1594.224922][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1594.224941][ T27] audit: type=1326 audit(1733954824.929:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1594.357406][ T27] audit: type=1326 audit(1733954824.929:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1594.587572][ T27] audit: type=1326 audit(1733954824.929:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1594.806267][ T27] audit: type=1326 audit(1733954824.929:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1595.140656][ T27] audit: type=1326 audit(1733954824.929:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1595.371100][ T27] audit: type=1326 audit(1733954824.929:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1595.490048][ T27] audit: type=1326 audit(1733954824.929:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1595.509662][T19059] fuse: Unknown parameter 'user_i00000000000000000000' [ 1595.581230][ T27] audit: type=1326 audit(1733954824.929:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19030 comm="syz.9.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1595.981279][T19073] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 1595.997059][T19072] IPVS: stopping master sync thread 19073 ... [ 1596.392588][T19075] xt_connbytes: Forcing CT accounting to be enabled [ 1596.431014][T19075] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1596.567641][T19081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1597.296532][ T27] audit: type=1326 audit(1733954828.152:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1597.368948][ T27] audit: type=1326 audit(1733954828.152:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.257137][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1599.257153][ T27] audit: type=1326 audit(1733954830.210:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.424749][ T27] audit: type=1326 audit(1733954830.252:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.447928][ T27] audit: type=1326 audit(1733954830.252:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.642212][ T27] audit: type=1326 audit(1733954830.252:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.869805][ T27] audit: type=1326 audit(1733954830.252:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.892356][ T27] audit: type=1326 audit(1733954830.252:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1599.918951][T19162] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1599.934570][ T27] audit: type=1326 audit(1733954830.252:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1600.073394][ T27] audit: type=1326 audit(1733954830.252:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1600.146370][ T27] audit: type=1326 audit(1733954830.252:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1600.236472][ T27] audit: type=1326 audit(1733954830.252:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19147 comm="syz.5.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1600.388228][T19178] Cannot find add_set index 0 as target [ 1601.238935][T19176] loop9: detected capacity change from 0 to 1024 [ 1601.409215][T19176] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1601.462405][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1601.464447][T19176] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1601.534556][T19176] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1601.753919][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1601.788221][T19203] loop5: detected capacity change from 0 to 2048 [ 1601.807108][T19176] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #3: comm syz.9.3203: mark_inode_dirty error [ 1601.983670][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.060592][T19203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1602.209929][T19176] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.3203: Invalid block bitmap block 3 in block_group 0 [ 1602.506421][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.551077][T19176] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1602.622345][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.629209][T19176] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #3: comm syz.9.3203: mark_inode_dirty error [ 1602.679220][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.726974][T19176] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 1: comm syz.9.3203: lblock 6 mapped to illegal pblock 1 (length 1) [ 1602.825880][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1602.840921][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.856363][T19176] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 48: comm syz.9.3203: lblock 0 mapped to illegal pblock 48 (length 1) [ 1602.901033][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1602.926378][T19176] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.3203: Failed to acquire dquot type 0 [ 1602.979349][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1603.027148][T19176] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 49: comm syz.9.3203: lblock 1 mapped to illegal pblock 49 (length 1) [ 1603.155815][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1603.162506][T19176] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.3203: Failed to acquire dquot type 0 [ 1603.222152][T19228] device bond1 entered promiscuous mode [ 1603.228022][T19228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1603.238024][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1603.243318][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.245486][T19176] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1603.263419][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1603.271549][T19176] EXT4-fs error (device loop9): ext4_evict_inode:279: inode #15: comm syz.9.3203: mark_inode_dirty error [ 1603.286350][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.286545][T19176] EXT4-fs (loop9): Remounting filesystem read-only [ 1603.300760][T19176] EXT4-fs warning (device loop9): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1603.311208][T19176] EXT4-fs (loop9): 1 orphan inode deleted [ 1603.331092][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.355745][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.363410][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.377801][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.389245][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.416228][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.439075][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.464881][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.488201][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.495864][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.525604][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.540845][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.548600][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.556805][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.565737][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.573382][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.581115][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.588835][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.596561][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.604973][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.614774][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.625123][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.635607][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.645990][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.665127][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.676583][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.686153][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.699548][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.711518][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.722858][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.730739][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.739166][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.746857][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.754471][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.762888][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.770621][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.778286][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.786035][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.793752][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.801379][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.809041][ T4294] hid-generic 0000:200000:0000.0005: unknown main item tag 0x0 [ 1603.823895][ T4294] hid-generic 0000:200000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1603.855304][T19176] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1603.947696][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1604.997178][T19255] loop9: detected capacity change from 0 to 1024 [ 1605.065510][T19255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1605.259634][T19255] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1605.370482][T19255] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: inode #11: comm syz.9.3221: missing EA_INODE flag [ 1605.415277][T19228] bond1 (unregistering): Released all slaves [ 1605.436227][T19255] EXT4-fs (loop9): Remounting filesystem read-only [ 1605.446528][T19255] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3221: error while reading EA inode 11 err=-117 [ 1605.475138][T19255] EXT4-fs (loop9): Remounting filesystem read-only [ 1605.519263][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1605.519280][ T27] audit: type=1326 audit(1733954836.782:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.7.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1605.553416][ T27] audit: type=1326 audit(1733954836.782:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.7.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1605.595129][ T27] audit: type=1326 audit(1733954836.814:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.7.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1605.636743][T19255] EXT4-fs error (device loop9): __ext4_remount:6449: comm +}[@: Abort forced by user [ 1605.655203][ T27] audit: type=1326 audit(1733954836.814:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.7.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1605.678123][T19255] EXT4-fs (loop9): Remounting filesystem read-only [ 1605.685384][ T27] audit: type=1326 audit(1733954836.814:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.7.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1605.860933][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1607.536847][T13585] Bluetooth: hci5: command 0x0406 tx timeout [ 1607.824974][ T27] audit: type=1326 audit(1733954839.208:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.9.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1607.920353][ T27] audit: type=1326 audit(1733954839.271:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.9.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1608.074605][ T27] audit: type=1326 audit(1733954839.271:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.9.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1608.103916][ T27] audit: type=1326 audit(1733954839.271:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.9.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1608.136563][ T27] audit: type=1326 audit(1733954839.271:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.9.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1608.728728][T19338] loop5: detected capacity change from 0 to 1024 [ 1608.789699][T19338] EXT4-fs: Ignoring removed orlov option [ 1608.999021][T19338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1609.102419][T19338] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.3249: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1609.189423][T19352] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3250'. [ 1609.207575][T19352] ubi0: attaching mtd0 [ 1609.216473][T19352] ubi0: scanning is finished [ 1609.643404][T19352] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1609.901616][T19338] EXT4-fs (loop5): Remounting filesystem read-only [ 1610.082869][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1612.389589][T19396] loop7: detected capacity change from 0 to 256 [ 1612.539152][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1612.539170][ T27] audit: type=1326 audit(1733954844.153:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1612.809350][ T27] audit: type=1326 audit(1733954844.184:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1612.964114][ T27] audit: type=1326 audit(1733954844.184:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1612.976377][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1613.121412][ T27] audit: type=1326 audit(1733954844.184:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.464166][ T27] audit: type=1326 audit(1733954844.184:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.497193][ T27] audit: type=1326 audit(1733954844.184:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.552490][T19423] device pim6reg1 entered promiscuous mode [ 1613.582483][ T27] audit: type=1326 audit(1733954844.184:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.649246][ T27] audit: type=1326 audit(1733954844.184:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.718229][ T27] audit: type=1326 audit(1733954844.184:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1613.804854][ T27] audit: type=1326 audit(1733954844.184:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1614.203186][T19445] netlink: 'syz.4.3271': attribute type 21 has an invalid length. [ 1614.250735][T17067] tipc: Subscription rejected, illegal request [ 1614.257377][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'. [ 1614.461788][T19449] loop7: detected capacity change from 0 to 164 [ 1614.699863][T19462] hub 6-0:1.0: USB hub found [ 1614.707977][T19462] hub 6-0:1.0: 1 port detected [ 1615.034590][T19450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1615.429966][T19450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1616.167675][T19485] loop7: detected capacity change from 0 to 512 [ 1616.209987][T19485] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1616.421596][T19485] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3281: bg 0: block 248: padding at end of block bitmap is not set [ 1616.487582][T19485] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3281: Failed to acquire dquot type 1 [ 1616.503032][T19485] EXT4-fs (loop7): 1 truncate cleaned up [ 1616.531482][T19485] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1616.647218][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1616.794482][T18464] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1616.987042][T18464] usb 5-1: config 0 has no interfaces? [ 1616.992739][T18464] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1617.012171][T18464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.088928][T18464] usb 5-1: config 0 descriptor?? [ 1617.302206][ T5182] usb 5-1: USB disconnect, device number 21 [ 1617.529647][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 1617.529664][ T27] audit: type=1326 audit(1733954849.392:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1617.623289][ T27] audit: type=1326 audit(1733954849.423:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1617.645634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1617.652743][T19525] loop9: detected capacity change from 0 to 1024 [ 1617.697495][T19525] EXT4-fs: Ignoring removed nobh option [ 1617.718642][T19525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1617.736046][T19525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1617.742463][ T27] audit: type=1326 audit(1733954849.423:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1617.769988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1617.786587][T19525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1617.884705][T19525] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1617.927942][ T27] audit: type=1326 audit(1733954849.423:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.014417][T19525] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1618.028133][ T27] audit: type=1326 audit(1733954849.423:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.087623][T19525] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1618.117493][ T27] audit: type=1326 audit(1733954849.444:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.227799][ T27] audit: type=1326 audit(1733954849.486:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.262439][T19545] loop5: detected capacity change from 0 to 64 [ 1618.305152][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1618.327540][T19545] hfs: unable to parse mount options [ 1618.378700][ T27] audit: type=1326 audit(1733954849.486:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.524676][ T27] audit: type=1326 audit(1733954849.486:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1618.547094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.778522][ T27] audit: type=1326 audit(1733954849.486:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1619.857145][T19572] loop7: detected capacity change from 0 to 2048 [ 1619.906755][T19572] EXT4-fs: Ignoring removed mblk_io_submit option [ 1619.977573][T19581] overlayfs: overlapping lowerdir path [ 1620.043353][T19572] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1620.260064][T19591] loop9: detected capacity change from 0 to 512 [ 1620.448165][T19594] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3306: bg 0: block 234: padding at end of block bitmap is not set [ 1623.689530][T19591] EXT4-fs: failed to create workqueue [ 1623.741147][T19594] EXT4-fs (loop7): Remounting filesystem read-only [ 1623.889662][T19591] EXT4-fs (loop9): mount failed [ 1623.952871][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1624.529720][T19600] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1624.980181][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1624.980199][ T27] audit: type=1326 audit(1733954857.213:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106780][ T27] audit: type=1326 audit(1733954857.266:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106831][ T27] audit: type=1326 audit(1733954857.266:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106870][ T27] audit: type=1326 audit(1733954857.266:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106909][ T27] audit: type=1326 audit(1733954857.266:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106948][ T27] audit: type=1326 audit(1733954857.276:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.106988][ T27] audit: type=1326 audit(1733954857.276:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.107027][ T27] audit: type=1326 audit(1733954857.276:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.107067][ T27] audit: type=1326 audit(1733954857.276:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1625.107107][ T27] audit: type=1326 audit(1733954857.276:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19613 comm="syz.9.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1626.730961][T17067] tipc: Subscription rejected, illegal request [ 1626.767777][T19645] loop7: detected capacity change from 0 to 164 [ 1627.020998][T19651] loop4: detected capacity change from 0 to 128 [ 1627.182008][T19655] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3323'. [ 1627.332121][T19656] syz.4.3321: attempt to access beyond end of device [ 1627.332121][T19656] loop4: rw=2049, sector=441, nr_sectors = 600 limit=128 [ 1627.658302][T19668] fuse: Unknown parameter 'fd0x0000000000000003' [ 1628.212168][T10077] tipc: Subscription rejected, illegal request [ 1629.752884][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1629.752903][ T27] audit: type=1326 audit(1733954862.221:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1629.848801][ T27] audit: type=1326 audit(1733954862.263:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1629.933654][T19715] loop7: detected capacity change from 0 to 1024 [ 1629.982982][ T27] audit: type=1326 audit(1733954862.263:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1630.039834][T19715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1630.101304][ T27] audit: type=1326 audit(1733954862.263:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1630.151103][T19715] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1630.215980][T19715] EXT4-fs (loop7): unmounting filesystem. [ 1630.289629][ T27] audit: type=1326 audit(1733954862.263:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1630.355296][T19726] overlayfs: overlapping lowerdir path [ 1630.420207][ T27] audit: type=1326 audit(1733954862.263:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1630.512974][ T27] audit: type=1326 audit(1733954862.263:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc84ef7ff53 code=0x7ffc0000 [ 1630.653628][ T27] audit: type=1326 audit(1733954862.263:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc84ef7ff53 code=0x7ffc0000 [ 1630.773664][ T27] audit: type=1326 audit(1733954862.263:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1630.789805][T17067] tipc: Subscription rejected, illegal request [ 1630.874704][ T27] audit: type=1326 audit(1733954862.284:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc84ef7ff19 code=0x7ffc0000 [ 1631.631783][T19754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3350'. [ 1631.720221][T19754] can0: slcan on ptm0. [ 1632.484443][T19745] can0 (unregistered): slcan off ptm0. [ 1632.593888][T19758] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3353'. [ 1632.744420][T19760] loop7: detected capacity change from 0 to 1024 [ 1632.860139][T19760] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1632.942699][T19760] EXT4-fs (loop7): too many log groups per flexible block group [ 1633.125054][T19760] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 1633.148558][T19760] EXT4-fs (loop7): mount failed [ 1633.404509][T19779] syz.7.3358[19779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.404745][T19779] syz.7.3358[19779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1634.074425][T19796] loop4: detected capacity change from 0 to 2048 [ 1634.094345][T19800] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1634.138734][T19796] EXT4-fs: Ignoring removed oldalloc option [ 1634.250638][T19796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1634.510461][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1634.947847][T19830] loop9: detected capacity change from 0 to 164 [ 1635.021409][T19831] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3372'. [ 1636.831587][T19856] loop9: detected capacity change from 0 to 2048 [ 1637.023575][T19856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1637.144227][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1637.144245][ T27] audit: type=1800 audit(1733954869.991:592): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3379" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1637.240400][ T27] audit: type=1800 audit(1733954869.991:593): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3379" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1637.406572][T19876] loop5: detected capacity change from 0 to 256 [ 1637.486199][T19876] FAT-fs (loop5): Directory bread(block 64) failed [ 1637.508964][T19876] FAT-fs (loop5): Directory bread(block 65) failed [ 1637.530653][T19876] FAT-fs (loop5): Directory bread(block 66) failed [ 1637.537258][T19876] FAT-fs (loop5): Directory bread(block 67) failed [ 1637.553279][T19876] FAT-fs (loop5): Directory bread(block 68) failed [ 1637.563792][T19876] FAT-fs (loop5): Directory bread(block 69) failed [ 1637.580769][T19876] FAT-fs (loop5): Directory bread(block 70) failed [ 1637.634122][T19876] FAT-fs (loop5): Directory bread(block 71) failed [ 1637.650500][T19876] FAT-fs (loop5): Directory bread(block 72) failed [ 1637.668251][T19876] FAT-fs (loop5): Directory bread(block 73) failed [ 1637.815667][T19876] syz.5.3385: attempt to access beyond end of device [ 1637.815667][T19876] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 1637.890479][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1637.904429][T19876] syz.5.3385: attempt to access beyond end of device [ 1637.904429][T19876] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 1637.996370][ T27] audit: type=1326 audit(1733954870.872:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.046536][ T27] audit: type=1326 audit(1733954870.914:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.112640][T19876] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1638.133599][ T27] audit: type=1326 audit(1733954870.914:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.212802][ T27] audit: type=1326 audit(1733954870.914:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.323441][ T27] audit: type=1326 audit(1733954870.914:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.394645][ T27] audit: type=1326 audit(1733954870.914:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.505234][ T27] audit: type=1326 audit(1733954870.914:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1638.609806][ T27] audit: type=1326 audit(1733954870.914:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1639.629434][ T4266] block nbd4: Receive control failed (result -32) [ 1639.650198][T19896] block nbd4: shutting down sockets [ 1639.664955][T19917] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3392'. [ 1643.427525][T19966] loop5: detected capacity change from 0 to 1024 [ 1643.531550][T19966] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1643.653748][T19966] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2739: inode #14: comm syz.5.3404: corrupted in-inode xattr [ 1643.812490][T19966] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #14: comm syz.5.3404: attempt to clear invalid blocks 1634560256 len 1 [ 1643.841477][T19982] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3408'. [ 1643.864493][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 1643.864511][ T27] audit: type=1326 audit(1733954877.046:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1643.900019][T19981] syz.0.3406 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1644.680021][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1644.688954][ T27] audit: type=1326 audit(1733954877.077:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1644.711392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.852325][ T27] audit: type=1326 audit(1733954877.077:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1644.874925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.984983][ T27] audit: type=1326 audit(1733954877.854:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1646.385535][T20016] loop4: detected capacity change from 0 to 512 [ 1646.549797][T20016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1646.591646][T20016] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.195527][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1649.182618][T20053] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3425'. [ 1650.394008][T20077] loop4: detected capacity change from 0 to 512 [ 1650.466169][T20077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1650.517142][T20077] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.522938][T20092] loop7: detected capacity change from 0 to 16384 [ 1651.852212][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1653.550985][T20118] loop5: detected capacity change from 0 to 256 [ 1653.711905][T20118] FAT-fs (loop5): Directory bread(block 64) failed [ 1653.742100][T20118] FAT-fs (loop5): Directory bread(block 65) failed [ 1653.752880][T20118] FAT-fs (loop5): Directory bread(block 66) failed [ 1653.761394][T20118] FAT-fs (loop5): Directory bread(block 67) failed [ 1653.771388][T20118] FAT-fs (loop5): Directory bread(block 68) failed [ 1653.798665][T20118] FAT-fs (loop5): Directory bread(block 69) failed [ 1653.912170][T20118] FAT-fs (loop5): Directory bread(block 70) failed [ 1654.038004][T20118] FAT-fs (loop5): Directory bread(block 71) failed [ 1654.137941][T20118] FAT-fs (loop5): Directory bread(block 72) failed [ 1654.339682][T20118] FAT-fs (loop5): Directory bread(block 73) failed [ 1654.522964][T20118] syz.5.3440: attempt to access beyond end of device [ 1654.522964][T20118] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 1654.583010][T20118] syz.5.3440: attempt to access beyond end of device [ 1654.583010][T20118] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 1654.644213][ T27] audit: type=1326 audit(1733954888.353:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1654.739724][ T27] audit: type=1326 audit(1733954888.353:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1654.892215][ T27] audit: type=1326 audit(1733954888.353:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1654.959103][ T27] audit: type=1326 audit(1733954888.353:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.038670][ T27] audit: type=1326 audit(1733954888.353:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.098609][ T27] audit: type=1326 audit(1733954888.353:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.262277][ T27] audit: type=1326 audit(1733954889.004:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz.5.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.322507][ T27] audit: type=1326 audit(1733954889.004:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz.5.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.351577][ T27] audit: type=1326 audit(1733954889.004:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz.5.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ad817e9cf code=0x7ffc0000 [ 1655.382147][ T27] audit: type=1326 audit(1733954889.004:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz.5.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad817ff19 code=0x7ffc0000 [ 1655.445630][T20099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.453092][T20099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.252478][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.352755][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.327844][T20099] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.337015][T20099] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.346013][T20099] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.360510][T20099] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.496929][T20129] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3442'. [ 1660.248897][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3455'. [ 1660.258615][T20176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1661.147668][T20203] loop7: detected capacity change from 0 to 256 [ 1662.058564][T20203] FAT-fs (loop7): Directory bread(block 64) failed [ 1662.065153][T20203] FAT-fs (loop7): Directory bread(block 65) failed [ 1662.132814][T20203] FAT-fs (loop7): Directory bread(block 66) failed [ 1662.139408][T20203] FAT-fs (loop7): Directory bread(block 67) failed [ 1662.156352][T20203] FAT-fs (loop7): Directory bread(block 68) failed [ 1662.199660][T20203] FAT-fs (loop7): Directory bread(block 69) failed [ 1662.206991][T20203] FAT-fs (loop7): Directory bread(block 70) failed [ 1662.227785][T20203] FAT-fs (loop7): Directory bread(block 71) failed [ 1662.234526][T20203] FAT-fs (loop7): Directory bread(block 72) failed [ 1662.275685][T20203] FAT-fs (loop7): Directory bread(block 73) failed [ 1662.594416][T20203] No such timeout policy "syz1" [ 1662.642289][T20203] syz.7.3464: attempt to access beyond end of device [ 1662.642289][T20203] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 1665.416305][T20237] loop7: detected capacity change from 0 to 512 [ 1665.548481][T20237] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1665.597173][T20237] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.831311][T20255] loop9: detected capacity change from 0 to 256 [ 1666.008729][T20255] FAT-fs (loop9): Directory bread(block 64) failed [ 1666.033482][T20255] FAT-fs (loop9): Directory bread(block 65) failed [ 1666.076261][T20255] FAT-fs (loop9): Directory bread(block 66) failed [ 1666.083407][T20255] FAT-fs (loop9): Directory bread(block 67) failed [ 1666.126505][T20255] FAT-fs (loop9): Directory bread(block 68) failed [ 1666.159629][T20255] FAT-fs (loop9): Directory bread(block 69) failed [ 1666.160460][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1666.169549][T20255] FAT-fs (loop9): Directory bread(block 70) failed [ 1666.189387][T20255] FAT-fs (loop9): Directory bread(block 71) failed [ 1666.221423][T20255] FAT-fs (loop9): Directory bread(block 72) failed [ 1666.268746][T20255] FAT-fs (loop9): Directory bread(block 73) failed [ 1667.511863][T20255] syz.9.3476: attempt to access beyond end of device [ 1667.511863][T20255] loop9: rw=2049, sector=1224, nr_sectors = 132 limit=256 [ 1668.729616][T20315] loop5: detected capacity change from 0 to 512 [ 1668.835436][T20315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1668.882289][T20315] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.856113][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1670.296784][ T4266] block nbd0: Receive control failed (result -32) [ 1670.315030][T20333] block nbd0: shutting down sockets [ 1671.711733][T20368] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1671.985578][T20381] loop4: detected capacity change from 0 to 512 [ 1672.153236][T20381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1672.198450][T20381] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1673.215267][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1673.271295][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1673.271312][ T27] audit: type=1326 audit(1733954907.913:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20408 comm="syz.7.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1673.610318][ T27] audit: type=1326 audit(1733954907.965:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20408 comm="syz.7.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1673.640774][ T27] audit: type=1326 audit(1733954907.965:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20408 comm="syz.7.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1673.685593][ T27] audit: type=1326 audit(1733954907.965:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20408 comm="syz.7.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1675.027981][T20438] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1675.233359][T20449] loop9: detected capacity change from 0 to 512 [ 1676.111482][T20449] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1676.132885][T20449] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1676.653832][T13583] EXT4-fs (loop9): unmounting filesystem. [ 1677.042261][T20486] No such timeout policy "syz1" [ 1677.691494][T20510] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1677.765283][T20512] loop7: detected capacity change from 0 to 512 [ 1677.863975][T20512] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1677.883236][T20512] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.916051][T20519] syz.9.3546[20519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.916165][T20519] syz.9.3546[20519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.390474][ T8275] EXT4-fs (loop7): unmounting filesystem. [ 1680.897381][T20563] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3561'. [ 1680.922578][T20563] 0ªX¹¦À: renamed from caif0 [ 1680.935028][T20563] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1682.394478][T20585] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1683.762620][ T27] audit: type=1326 audit(1733954918.926:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.7.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1683.839579][ T27] audit: type=1326 audit(1733954918.957:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.7.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1683.948150][ T27] audit: type=1326 audit(1733954918.957:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.7.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1684.045677][ T27] audit: type=1326 audit(1733954918.957:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.7.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1684.105644][ T27] audit: type=1326 audit(1733954918.957:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.7.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15337ff19 code=0x7ffc0000 [ 1685.504850][T10830] tipc: Subscription rejected, illegal request [ 1685.656211][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1685.668246][T20646] tipc: Enabling of bearer rejected, failed to enable media [ 1686.366129][T20653] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1692.675648][ T27] audit: type=1326 audit(1733954928.291:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1692.994687][ T27] audit: type=1326 audit(1733954928.291:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.493053][ T27] audit: type=1326 audit(1733954928.480:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.516629][ T27] audit: type=1326 audit(1733954928.490:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.548314][T20744] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3613'. [ 1693.562033][T20739] lo speed is unknown, defaulting to 1000 [ 1693.594975][ T27] audit: type=1326 audit(1733954928.490:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.605487][T20739] lo speed is unknown, defaulting to 1000 [ 1693.617582][ T27] audit: type=1326 audit(1733954928.543:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.648994][T20739] lo speed is unknown, defaulting to 1000 [ 1693.662213][ T27] audit: type=1326 audit(1733954928.942:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbf437ff53 code=0x7ffc0000 [ 1693.723767][T20739] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1693.753229][ T27] audit: type=1326 audit(1733954929.194:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbf437ff53 code=0x7ffc0000 [ 1693.868054][ T27] audit: type=1326 audit(1733954929.194:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1693.955768][ T27] audit: type=1326 audit(1733954929.194:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1694.005361][T20739] lo speed is unknown, defaulting to 1000 [ 1694.013841][T20757] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1694.089615][T20739] lo speed is unknown, defaulting to 1000 [ 1694.142193][T20739] lo speed is unknown, defaulting to 1000 [ 1694.162490][T20739] lo speed is unknown, defaulting to 1000 [ 1694.256057][T20739] lo speed is unknown, defaulting to 1000 [ 1694.388628][T20769] loop5: detected capacity change from 0 to 512 [ 1694.414293][T20769] EXT4-fs: Ignoring removed mblk_io_submit option [ 1694.447569][T20769] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1694.636957][T20769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c119, mo2=0002] [ 1694.656027][T20769] System zones: 1-12 [ 1694.696764][T20769] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.3621: corrupted in-inode xattr [ 1694.748784][T20769] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3621: couldn't read orphan inode 15 (err -117) [ 1694.784356][T20769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1695.652883][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1696.158048][ T4250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1696.170746][ T4250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1696.179654][ T4250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1696.187738][ T4250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1696.196646][ T4250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1696.206383][T20802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1696.375566][T20807] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3629'. [ 1696.506922][T20801] lo speed is unknown, defaulting to 1000 [ 1697.449390][ T4266] block nbd0: Receive control failed (result -32) [ 1697.468062][T20800] block nbd0: shutting down sockets [ 1698.060965][T20832] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1698.170344][T20834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1698.203317][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 1698.256601][T20801] chnl_net:caif_netlink_parms(): no params data found [ 1698.373183][ T4856] tipc: Disabling bearer [ 1698.403683][ T4856] tipc: Left network mode [ 1698.780386][T20857] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1698.834417][T20801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.848813][T20801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.864757][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 1698.864774][ T27] audit: type=1326 audit(1733954934.790:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1698.904879][T20801] device bridge_slave_0 entered promiscuous mode [ 1698.969229][T20801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.980168][T20801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.003475][ T27] audit: type=1326 audit(1733954934.790:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.043595][T20801] device bridge_slave_1 entered promiscuous mode [ 1699.143626][ T27] audit: type=1326 audit(1733954934.790:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.249893][T20801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.266797][ T27] audit: type=1326 audit(1733954934.790:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.352169][ T27] audit: type=1326 audit(1733954934.790:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.404915][T20801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.574447][ T27] audit: type=1326 audit(1733954934.790:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.632465][ T27] audit: type=1326 audit(1733954934.790:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.730499][ T27] audit: type=1326 audit(1733954934.790:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.816555][ T27] audit: type=1326 audit(1733954934.790:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.907002][T20801] team0: Port device team_slave_0 added [ 1699.958915][ T27] audit: type=1326 audit(1733954934.790:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.0.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1699.994801][T20801] team0: Port device team_slave_1 added [ 1700.184330][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 1700.482784][T20801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.495680][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.574494][T20801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.823950][T20801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.830952][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.916923][T20801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.069033][ T4856] device hsr_slave_0 left promiscuous mode [ 1701.107613][ T4856] device hsr_slave_1 left promiscuous mode [ 1701.165656][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.183599][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.210442][ T4856] device bridge_slave_1 left promiscuous mode [ 1701.231367][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.234257][T20910] loop4: detected capacity change from 0 to 2048 [ 1701.257655][ T4856] device bridge_slave_0 left promiscuous mode [ 1701.270252][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.219312][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 1702.250763][T20910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1702.372964][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1703.269121][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.433350][T13585] block nbd4: Receive control failed (result -32) [ 1703.447142][T20941] block nbd4: shutting down sockets [ 1703.450300][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.078824][ T4856] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1704.087941][ T4856] bond0 (unregistering): Released all slaves [ 1704.146199][T13585] Bluetooth: hci4: command 0x0419 tx timeout [ 1704.208153][T20801] device hsr_slave_0 entered promiscuous mode [ 1704.215345][T20801] device hsr_slave_1 entered promiscuous mode [ 1704.223124][T20801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1704.230816][T20801] Cannot create hsr debugfs directory [ 1704.861025][T20961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1705.715316][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 1705.715334][ T27] audit: type=1326 audit(1733954941.971:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20980 comm="syz.9.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1705.828377][ T27] audit: type=1326 audit(1733954942.003:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20980 comm="syz.9.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1705.951168][ T27] audit: type=1326 audit(1733954942.003:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20980 comm="syz.9.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1706.060257][ T27] audit: type=1326 audit(1733954942.003:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20980 comm="syz.9.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1706.279192][T20801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1706.286514][ T27] audit: type=1326 audit(1733954942.003:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20980 comm="syz.9.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf437ff19 code=0x7ffc0000 [ 1707.384092][T20801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1707.485440][T20801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1707.567421][T20801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1707.750575][ T4266] block nbd0: Receive control failed (result -32) [ 1707.761225][T20985] block nbd0: shutting down sockets [ 1707.820713][T20801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.849021][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1707.879563][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1708.120445][T20801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.137320][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1708.471844][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1708.503979][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.511202][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.554488][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1708.617277][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1708.700274][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1708.740004][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.747226][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.796215][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1708.856009][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1708.857782][T21019] loop5: detected capacity change from 0 to 512 [ 1708.873296][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1708.915467][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1708.928510][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1708.937975][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1708.947450][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1708.962718][T20801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1708.977692][T20801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1709.014644][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1709.024208][T21019] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1709.049236][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1709.056368][T21019] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1709.059119][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1709.076434][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1709.085458][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1710.392191][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1710.408212][T21049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1711.062549][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1711.077097][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1711.152891][T20801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.782824][T21108] loop5: detected capacity change from 0 to 512 [ 1713.800876][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1713.845962][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1713.988001][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1714.003189][T21108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1714.012211][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1714.015695][T20801] device veth0_vlan entered promiscuous mode [ 1714.033816][T20801] device veth1_vlan entered promiscuous mode [ 1714.041532][T21108] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.065844][T21116] netlink: 'syz.4.3701': attribute type 2 has an invalid length. [ 1714.078764][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1714.097053][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1714.170297][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1714.284320][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1715.018236][T21122] bridge0: port 1(gretap0) entered blocking state [ 1715.024810][T21122] bridge0: port 1(gretap0) entered disabled state [ 1715.033890][T21122] device gretap0 entered promiscuous mode [ 1715.057648][T20801] device veth0_macvtap entered promiscuous mode [ 1715.096648][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1715.139398][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1715.205838][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1715.243605][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1715.255501][T20801] device veth1_macvtap entered promiscuous mode [ 1715.322999][T20801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.376606][T20801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.396659][T20801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.418685][T20801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.446118][T20801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.458890][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1715.470958][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1715.486138][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1715.551131][T20801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.591534][T20801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.636555][T20801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.664779][T20801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.676787][T20801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.687109][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1715.711657][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1715.735637][T20801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.808960][T20801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.970327][T20801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.226727][T20801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.123954][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.183406][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.199906][T21171] loop5: detected capacity change from 0 to 512 [ 1718.208153][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.263695][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.286150][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1718.298429][T21171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1718.328748][T21171] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.343243][T19597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1718.370095][ T4266] block nbd4: Receive control failed (result -32) [ 1718.380744][T21142] block nbd4: shutting down sockets [ 1720.086055][T21193] bridge0: port 3(gretap0) entered blocking state [ 1720.093040][T21193] bridge0: port 3(gretap0) entered disabled state [ 1720.103935][T21193] device gretap0 entered promiscuous mode [ 1720.113453][T21193] bridge0: port 3(gretap0) entered blocking state [ 1720.120611][T21193] bridge0: port 3(gretap0) entered forwarding state [ 1720.485421][T21191] loop4: detected capacity change from 0 to 256 [ 1720.852771][T21191] tipc: Started in network mode [ 1720.900384][T21191] tipc: Node identity ac1414aa, cluster identity 4711 [ 1721.177726][T21191] tipc: New replicast peer: 100.1.1.1 [ 1721.292901][T21191] tipc: Enabled bearer , priority 10 [ 1722.131933][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1722.348426][ T4929] tipc: Node number set to 2886997162 [ 1724.843718][ T27] audit: type=1326 audit(1733954962.055:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1724.972736][ T27] audit: type=1326 audit(1733954962.055:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.138800][ T27] audit: type=1326 audit(1733954962.055:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.167650][ T27] audit: type=1326 audit(1733954962.055:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.213074][ T27] audit: type=1326 audit(1733954962.055:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.283285][ T27] audit: type=1326 audit(1733954962.097:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.405939][ T27] audit: type=1326 audit(1733954962.097:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1725.497027][ T27] audit: type=1326 audit(1733954962.097:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1726.097736][ T27] audit: type=1326 audit(1733954962.097:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1726.139774][ T27] audit: type=1326 audit(1733954962.097:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.0.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1729.315868][T21298] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1730.646738][ T4266] block nbd9: Receive control failed (result -32) [ 1730.655642][T21319] block nbd9: shutting down sockets [ 1730.966160][T21339] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1730.966160][T21339] program syz.7.3754 not setting count and/or reply_len properly [ 1731.963757][T21347] loop5: detected capacity change from 0 to 128 [ 1734.837246][T21385] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3763'. [ 1735.326428][ T4853] tipc: Subscription rejected, illegal request [ 1736.576896][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 1736.576914][ T27] audit: type=1326 audit(1733954974.381:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1736.740889][ T27] audit: type=1326 audit(1733954974.444:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1736.840235][ T27] audit: type=1326 audit(1733954974.444:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1736.917413][T21412] loop4: detected capacity change from 0 to 4096 [ 1736.995094][ T27] audit: type=1326 audit(1733954974.444:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1737.064996][ T27] audit: type=1326 audit(1733954974.444:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1737.182762][T21423] fuse: Bad value for 'fd' [ 1737.221430][T21412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1737.234994][ T27] audit: type=1326 audit(1733954974.518:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1737.456283][ T27] audit: type=1326 audit(1733954974.518:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.7.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713077ff19 code=0x7ffc0000 [ 1738.132147][ T27] audit: type=1800 audit(1733954975.767:779): pid=21437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3772" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1738.237504][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1740.339178][T21470] loop4: detected capacity change from 0 to 512 [ 1740.440047][T21472] loop5: detected capacity change from 0 to 2048 [ 1740.495781][T21470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1740.551729][T21470] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.601210][T21472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1740.663674][T21472] block device autoloading is deprecated and will be removed. [ 1740.676978][T21472] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1740.724030][T21484] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1740.724030][T21484] program syz.9.3786 not setting count and/or reply_len properly [ 1740.764213][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1740.871457][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1740.908431][T21487] loop7: detected capacity change from 0 to 1024 [ 1740.987810][T21487] EXT4-fs: Ignoring removed nobh option [ 1741.014220][T21487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1741.059905][T21487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1741.116394][T21487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1741.145706][T21495] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.155525][T21487] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1741.187204][T21495] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.191573][T21487] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 1741.196423][T21495] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.212138][T21495] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.396803][T20801] EXT4-fs (loop7): unmounting filesystem. [ 1743.481098][T21522] loop4: detected capacity change from 0 to 512 [ 1743.744165][T21522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1743.784914][T21522] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.470213][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1744.732944][T21542] loop7: detected capacity change from 0 to 164 [ 1744.818784][T21542] syz.7.3807: attempt to access beyond end of device [ 1744.818784][T21542] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1744.900149][T21542] syz.7.3807: attempt to access beyond end of device [ 1744.900149][T21542] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1744.952087][ T27] audit: type=1800 audit(1733954983.179:780): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3807" name="file0" dev="loop7" ino=1862 res=0 errno=0 [ 1746.276150][ T4841] tipc: Subscription rejected, illegal request [ 1746.321903][T21571] loop5: detected capacity change from 0 to 512 [ 1746.578619][T21571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1746.636883][T21571] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.687173][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1751.196258][T21646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1751.509252][ T27] audit: type=1326 audit(1733954990.056:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.570767][ T27] audit: type=1326 audit(1733954990.088:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.704310][ T27] audit: type=1326 audit(1733954990.088:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.770610][ T27] audit: type=1326 audit(1733954990.088:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.802335][T21660] lo speed is unknown, defaulting to 1000 [ 1751.837264][ T27] audit: type=1326 audit(1733954990.088:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.941792][ T27] audit: type=1326 audit(1733954990.088:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1751.971578][ T27] audit: type=1326 audit(1733954990.088:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1752.086618][ T27] audit: type=1326 audit(1733954990.088:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1752.671335][ T27] audit: type=1326 audit(1733954990.088:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1752.751305][ T27] audit: type=1326 audit(1733954990.088:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21655 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff5d017ff19 code=0x7ffc0000 [ 1753.022303][T21671] loop4: detected capacity change from 0 to 1024 [ 1753.029769][T21671] EXT4-fs: Ignoring removed orlov option [ 1753.123390][T21671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1755.105246][T21690] loop5: detected capacity change from 0 to 1024 [ 1755.198487][T21690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1755.250097][T17629] EXT4-fs (loop4): unmounting filesystem. [ 1755.363481][T21697] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3848'. [ 1755.443268][T21700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3849'. [ 1755.745833][T21705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1755.786479][T16992] EXT4-fs (loop5): unmounting filesystem. [ 1757.421504][T21723] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1759.036774][T21738] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3860'. [ 1759.303757][T21750] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1759.353892][T21749] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1759.480426][T21755] loop0: detected capacity change from 0 to 128 [ 1759.772711][T21755] 9pnet: Could not find request transport: r [ 1759.802299][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3867'. [ 1760.443894][T21773] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1760.664934][T21780] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3874'. [ 1762.134517][T21786] loop5: detected capacity change from 0 to 128 [ 1762.262590][T21786] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1762.274070][T21786] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.361637][T21786] [ 1762.364022][T21786] ====================================================== [ 1762.371062][T21786] WARNING: possible circular locking dependency detected [ 1762.378112][T21786] 6.1.119-syzkaller #0 Not tainted [ 1762.383240][T21786] ------------------------------------------------------ [ 1762.390276][T21786] syz.5.3875/21786 is trying to acquire lock: [ 1762.396358][T21786] ffff888073de70e0 (&ei->i_data_sem/1){+.+.}-{3:3}, at: ext4_move_extents+0x3a0/0xe10 [ 1762.405991][T21786] [ 1762.405991][T21786] but task is already holding lock: [ 1762.413377][T21786] ffff888073db8288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 1762.424054][T21786] [ 1762.424054][T21786] which lock already depends on the new lock. [ 1762.424054][T21786] [ 1762.434487][T21786] [ 1762.434487][T21786] the existing dependency chain (in reverse order) is: [ 1762.443528][T21786] [ 1762.443528][T21786] -> #3 (&ei->i_data_sem/2){++++}-{3:3}: [ 1762.451414][T21786] lock_acquire+0x1f8/0x5a0 [ 1762.456488][T21786] down_write+0x36/0x60 [ 1762.461205][T21786] ext4_map_blocks+0x955/0x1cb0 [ 1762.466609][T21786] ext4_getblk+0x1eb/0x7c0 [ 1762.471596][T21786] ext4_bread+0x2a/0x170 [ 1762.476397][T21786] ext4_quota_write+0x21e/0x570 [ 1762.481801][T21786] find_free_dqentry+0x6b2/0xc80 [ 1762.487301][T21786] do_insert_tree+0x88b/0x1440 [ 1762.492629][T21786] do_insert_tree+0xb51/0x1440 [ 1762.497954][T21786] do_insert_tree+0xb51/0x1440 [ 1762.503282][T21786] do_insert_tree+0xb51/0x1440 [ 1762.508610][T21786] qtree_write_dquot+0x483/0x5a0 [ 1762.514201][T21786] v2_write_dquot+0x11c/0x190 [ 1762.519438][T21786] dquot_acquire+0x34d/0x680 [ 1762.524586][T21786] ext4_acquire_dquot+0x2eb/0x4a0 [ 1762.530175][T21786] dqget+0x762/0xe90 [ 1762.534617][T21786] __dquot_initialize+0x45e/0xea0 [ 1762.540218][T21786] ext4_file_open+0x2cf/0x710 [ 1762.545436][T21786] do_dentry_open+0x7f9/0x10f0 [ 1762.550740][T21786] path_openat+0x2644/0x2e60 [ 1762.555875][T21786] do_filp_open+0x230/0x480 [ 1762.560897][T21786] do_sys_openat2+0x13b/0x4f0 [ 1762.566102][T21786] __x64_sys_openat+0x243/0x290 [ 1762.571478][T21786] do_syscall_64+0x3b/0xb0 [ 1762.576437][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.582864][T21786] [ 1762.582864][T21786] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1762.590966][T21786] lock_acquire+0x1f8/0x5a0 [ 1762.596030][T21786] down_read+0xad/0xa30 [ 1762.600737][T21786] v2_read_dquot+0x4a/0x100 [ 1762.605783][T21786] dquot_acquire+0x188/0x680 [ 1762.610902][T21786] ext4_acquire_dquot+0x2eb/0x4a0 [ 1762.616456][T21786] dqget+0x762/0xe90 [ 1762.620881][T21786] dquot_get_next_dqblk+0xb6/0x3a0 [ 1762.626526][T21786] quota_getnextquota+0x2bc/0x6b0 [ 1762.632079][T21786] __se_sys_quotactl+0x2b1/0x770 [ 1762.637557][T21786] do_syscall_64+0x3b/0xb0 [ 1762.642501][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.648925][T21786] [ 1762.648925][T21786] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 1762.656570][T21786] lock_acquire+0x1f8/0x5a0 [ 1762.661599][T21786] __mutex_lock+0x132/0xd80 [ 1762.666627][T21786] dquot_commit+0x57/0x510 [ 1762.671586][T21786] ext4_write_dquot+0x1fd/0x360 [ 1762.676967][T21786] mark_all_dquot_dirty+0xf7/0x400 [ 1762.682605][T21786] __dquot_free_space+0x956/0xe70 [ 1762.688161][T21786] ext4_free_blocks+0x1fb4/0x3020 [ 1762.693711][T21786] ext4_swap_extents+0x18c0/0x2280 [ 1762.699349][T21786] move_extent_per_page+0x24cb/0x4c30 [ 1762.705245][T21786] ext4_move_extents+0x9ab/0xe10 [ 1762.710723][T21786] ext4_ioctl+0x3a8d/0x5f60 [ 1762.715750][T21786] __se_sys_ioctl+0xf1/0x160 [ 1762.720857][T21786] do_syscall_64+0x3b/0xb0 [ 1762.725796][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.732215][T21786] [ 1762.732215][T21786] -> #0 (&ei->i_data_sem/1){+.+.}-{3:3}: [ 1762.740039][T21786] validate_chain+0x1661/0x5950 [ 1762.745418][T21786] __lock_acquire+0x125b/0x1f80 [ 1762.750791][T21786] lock_acquire+0x1f8/0x5a0 [ 1762.755816][T21786] down_write_nested+0x39/0x60 [ 1762.761100][T21786] ext4_move_extents+0x3a0/0xe10 [ 1762.766568][T21786] ext4_ioctl+0x3a8d/0x5f60 [ 1762.771597][T21786] __se_sys_ioctl+0xf1/0x160 [ 1762.776703][T21786] do_syscall_64+0x3b/0xb0 [ 1762.781643][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.788080][T21786] [ 1762.788080][T21786] other info that might help us debug this: [ 1762.788080][T21786] [ 1762.798296][T21786] Chain exists of: [ 1762.798296][T21786] &ei->i_data_sem/1 --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1762.798296][T21786] [ 1762.812117][T21786] Possible unsafe locking scenario: [ 1762.812117][T21786] [ 1762.819726][T21786] CPU0 CPU1 [ 1762.825108][T21786] ---- ---- [ 1762.830468][T21786] lock(&ei->i_data_sem/2); [ 1762.835085][T21786] lock(&s->s_dquot.dqio_sem); [ 1762.842456][T21786] lock(&ei->i_data_sem/2); [ 1762.849569][T21786] lock(&ei->i_data_sem/1); [ 1762.854162][T21786] [ 1762.854162][T21786] *** DEADLOCK *** [ 1762.854162][T21786] [ 1762.862316][T21786] 4 locks held by syz.5.3875/21786: [ 1762.867510][T21786] #0: ffff888077a72460 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 1762.877179][T21786] #1: ffff888073db8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: lock_two_nondirectories+0xde/0x130 [ 1762.888410][T21786] #2: ffff888073de7258 (&sb->s_type->i_mutex_key#8/4){+.+.}-{3:3}, at: ext4_move_extents+0x385/0xe10 [ 1762.899373][T21786] #3: ffff888073db8288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 1762.910511][T21786] [ 1762.910511][T21786] stack backtrace: [ 1762.916387][T21786] CPU: 0 PID: 21786 Comm: syz.5.3875 Not tainted 6.1.119-syzkaller #0 [ 1762.924529][T21786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1762.934584][T21786] Call Trace: [ 1762.937874][T21786] [ 1762.940805][T21786] dump_stack_lvl+0x1e3/0x2cb [ 1762.945496][T21786] ? nf_tcp_handle_invalid+0x642/0x642 [ 1762.950963][T21786] ? print_circular_bug+0x12b/0x1a0 [ 1762.956182][T21786] check_noncircular+0x2fa/0x3b0 [ 1762.961150][T21786] ? add_chain_block+0x850/0x850 [ 1762.966084][T21786] ? lockdep_lock+0x11f/0x2a0 [ 1762.970760][T21786] ? add_lock_to_list+0x1de/0x2e0 [ 1762.975781][T21786] ? _find_first_zero_bit+0xd0/0x100 [ 1762.981067][T21786] validate_chain+0x1661/0x5950 [ 1762.985934][T21786] ? reacquire_held_locks+0x660/0x660 [ 1762.991320][T21786] ? stack_trace_save+0x113/0x1c0 [ 1762.996367][T21786] ? validate_chain+0x112/0x5950 [ 1763.001321][T21786] ? look_up_lock_class+0x77/0x140 [ 1763.006447][T21786] ? mark_lock+0x9a/0x340 [ 1763.010781][T21786] __lock_acquire+0x125b/0x1f80 [ 1763.015640][T21786] lock_acquire+0x1f8/0x5a0 [ 1763.020145][T21786] ? ext4_move_extents+0x3a0/0xe10 [ 1763.025269][T21786] ? read_lock_is_recursive+0x10/0x10 [ 1763.030651][T21786] ? __might_sleep+0xb0/0xb0 [ 1763.035254][T21786] ? rwsem_write_trylock+0x166/0x210 [ 1763.040543][T21786] ? inode_owner_or_capable+0x210/0x210 [ 1763.046095][T21786] ? clear_nonspinnable+0x60/0x60 [ 1763.051123][T21786] down_write_nested+0x39/0x60 [ 1763.055886][T21786] ? ext4_move_extents+0x3a0/0xe10 [ 1763.061005][T21786] ext4_move_extents+0x3a0/0xe10 [ 1763.065939][T21786] ? rcu_read_lock_any_held+0xb3/0x160 [ 1763.071408][T21786] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1763.077389][T21786] ext4_ioctl+0x3a8d/0x5f60 [ 1763.081891][T21786] ? kasan_set_track+0x4b/0x70 [ 1763.086655][T21786] ? security_file_ioctl+0x6d/0xa0 [ 1763.091758][T21786] ? __se_sys_ioctl+0x47/0x160 [ 1763.096512][T21786] ? do_syscall_64+0x3b/0xb0 [ 1763.101105][T21786] ? ext4_fileattr_set+0x1770/0x1770 [ 1763.106412][T21786] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 1763.111260][T21786] ? __x64_compat_sys_ioctl+0x80/0x80 [ 1763.116637][T21786] ? __lock_acquire+0x1f80/0x1f80 [ 1763.121665][T21786] ? lockdep_hardirqs_on+0x94/0x130 [ 1763.126866][T21786] ? __kmem_cache_free+0x25c/0x3c0 [ 1763.131978][T21786] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 1763.137629][T21786] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 1763.143280][T21786] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 1763.148916][T21786] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1763.154381][T21786] ? __fget_files+0x28/0x4a0 [ 1763.158973][T21786] ? __fget_files+0x28/0x4a0 [ 1763.163556][T21786] ? __fget_files+0x435/0x4a0 [ 1763.168239][T21786] ? __fget_files+0x28/0x4a0 [ 1763.172825][T21786] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1763.177755][T21786] ? security_file_ioctl+0x7d/0xa0 [ 1763.182853][T21786] ? ext4_fileattr_set+0x1770/0x1770 [ 1763.188139][T21786] __se_sys_ioctl+0xf1/0x160 [ 1763.192722][T21786] do_syscall_64+0x3b/0xb0 [ 1763.197152][T21786] ? clear_bhb_loop+0x45/0xa0 [ 1763.201829][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.207721][T21786] RIP: 0033:0x7f3ad817ff19 [ 1763.212140][T21786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.231758][T21786] RSP: 002b:00007f3ad7fff058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.240205][T21786] RAX: ffffffffffffffda RBX: 00007f3ad8345fa0 RCX: 00007f3ad817ff19 [ 1763.248212][T21786] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000004 [ 1763.256202][T21786] RBP: 00007f3ad81f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1763.264280][T21786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.272249][T21786] R13: 0000000000000000 R14: 00007f3ad8345fa0 R15: 00007fff537cacf8 [ 1763.280227][T21786] [ 1763.349400][T16992] EXT4-fs (loop5): unmounting filesystem.