last executing test programs: 2m29.332128004s ago: executing program 3 (id=792): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000975ece494e857638ddd31d8b58c6f8c5f7e48f6dc0a4f9658c3a0041ef168c8172f82c7e7caed2"], 0x54}}, 0x0) 2m28.99578774s ago: executing program 3 (id=795): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f00000018c0)='./file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1600) 2m28.746008164s ago: executing program 3 (id=798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffb) 2m28.516362917s ago: executing program 3 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fsopen(0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 2m26.332368181s ago: executing program 3 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x208) syz_emit_ethernet(0x96, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2257b4975321cbde2ff4"], 0x0) 2m26.088386025s ago: executing program 3 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) close_range(r1, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0xd8d}, 0x18) 2m25.236409859s ago: executing program 2 (id=827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 2m25.004402663s ago: executing program 2 (id=830): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 2m24.634414208s ago: executing program 2 (id=832): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @val={@val, {0x88a8}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2m24.417378742s ago: executing program 2 (id=834): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x80, 0x0}, 0x8000001) 2m24.279846774s ago: executing program 2 (id=837): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 2m24.158802536s ago: executing program 2 (id=839): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000001c80)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x2881, 0x0, 0x4, 0x1, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x32, 0x3, [{0x1, 0xf, "c4e6d015e0f2fef989e190a1fb"}, {0x0, 0xe, "fb686241a01ce0fcb7134e2b"}, {0x6, 0xd, "8cd66682d1a60c94a23e3c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0xe, [{@multicast1, 0x80000000}, {@local, 0x9}, {@loopback, 0x3}, {@remote, 0x6}, {@multicast1, 0x100}]}, @rr={0x7, 0x1b, 0xa, [@multicast1, @multicast2, @empty, @multicast2, @private=0xa010100, @multicast2]}, @generic={0x86, 0x5, "2bfc17"}, @ssrr={0x89, 0x7, 0xb4, [@dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="c21ddf50", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000740), 0x75, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r10], 0x18, 0xffffffffffffffff) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m10.250418304s ago: executing program 32 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) close_range(r1, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0xd8d}, 0x18) 2m9.120975752s ago: executing program 33 (id=839): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000001c80)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x2881, 0x0, 0x4, 0x1, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x32, 0x3, [{0x1, 0xf, "c4e6d015e0f2fef989e190a1fb"}, {0x0, 0xe, "fb686241a01ce0fcb7134e2b"}, {0x6, 0xd, "8cd66682d1a60c94a23e3c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0xe, [{@multicast1, 0x80000000}, {@local, 0x9}, {@loopback, 0x3}, {@remote, 0x6}, {@multicast1, 0x100}]}, @rr={0x7, 0x1b, 0xa, [@multicast1, @multicast2, @empty, @multicast2, @private=0xa010100, @multicast2]}, @generic={0x86, 0x5, "2bfc17"}, @ssrr={0x89, 0x7, 0xb4, [@dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="c21ddf50", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000740), 0x75, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r10], 0x18, 0xffffffffffffffff) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 19.655890471s ago: executing program 1 (id=1798): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4c000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000180)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 19.514252633s ago: executing program 1 (id=1801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) fspick(0xffffffffffffff9c, 0x0, 0x0) 19.356357766s ago: executing program 1 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX], 0xffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x1070bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8000}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000200}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c790d25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18.152825595s ago: executing program 1 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) 17.860477939s ago: executing program 1 (id=1813): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './bus'}, 0x9) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) epoll_create1(0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) 16.260299854s ago: executing program 1 (id=1820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 13.638044766s ago: executing program 4 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) dup2(r1, r3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 756.100788ms ago: executing program 34 (id=1820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 703.165549ms ago: executing program 4 (id=1836): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) 428.350573ms ago: executing program 4 (id=1839): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, 0x0}, 0x20) 381.527854ms ago: executing program 0 (id=1840): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x8}, 0x8) 297.310815ms ago: executing program 0 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 296.776395ms ago: executing program 4 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 252.746766ms ago: executing program 0 (id=1844): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x42e, &(0x7f0000001980)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './bus'}, 0x9) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 184.298497ms ago: executing program 4 (id=1845): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 166.013657ms ago: executing program 0 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0xfff, 0xc7c4) 93.519158ms ago: executing program 4 (id=1847): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x20000004) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) 41.172509ms ago: executing program 0 (id=1848): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4c000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000180)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=1849): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x8}, 0x8) kernel console output (not intermixed with test programs): or" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528d78d169 code=0x7ffc0000 [ 157.798473][ T5895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.892940][ T27] audit: type=1326 audit(1744225784.088:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528d78d169 code=0x7ffc0000 [ 157.917195][ T27] audit: type=1326 audit(1744225784.088:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f528d78d169 code=0x7ffc0000 [ 157.988586][ T5895] EXT4-fs: error -4 creating inode table initialization thread [ 158.042966][ T5895] EXT4-fs (loop0): mount failed [ 158.077999][ T5942] macvtap0: refused to change device tx_queue_len [ 158.127362][ T5942] random: crng reseeded on system resumption [ 158.829948][ T5960] netlink: 332 bytes leftover after parsing attributes in process `syz.1.541'. [ 160.178582][ T5973] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 160.215846][ T5973] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 162.778225][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 163.092844][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 163.092861][ T27] audit: type=1326 audit(1744225791.448:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.131725][ T27] audit: type=1326 audit(1744225791.448:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.156563][ T27] audit: type=1326 audit(1744225791.448:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.179105][ T27] audit: type=1326 audit(1744225791.448:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.237740][ T27] audit: type=1326 audit(1744225791.448:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.282658][ T27] audit: type=1326 audit(1744225791.448:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.311163][ T27] audit: type=1326 audit(1744225791.448:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.388152][ T27] audit: type=1326 audit(1744225791.448:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.432661][ T6016] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 163.464863][ T27] audit: type=1326 audit(1744225791.448:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 163.522718][ T6019] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 163.797564][ T27] audit: type=1326 audit(1744225791.468:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 164.042907][ T6025] dummy0 speed is unknown, defaulting to 1000 [ 165.533729][ T6031] atomic_op ffff88807b4a5198 conn xmit_atomic 0000000000000000 [ 165.663298][ T6037] loop0: detected capacity change from 0 to 1024 [ 165.706810][ T6037] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.726597][ T6037] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.748303][ T6037] JBD2: no valid journal superblock found [ 165.754382][ T6037] EXT4-fs (loop0): error loading journal [ 167.099084][ T6060] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 167.152536][ T6062] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 167.214260][ T6064] loop2: detected capacity change from 0 to 1024 [ 167.252593][ T6064] EXT4-fs: Ignoring removed nobh option [ 167.275282][ T6064] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.355384][ T6064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.429103][ T6064] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.573: Allocating blocks 385-513 which overlap fs metadata [ 167.522577][ T6064] EXT4-fs (loop2): pa ffff88805490d2a0: logic 16, phys. 129, len 24 [ 167.531157][ T6064] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 167.682671][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 167.696705][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 167.890330][ T6090] dummy0 speed is unknown, defaulting to 1000 [ 168.173462][ T6102] netlink: 'syz.3.588': attribute type 4 has an invalid length. [ 168.219588][ T6102] netlink: 'syz.3.588': attribute type 4 has an invalid length. [ 170.202650][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 171.592832][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 171.592849][ T27] audit: type=1326 audit(1744225799.948:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 171.615553][ C1] sched: RT throttling activated [ 171.735871][ T27] audit: type=1326 audit(1744225799.998:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 171.786011][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 171.948708][ T6143] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 171.973593][ T27] audit: type=1326 audit(1744225799.998:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 172.093554][ T27] audit: type=1326 audit(1744225799.998:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 172.132326][ T6144] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 172.143856][ T27] audit: type=1326 audit(1744225799.998:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 172.260079][ T6151] loop2: detected capacity change from 0 to 1024 [ 172.269231][ T6154] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 172.386345][ T6151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.583449][ T6160] EXT4-fs (loop2): shut down requested (0) [ 172.665091][ T6159] device syzkaller0 entered promiscuous mode [ 172.899402][ T5225] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 173.076392][ T5225] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1204 with error 28 [ 173.421116][ T5225] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.421116][ T5225] [ 173.670216][ T5225] EXT4-fs (loop2): Total free blocks count 0 [ 173.716064][ T5225] EXT4-fs (loop2): Free/Dirty block details [ 173.742658][ T5225] EXT4-fs (loop2): free_blocks=68451041280 [ 173.784932][ T5225] EXT4-fs (loop2): dirty_blocks=1216 [ 173.808777][ T5225] EXT4-fs (loop2): Block reservation details [ 173.814830][ T5225] EXT4-fs (loop2): i_reserved_data_blocks=76 [ 174.304231][ T27] audit: type=1326 audit(1744225802.658:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 174.357786][ T27] audit: type=1326 audit(1744225802.698:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 174.438619][ T27] audit: type=1326 audit(1744225802.698:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 174.482486][ T27] audit: type=1326 audit(1744225802.698:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 174.530042][ T27] audit: type=1326 audit(1744225802.698:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 175.142281][ T6206] loop0: detected capacity change from 0 to 512 [ 175.164470][ T6206] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.187578][ T6206] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 175.225240][ T6206] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 175.247120][ T6206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 175.279878][ T6206] System zones: 0-2, 18-18, 34-34 [ 175.338594][ T6206] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 175.423758][ T6206] EXT4-fs (loop0): 1 truncate cleaned up [ 175.429796][ T6206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.728160][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 176.738166][ T6182] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 176.764292][ T6182] batman_adv: batadv0: Adding interface: team0 [ 176.800582][ T6182] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.843327][ T6182] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 176.854403][ T6184] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 176.868445][ T6184] netlink: 2 bytes leftover after parsing attributes in process `syz.1.610'. [ 176.878485][ T6212] capability: warning: `syz.3.616' uses deprecated v2 capabilities in a way that may be insecure [ 176.884398][ T6184] device team0 entered promiscuous mode [ 176.904415][ T6184] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.913196][ T6184] batman_adv: batadv0: Interface activated: team0 [ 176.925825][ T6184] batman_adv: batadv0: Interface deactivated: team0 [ 176.932515][ T6184] batman_adv: batadv0: Removing interface: team0 [ 176.948270][ T6184] bridge0: port 1(team0) entered blocking state [ 176.954835][ T6184] bridge0: port 1(team0) entered disabled state [ 177.054064][ T6208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.166472][ T6217] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 177.219746][ T6220] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 177.250057][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 178.238339][ T6241] random: crng reseeded on system resumption [ 178.307545][ T6239] macvtap0: refused to change device tx_queue_len [ 178.344318][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 178.502979][ T6245] loop2: detected capacity change from 0 to 164 [ 178.647250][ T6245] netlink: 14 bytes leftover after parsing attributes in process `syz.2.624'. [ 179.548676][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 179.548693][ T27] audit: type=1326 audit(1744225807.908:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.629280][ T27] audit: type=1326 audit(1744225807.908:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.660992][ T27] audit: type=1326 audit(1744225807.908:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.689023][ T27] audit: type=1326 audit(1744225807.908:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.722304][ T27] audit: type=1326 audit(1744225807.908:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.747730][ T27] audit: type=1326 audit(1744225807.908:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.779167][ T27] audit: type=1326 audit(1744225807.948:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.801567][ T27] audit: type=1326 audit(1744225807.948:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.824804][ T27] audit: type=1326 audit(1744225807.948:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.847260][ T27] audit: type=1326 audit(1744225807.948:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 179.871981][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.891260][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.909590][ T6245] bond0 (unregistering): Released all slaves [ 179.924015][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 180.033896][ T6262] loop4: detected capacity change from 0 to 128 [ 180.096760][ T6262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.128566][ T6262] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.137796][ T6271] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 180.174567][ T6267] process 'syz.3.630' launched './file0' with NULL argv: empty string added [ 180.202753][ T6271] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 180.464765][ T6284] device vlan0 entered promiscuous mode [ 180.632608][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 181.477112][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 181.810199][ T6308] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 181.849678][ T6308] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 182.210553][ T6330] loop2: detected capacity change from 0 to 1024 [ 182.269147][ T6330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.534100][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 183.582881][ T6349] loop3: detected capacity change from 0 to 512 [ 183.724851][ T6349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.765899][ T6349] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.870371][ T6349] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.654: corrupted inode contents [ 183.885340][ T6349] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.654: mark_inode_dirty error [ 183.932218][ T6349] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.654: corrupted inode contents [ 183.953055][ T6363] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 184.000469][ T6366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.660'. [ 184.019238][ T6362] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.654: corrupted inode contents [ 184.051553][ T6362] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.654: mark_inode_dirty error [ 184.056420][ T6363] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 184.064856][ T6362] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.654: corrupted inode contents [ 184.113743][ T6362] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.654: mark_inode_dirty error [ 184.161017][ T6362] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.654: corrupted inode contents [ 184.180351][ T6362] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.654: mark_inode_dirty error [ 184.343644][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 184.396897][ T6383] device veth0_macvtap left promiscuous mode [ 184.403256][ T6383] device macvtap0 entered promiscuous mode [ 184.420939][ T6383] device veth0_macvtap entered promiscuous mode [ 184.532558][ T6392] syz.3.667[6392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.532698][ T6392] syz.3.667[6392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.551030][ T6383] team0: Device macvtap0 failed to register rx_handler [ 184.636275][ T6383] device veth0_macvtap left promiscuous mode [ 184.717304][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 184.717321][ T27] audit: type=1326 audit(1744225813.078:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 184.750967][ T6392] netlink: 'syz.3.667': attribute type 21 has an invalid length. [ 184.770004][ T27] audit: type=1326 audit(1744225813.128:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 184.786110][ T6392] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 184.806699][ T27] audit: type=1326 audit(1744225813.148:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41bcb8bad0 code=0x7ffc0000 [ 184.851667][ T27] audit: type=1326 audit(1744225813.148:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41bcb8bad0 code=0x7ffc0000 [ 184.879797][ T6392] netlink: 144 bytes leftover after parsing attributes in process `syz.3.667'. [ 184.986404][ T27] audit: type=1326 audit(1744225813.148:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.008989][ T27] audit: type=1326 audit(1744225813.148:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.033587][ T27] audit: type=1326 audit(1744225813.148:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.087835][ T27] audit: type=1326 audit(1744225813.148:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.172192][ T27] audit: type=1326 audit(1744225813.148:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.735674][ T27] audit: type=1326 audit(1744225813.168:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 185.928327][ T6410] loop4: detected capacity change from 0 to 512 [ 185.946449][ T6413] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 185.972535][ T6410] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.673: casefold flag without casefold feature [ 185.984697][ T6413] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 185.996959][ T6410] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.673: couldn't read orphan inode 15 (err -117) [ 186.045857][ T6410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.416845][ T6432] macvtap0: refused to change device tx_queue_len [ 186.441353][ T6434] loop1: detected capacity change from 0 to 128 [ 186.442217][ T6432] random: crng reseeded on system resumption [ 186.529148][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 187.673055][ T6458] loop1: detected capacity change from 0 to 1024 [ 187.780531][ T6458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.002360][ T6464] EXT4-fs (loop1): shut down requested (0) [ 188.085836][ T4862] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 188.115738][ T4862] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 920 with error 28 [ 188.135213][ T4862] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.135213][ T4862] [ 188.152408][ T4862] EXT4-fs (loop1): Total free blocks count 0 [ 188.160923][ T4862] EXT4-fs (loop1): Free/Dirty block details [ 188.175718][ T4862] EXT4-fs (loop1): free_blocks=68451041280 [ 188.182647][ T6472] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 188.185143][ T4862] EXT4-fs (loop1): dirty_blocks=928 [ 188.196092][ T4862] EXT4-fs (loop1): Block reservation details [ 188.202312][ T4862] EXT4-fs (loop1): i_reserved_data_blocks=58 [ 188.215222][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.234908][ T6473] bridge0: port 3(team0) entered disabled state [ 188.285235][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.315344][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.331825][ T6473] device bridge_slave_0 left promiscuous mode [ 188.340873][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.352375][ T6473] device bridge_slave_1 left promiscuous mode [ 188.360348][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.384158][ T6473] device team_slave_0 left promiscuous mode [ 188.458203][ T6473] team0: Port device team_slave_0 removed [ 188.469547][ T6473] device team_slave_1 left promiscuous mode [ 188.499011][ T6473] team0: Port device team_slave_1 removed [ 188.528120][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.555643][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.574827][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.582591][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.604666][ T6472] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 188.625357][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 188.683485][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 189.012673][ T6497] macvtap0: refused to change device tx_queue_len [ 189.086174][ T6499] random: crng reseeded on system resumption [ 193.053834][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 193.095686][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 193.115795][ T6516] netlink: 268 bytes leftover after parsing attributes in process `syz.1.707'. [ 193.149182][ T6516] unsupported nla_type 65024 [ 193.191452][ T6518] loop3: detected capacity change from 0 to 1024 [ 193.256782][ T6518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 193.266449][ T6525] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 193.313650][ T6525] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 193.347574][ T6526] EXT4-fs (loop3): shut down requested (0) [ 193.423828][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.485744][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1968 with error 28 [ 193.526209][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 193.526209][ T9] [ 193.554942][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 193.569954][ T9] EXT4-fs (loop3): Free/Dirty block details [ 193.589460][ T9] EXT4-fs (loop3): free_blocks=68451041280 [ 193.595344][ T9] EXT4-fs (loop3): dirty_blocks=1968 [ 193.618970][ T9] EXT4-fs (loop3): Block reservation details [ 193.625039][ T9] EXT4-fs (loop3): i_reserved_data_blocks=123 [ 193.634836][ T6534] 9pnet_fd: Insufficient options for proto=fd [ 193.676958][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 193.807596][ T6542] loop4: detected capacity change from 0 to 512 [ 193.829667][ T6542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.888045][ T6544] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.897338][ T6542] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.714: corrupted in-inode xattr [ 193.919134][ T6542] EXT4-fs (loop4): Remounting filesystem read-only [ 193.935944][ T6542] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 193.955223][ T6542] EXT4-fs (loop4): 1 truncate cleaned up [ 193.961120][ T6542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 194.032924][ T6551] loop3: detected capacity change from 0 to 512 [ 194.085423][ T6551] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 194.125494][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 194.156579][ T6551] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 194.204801][ T6560] netlink: 'syz.2.722': attribute type 4 has an invalid length. [ 194.224813][ T6551] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 194.239411][ T6560] netlink: 'syz.2.722': attribute type 4 has an invalid length. [ 194.265953][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268463][ T6551] EXT4-fs (loop3): 1 truncate cleaned up [ 194.272313][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279553][ T6551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.316494][ T6562] netlink: 268 bytes leftover after parsing attributes in process `syz.4.721'. [ 194.376630][ T6564] loop0: detected capacity change from 0 to 164 [ 194.397035][ T6564] Unable to read rock-ridge attributes [ 194.581052][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 194.595927][ T6572] macvtap0: refused to change device tx_queue_len [ 194.612204][ T6572] random: crng reseeded on system resumption [ 194.777053][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 195.025457][ T6581] dummy0 speed is unknown, defaulting to 1000 [ 196.325842][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 196.331917][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 196.338110][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 196.358092][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 196.570343][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 196.576544][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 196.617834][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 196.877205][ T6591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 196.940320][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.730'. [ 196.967435][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.026384][ T6603] netlink: 268 bytes leftover after parsing attributes in process `syz.4.735'. [ 199.867770][ T6636] netlink: 268 bytes leftover after parsing attributes in process `syz.3.749'. [ 199.911231][ T6637] netlink: 'syz.2.743': attribute type 21 has an invalid length. [ 200.057159][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 200.057176][ T27] audit: type=1326 audit(1744225828.418:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.175159][ T27] audit: type=1326 audit(1744225828.468:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.217464][ T27] audit: type=1326 audit(1744225828.468:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.247046][ T27] audit: type=1326 audit(1744225828.468:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.282610][ T27] audit: type=1326 audit(1744225828.468:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.315874][ T27] audit: type=1326 audit(1744225828.478:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.346202][ T27] audit: type=1326 audit(1744225828.478:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.374535][ T27] audit: type=1326 audit(1744225828.478:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.405133][ T27] audit: type=1326 audit(1744225828.478:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.605414][ T6640] loop1: detected capacity change from 0 to 512 [ 200.615574][ T27] audit: type=1326 audit(1744225828.958:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 200.617296][ T6640] ext3: Unknown parameter 'fsname' [ 200.644309][ T6643] loop3: detected capacity change from 0 to 512 [ 200.774745][ T6646] loop0: detected capacity change from 0 to 2048 [ 200.813527][ T6643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.751: bg 0: block 288: padding at end of block bitmap is not set [ 200.846656][ T6646] Alternate GPT is invalid, using primary GPT. [ 200.854446][ T6643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 200.881643][ T6643] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.751: attempt to clear invalid blocks 1024 len 1 [ 200.901845][ T6643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.751: invalid indirect mapped block 1819239214 (level 0) [ 200.924480][ T6643] EXT4-fs (loop3): 1 truncate cleaned up [ 200.930651][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.960566][ T6646] loop0: p2 p3 p7 [ 200.997902][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 201.831514][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 202.159586][ T6670] loop1: detected capacity change from 0 to 128 [ 202.170338][ T6663] device bond2 entered promiscuous mode [ 202.199374][ T6663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.306208][ T6675] syz.1.763: attempt to access beyond end of device [ 202.306208][ T6675] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 203.599482][ T6663] bond2 (unregistering): Released all slaves [ 204.054015][ T6695] loop1: detected capacity change from 0 to 128 [ 204.973792][ T6723] netlink: 'syz.3.785': attribute type 21 has an invalid length. [ 205.655258][ T6739] tipc: Started in network mode [ 205.682346][ T6739] tipc: Node identity ac14140f, cluster identity 4711 [ 205.706622][ T6739] tipc: New replicast peer: 10.1.1.2 [ 205.729390][ T6739] tipc: Enabled bearer , priority 10 [ 205.959106][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 205.959123][ T27] audit: type=1326 audit(1744225834.318:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.041296][ T27] audit: type=1326 audit(1744225834.318:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.112471][ T27] audit: type=1326 audit(1744225834.318:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.154267][ T27] audit: type=1326 audit(1744225834.318:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.184186][ T27] audit: type=1326 audit(1744225834.318:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.222693][ T6732] atomic_op ffff888076bf2198 conn xmit_atomic 0000000000000000 [ 206.232151][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 206.243956][ T27] audit: type=1326 audit(1744225834.318:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.307275][ T27] audit: type=1326 audit(1744225834.318:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.375753][ T27] audit: type=1326 audit(1744225834.318:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.415423][ T27] audit: type=1326 audit(1744225834.318:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.461644][ T27] audit: type=1326 audit(1744225834.318:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bcb8d169 code=0x7ffc0000 [ 206.736485][ T14] tipc: Node number set to 2886997007 [ 208.182744][ T6781] 9pnet: Could not find request transport: f [ 208.201566][ T6786] loop2: detected capacity change from 0 to 1024 [ 208.278344][ T6786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.287044][ T6786] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.563810][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 208.978122][ T6807] device syzkaller0 entered promiscuous mode [ 209.027524][ T6817] atomic_op ffff888054736198 conn xmit_atomic 0000000000000000 [ 209.044452][ T6820] loop2: detected capacity change from 0 to 128 [ 209.171572][ T6820] syz.2.822: attempt to access beyond end of device [ 209.171572][ T6820] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 209.917336][ T6837] loop2: detected capacity change from 0 to 2048 [ 209.983351][ T6837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.213374][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 212.002691][ T6875] loop9: detected capacity change from 0 to 7 [ 212.036382][ T6875] Dev loop9: unable to read RDB block 7 [ 212.042174][ T6875] loop9: unable to read partition table [ 212.056070][ T6875] loop9: partition table beyond EOD, truncated [ 212.062346][ T6875] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 212.062346][ T6875] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 215.121051][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 215.318151][ T6929] loop0: detected capacity change from 0 to 128 [ 215.346467][ T6929] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.394865][ T6929] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.551124][ T4383] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.711653][ T6947] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.888529][ T6955] loop0: detected capacity change from 0 to 512 [ 215.909398][ T6955] EXT4-fs: Ignoring removed bh option [ 215.914907][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.959985][ T6955] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.040796][ T6955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.050097][ T6955] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.074572][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 216.074618][ T27] audit: type=1800 audit(1744225844.428:684): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.867" name="syzkallers" dev="loop0" ino=18 res=0 errno=0 [ 216.165825][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 216.208449][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 216.379077][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 216.663249][ T6986] program syz.0.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.814508][ T6993] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 216.988661][ T6998] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 217.007689][ T6998] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 217.017827][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'. [ 217.046025][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 217.247470][ T7006] device syzkaller0 entered promiscuous mode [ 219.340108][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 219.614393][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 222.191419][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 222.301057][ T7101] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 222.326934][ T7101] bridge0: port 1(team0) entered disabled state [ 222.336651][ T7101] device team0 left promiscuous mode [ 222.342577][ T7101] bridge0: port 1(team0) entered disabled state [ 222.354436][ T7101] batman_adv: batadv0: Adding interface: team0 [ 222.360892][ T7101] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.426044][ T7101] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 222.473801][ T7106] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 222.484513][ T7106] netlink: 2 bytes leftover after parsing attributes in process `syz.1.899'. [ 222.500449][ T7106] device team0 entered promiscuous mode [ 222.509337][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.526980][ T7106] batman_adv: batadv0: Interface activated: team0 [ 222.535242][ T7106] batman_adv: batadv0: Interface deactivated: team0 [ 222.561086][ T7106] batman_adv: batadv0: Removing interface: team0 [ 222.586053][ T27] audit: type=1326 audit(1744225850.948:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.597265][ T7106] bridge0: port 1(team0) entered blocking state [ 222.614492][ T7106] bridge0: port 1(team0) entered disabled state [ 222.623277][ T27] audit: type=1326 audit(1744225850.948:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.655789][ T27] audit: type=1326 audit(1744225850.948:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.695638][ T27] audit: type=1326 audit(1744225850.948:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.755769][ T27] audit: type=1326 audit(1744225850.948:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.779993][ T27] audit: type=1326 audit(1744225850.948:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.829353][ T27] audit: type=1326 audit(1744225850.948:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.858571][ T27] audit: type=1326 audit(1744225850.948:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.888563][ T27] audit: type=1326 audit(1744225850.948:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 222.962433][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 223.052522][ T7125] loop1: detected capacity change from 0 to 512 [ 223.065306][ T7125] EXT4-fs: Ignoring removed oldalloc option [ 223.074420][ T7125] EXT4-fs: Invalid want_extra_isize 1816 [ 223.377444][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 224.871736][ T27] audit: type=1326 audit(1744225853.228:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 225.322252][ T7159] netlink: 'syz.1.922': attribute type 10 has an invalid length. [ 225.366581][ T7159] bridge0: port 1(team0) entered disabled state [ 225.394524][ T7159] device team0 left promiscuous mode [ 225.413447][ T7159] bridge0: port 1(team0) entered disabled state [ 225.440496][ T7159] batman_adv: batadv0: Adding interface: team0 [ 225.460303][ T7159] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.534796][ T7159] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.562058][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 225.817719][ T7168] loop1: detected capacity change from 0 to 512 [ 225.895244][ T7168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.919459][ T7168] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.001827][ T7168] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.925: Failed to acquire dquot type 0 [ 226.102696][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 226.260496][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 226.433610][ T7196] netlink: 348 bytes leftover after parsing attributes in process `syz.0.938'. [ 226.712937][ T7210] loop1: detected capacity change from 0 to 1024 [ 226.739003][ T7210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.888265][ T5225] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 226.903742][ T5225] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1276 with error 28 [ 226.920060][ T5225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 226.920060][ T5225] [ 226.931989][ T5225] EXT4-fs (loop1): Total free blocks count 0 [ 226.940599][ T5225] EXT4-fs (loop1): Free/Dirty block details [ 226.964972][ T5225] EXT4-fs (loop1): free_blocks=68451041280 [ 226.971016][ T5225] EXT4-fs (loop1): dirty_blocks=1280 [ 226.976765][ T5225] EXT4-fs (loop1): Block reservation details [ 226.982875][ T5225] EXT4-fs (loop1): i_reserved_data_blocks=80 [ 227.029857][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 227.113360][ T7224] loop4: detected capacity change from 0 to 760 [ 227.140599][ T7225] netlink: 348 bytes leftover after parsing attributes in process `syz.1.948'. [ 227.269462][ T7231] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 227.285411][ T7231] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 227.293390][ T7231] netlink: 2 bytes leftover after parsing attributes in process `syz.1.954'. [ 227.315838][ T7231] device team0 entered promiscuous mode [ 227.322143][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.345912][ T7231] batman_adv: batadv0: Interface activated: team0 [ 227.352546][ T7231] batman_adv: batadv0: Interface deactivated: team0 [ 227.374363][ T7231] batman_adv: batadv0: Removing interface: team0 [ 227.387273][ T7231] bridge0: port 1(team0) entered blocking state [ 227.396296][ T7231] bridge0: port 1(team0) entered disabled state [ 228.741889][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 228.741907][ T27] audit: type=1326 audit(1744225857.098:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.787276][ T27] audit: type=1326 audit(1744225857.098:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.854202][ T27] audit: type=1326 audit(1744225857.118:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.886756][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 228.920024][ T27] audit: type=1326 audit(1744225857.118:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.931952][ T7256] netlink: 348 bytes leftover after parsing attributes in process `syz.1.963'. [ 228.942873][ T27] audit: type=1326 audit(1744225857.118:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.975270][ T27] audit: type=1326 audit(1744225857.118:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 228.998766][ T27] audit: type=1326 audit(1744225857.118:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 229.021506][ T27] audit: type=1326 audit(1744225857.118:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 229.050493][ T27] audit: type=1326 audit(1744225857.118:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 229.085950][ T27] audit: type=1326 audit(1744225857.118:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 229.112795][ T7260] loop1: detected capacity change from 0 to 128 [ 229.162965][ T7260] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.180974][ T7260] FAT-fs (loop1): Filesystem has been set read-only [ 229.188278][ T7260] syz.1.964: attempt to access beyond end of device [ 229.188278][ T7260] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 229.202392][ T7260] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.210514][ T7260] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 229.228450][ T7260] syz.1.964: attempt to access beyond end of device [ 229.228450][ T7260] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.251808][ T7259] syz.1.964: attempt to access beyond end of device [ 229.251808][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.266175][ T7259] syz.1.964: attempt to access beyond end of device [ 229.266175][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.282179][ T7259] syz.1.964: attempt to access beyond end of device [ 229.282179][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.304670][ T7260] syz.1.964: attempt to access beyond end of device [ 229.304670][ T7260] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.324849][ T7259] syz.1.964: attempt to access beyond end of device [ 229.324849][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.346630][ T7259] syz.1.964: attempt to access beyond end of device [ 229.346630][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.361693][ T7259] syz.1.964: attempt to access beyond end of device [ 229.361693][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 229.375333][ T7259] syz.1.964: attempt to access beyond end of device [ 229.375333][ T7259] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.757246][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.970'. [ 230.848329][ T7285] netlink: 348 bytes leftover after parsing attributes in process `syz.1.972'. [ 231.155119][ T7299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.194714][ T7299] bridge0: port 1(team0) entered disabled state [ 232.121197][ T7320] netlink: 348 bytes leftover after parsing attributes in process `syz.0.984'. [ 232.377406][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 232.594416][ T7338] device syzkaller0 entered promiscuous mode [ 233.947630][ T7358] random: crng reseeded on system resumption [ 235.116277][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 235.116293][ T27] audit: type=1326 audit(1744225863.478:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.4.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 235.126344][ T7357] macvtap0: refused to change device tx_queue_len [ 235.144963][ T27] audit: type=1326 audit(1744225863.478:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.4.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 235.430681][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 235.551427][ T7375] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 8192, id = 0 [ 235.609727][ T27] audit: type=1326 audit(1744225863.968:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.650552][ T27] audit: type=1326 audit(1744225863.968:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.679746][ T27] audit: type=1326 audit(1744225863.968:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.709944][ T27] audit: type=1326 audit(1744225863.968:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.745786][ T27] audit: type=1326 audit(1744225863.968:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.788575][ T27] audit: type=1326 audit(1744225863.968:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.829514][ T7383] device syzkaller0 entered promiscuous mode [ 235.836623][ T27] audit: type=1326 audit(1744225863.968:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 235.862779][ T27] audit: type=1326 audit(1744225863.968:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 236.342422][ T7398] random: crng reseeded on system resumption [ 237.956691][ T7397] macvtap0: refused to change device tx_queue_len [ 238.313989][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 238.456826][ T7422] device bridge0 entered promiscuous mode [ 238.464573][ T7422] bridge0: port 3(macsec1) entered blocking state [ 238.471997][ T7422] bridge0: port 3(macsec1) entered disabled state [ 238.501400][ T7422] device bridge0 left promiscuous mode [ 238.586637][ T7426] macvtap0: refused to change device tx_queue_len [ 238.594301][ T7426] random: crng reseeded on system resumption [ 238.741829][ T7431] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 238.789584][ T7431] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 238.967248][ T7433] loop4: detected capacity change from 0 to 1024 [ 238.995935][ T7433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.084858][ T7441] EXT4-fs (loop4): shut down requested (0) [ 239.212912][ T4606] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 239.242052][ T4606] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1736 with error 28 [ 239.264498][ T4606] EXT4-fs (loop4): This should not happen!! Data will be lost [ 239.264498][ T4606] [ 239.280434][ T4606] EXT4-fs (loop4): Total free blocks count 0 [ 239.287112][ T4606] EXT4-fs (loop4): Free/Dirty block details [ 239.294091][ T4606] EXT4-fs (loop4): free_blocks=68451041280 [ 239.314649][ T4606] EXT4-fs (loop4): dirty_blocks=1744 [ 239.323385][ T4606] EXT4-fs (loop4): Block reservation details [ 239.335919][ T4606] EXT4-fs (loop4): i_reserved_data_blocks=109 [ 239.442176][ T7455] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 239.479251][ T7455] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 240.105786][ T7468] macvtap0: refused to change device tx_queue_len [ 240.129411][ T7468] random: crng reseeded on system resumption [ 240.359713][ T7457] delete_channel: no stack [ 240.635344][ T7478] loop1: detected capacity change from 0 to 1024 [ 240.675850][ T7478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 240.718965][ T7483] netlink: 'syz.0.1040': attribute type 4 has an invalid length. [ 240.770665][ T7484] EXT4-fs (loop1): shut down requested (0) [ 240.839466][ T4877] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 240.848225][ T27] kauditd_printk_skb: 88 callbacks suppressed [ 240.848243][ T27] audit: type=1326 audit(1744225869.208:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 240.868174][ T4877] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1080 with error 28 [ 240.895999][ T4877] EXT4-fs (loop1): This should not happen!! Data will be lost [ 240.895999][ T4877] [ 240.906135][ T27] audit: type=1326 audit(1744225869.248:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 240.930171][ T4877] EXT4-fs (loop1): Total free blocks count 0 [ 240.936582][ T4877] EXT4-fs (loop1): Free/Dirty block details [ 240.942629][ T4877] EXT4-fs (loop1): free_blocks=68451041280 [ 240.948588][ T4877] EXT4-fs (loop1): dirty_blocks=1088 [ 240.954008][ T27] audit: type=1326 audit(1744225869.248:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 240.978464][ T4877] EXT4-fs (loop1): Block reservation details [ 240.984560][ T4877] EXT4-fs (loop1): i_reserved_data_blocks=68 [ 241.001792][ T27] audit: type=1326 audit(1744225869.248:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.035400][ T27] audit: type=1326 audit(1744225869.248:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.103251][ T27] audit: type=1326 audit(1744225869.248:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.135961][ T27] audit: type=1326 audit(1744225869.248:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.164232][ T27] audit: type=1326 audit(1744225869.248:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.177253][ T7494] autofs4:pid:7494:autofs_fill_super: called with bogus options [ 241.200767][ T27] audit: type=1326 audit(1744225869.258:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.229424][ T27] audit: type=1326 audit(1744225869.258:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 241.304238][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1046'. [ 242.026907][ T7509] netlink: 'syz.0.1049': attribute type 4 has an invalid length. [ 242.173954][ T7512] macvtap0: refused to change device tx_queue_len [ 242.184629][ T7512] random: crng reseeded on system resumption [ 242.238492][ T7499] delete_channel: no stack [ 242.264297][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 242.306230][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 242.317373][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.732828][ T7524] loop4: detected capacity change from 0 to 8192 [ 242.787303][ T7524] loop4: p1 p2 p3 p4 [ 242.791440][ T7524] loop4: partition table partially beyond EOD, truncated [ 242.800960][ T7524] loop4: p1 start 67159808 is beyond EOD, truncated [ 242.807843][ T7524] loop4: p2 size 130943 extends beyond EOD, truncated [ 242.815925][ T7524] loop4: p3 start 340266 is beyond EOD, truncated [ 242.822494][ T7524] loop4: p4 size 3599499264 extends beyond EOD, truncated [ 243.484555][ T7539] netlink: 'syz.4.1060': attribute type 4 has an invalid length. [ 243.746419][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 243.921041][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 243.940121][ T7549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.971426][ T7552] macvtap0: refused to change device tx_queue_len [ 243.990607][ T7552] random: crng reseeded on system resumption [ 244.372388][ T7540] delete_channel: no stack [ 245.872221][ T7569] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 245.896361][ T7569] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1069'. [ 245.920191][ T7569] device team0 entered promiscuous mode [ 245.926446][ T7569] device team_slave_0 entered promiscuous mode [ 245.932812][ T7569] device team_slave_1 entered promiscuous mode [ 245.940728][ T7569] bridge0: port 3(team0) entered blocking state [ 245.947332][ T7569] bridge0: port 3(team0) entered disabled state [ 245.955932][ T7569] bridge0: port 3(team0) entered blocking state [ 245.962316][ T7569] bridge0: port 3(team0) entered forwarding state [ 246.688011][ T7574] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 247.592841][ T7585] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1074'. [ 247.909357][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 247.909375][ T27] audit: type=1326 audit(1744225876.268:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 247.988075][ T27] audit: type=1326 audit(1744225876.308:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.061329][ T7593] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 248.069980][ T7593] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1078'. [ 248.076390][ T27] audit: type=1326 audit(1744225876.308:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.086140][ T7593] device team0 entered promiscuous mode [ 248.139302][ T7593] device team_slave_0 entered promiscuous mode [ 248.151449][ T27] audit: type=1326 audit(1744225876.308:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.159893][ T7593] device team_slave_1 entered promiscuous mode [ 248.187752][ T27] audit: type=1326 audit(1744225876.308:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.196060][ T7593] bridge0: port 3(team0) entered blocking state [ 248.216097][ T27] audit: type=1326 audit(1744225876.308:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.244737][ T27] audit: type=1326 audit(1744225876.308:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.267334][ T7593] bridge0: port 3(team0) entered disabled state [ 248.276324][ T7597] netlink: 'syz.4.1079': attribute type 4 has an invalid length. [ 248.280346][ T27] audit: type=1326 audit(1744225876.308:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.314075][ T27] audit: type=1326 audit(1744225876.308:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.381104][ T27] audit: type=1326 audit(1744225876.308:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 248.704602][ T7606] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1083'. [ 250.013701][ T7628] netlink: 'syz.1.1090': attribute type 4 has an invalid length. [ 250.039875][ T7630] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 250.048658][ T7630] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1091'. [ 250.198392][ T7636] loop1: detected capacity change from 0 to 128 [ 250.218914][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.234486][ T7636] FAT-fs (loop1): Filesystem has been set read-only [ 250.242975][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.256023][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.264827][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.278839][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.290271][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.309623][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.321953][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.334441][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.345852][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.354574][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.369164][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.379428][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.392393][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.402525][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.420927][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.430856][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.443975][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.456831][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.474487][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.483272][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.497809][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.509330][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.523427][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.539608][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.549485][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.563879][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.574698][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.589044][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.598843][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.612356][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.634260][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.644501][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.654146][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.663841][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.705736][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.724699][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.755255][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.764234][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.787972][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.820750][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 250.854816][ T7636] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 251.950509][ T7658] netlink: 'syz.0.1100': attribute type 4 has an invalid length. [ 252.163742][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1105'. [ 252.605551][ T7679] netlink: 'syz.0.1110': attribute type 4 has an invalid length. [ 253.329213][ T7697] netlink: 'syz.0.1119': attribute type 4 has an invalid length. [ 253.462226][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1120'. [ 253.712903][ T7710] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1125'. [ 253.954631][ T7716] netlink: 'syz.0.1128': attribute type 4 has an invalid length. [ 254.063287][ T7721] loop4: detected capacity change from 0 to 128 [ 254.072256][ T7721] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.090395][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 254.100104][ T7721] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.160089][ T4606] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.289743][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'. [ 254.615423][ T7736] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1134'. [ 254.910722][ T7732] delete_channel: no stack [ 255.099585][ T7742] netlink: 'syz.1.1137': attribute type 4 has an invalid length. [ 255.123222][ T7744] loop4: detected capacity change from 0 to 128 [ 255.131981][ T7744] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.147376][ T7744] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.214828][ T4867] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.320254][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 255.554521][ T7757] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1143'. [ 255.688539][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695058][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708964][ T7760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.839401][ T7760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.988486][ T7760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.083697][ T7760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.211949][ T7760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.238659][ T7760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.261706][ T7760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.284818][ T7760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.582735][ T7768] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 256.672397][ T7770] loop4: detected capacity change from 0 to 128 [ 256.686493][ T7770] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.690244][ T7762] delete_channel: no stack [ 256.706036][ T7770] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.763640][ T4879] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.935437][ T7781] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1152'. [ 256.951306][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 257.118171][ T7788] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 257.126587][ T7788] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1155'. [ 257.266716][ T7790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.396782][ T7790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.516994][ T7790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.650702][ T7790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.758857][ T7790] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.797820][ T7790] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.818606][ T7790] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.843390][ T7790] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.001973][ T7793] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 258.502976][ T7802] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1162'. [ 258.520633][ T7796] delete_channel: no stack [ 258.738218][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 258.940319][ T7818] netlink: 'syz.0.1166': attribute type 10 has an invalid length. [ 258.949193][ T7818] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1166'. [ 259.058457][ T7821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.078346][ T7823] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 259.167765][ T7821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.258139][ T7821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.304820][ T7830] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1171'. [ 259.358927][ T7821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.431718][ T7821] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.450134][ T7821] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.474807][ T7821] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.500323][ T7821] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.796577][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 260.082202][ T7848] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 260.109468][ T7848] bridge0: port 1(team0) entered blocking state [ 260.141813][ T7848] bridge0: port 1(team0) entered disabled state [ 260.184148][ T7850] netlink: 'syz.4.1177': attribute type 4 has an invalid length. [ 260.236264][ T7831] delete_channel: no stack [ 260.332810][ T7854] loop4: detected capacity change from 0 to 128 [ 260.356568][ T7854] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.391227][ T7854] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.411996][ T7856] __nla_validate_parse: 1 callbacks suppressed [ 260.412019][ T7856] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1180'. [ 260.523611][ T4606] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.628639][ T7860] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.681195][ T7860] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.743386][ T7860] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.820657][ T7860] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.892894][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 262.238778][ T7878] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 262.346166][ T7882] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1189'. [ 263.294027][ T7885] delete_channel: no stack [ 263.638092][ T7895] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 263.646312][ T7895] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1194'. [ 263.811900][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 263.893471][ T7904] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 264.027155][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1199'. [ 265.212349][ T7918] delete_channel: no stack [ 265.226277][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'. [ 265.387412][ T7860] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.404589][ T7860] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.421231][ T7860] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.437333][ T7860] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.459093][ T7931] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 265.669785][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1209'. [ 266.093591][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 266.447945][ T7959] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.530418][ T7959] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.564156][ T7959] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.593988][ T7962] netlink: 'syz.4.1216': attribute type 4 has an invalid length. [ 266.612936][ T7959] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.827756][ T7959] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.849677][ T7959] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.871095][ T7959] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.898885][ T7959] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.916456][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1219'. [ 267.608409][ T7965] delete_channel: no stack [ 267.806468][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 267.935779][ T7988] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 268.458876][ T8007] netlink: 'syz.1.1234': attribute type 4 has an invalid length. [ 269.201114][ T8002] delete_channel: no stack [ 269.369681][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 269.741705][ T8033] netlink: 'syz.0.1243': attribute type 4 has an invalid length. [ 271.439321][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 271.624000][ T8043] delete_channel: no stack [ 272.044388][ T8066] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 275.377048][ T8085] delete_channel: no stack [ 275.402269][ T27] kauditd_printk_skb: 93 callbacks suppressed [ 275.402285][ T27] audit: type=1326 audit(1744225903.758:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.460398][ T27] audit: type=1326 audit(1744225903.798:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.483302][ T27] audit: type=1326 audit(1744225903.798:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.507156][ T27] audit: type=1326 audit(1744225903.798:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.530279][ T27] audit: type=1326 audit(1744225903.798:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.552935][ T27] audit: type=1326 audit(1744225903.798:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.575889][ T27] audit: type=1326 audit(1744225903.798:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 275.782575][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 277.151948][ T27] audit: type=1326 audit(1744225905.508:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 277.186857][ T27] audit: type=1326 audit(1744225905.508:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 277.210672][ T27] audit: type=1326 audit(1744225905.508:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91438d169 code=0x7ffc0000 [ 278.350470][ T8127] delete_channel: no stack [ 278.693447][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 279.492959][ T8142] macvtap0: refused to change device tx_queue_len [ 279.506776][ T8142] random: crng reseeded on system resumption [ 279.871634][ T8145] netlink: 'syz.4.1279': attribute type 4 has an invalid length. [ 280.206024][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 280.490275][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 280.882313][ T8148] delete_channel: no stack [ 281.194662][ T8174] netlink: 'syz.0.1288': attribute type 4 has an invalid length. [ 281.227593][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 281.227610][ T27] audit: type=1326 audit(1744225909.588:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.281144][ T27] audit: type=1326 audit(1744225909.588:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.303686][ T27] audit: type=1326 audit(1744225909.598:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.361453][ T27] audit: type=1326 audit(1744225909.598:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.387799][ T27] audit: type=1326 audit(1744225909.598:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.437448][ T27] audit: type=1326 audit(1744225909.598:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.476911][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 281.527915][ T27] audit: type=1326 audit(1744225909.598:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.552957][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 281.610577][ T27] audit: type=1326 audit(1744225909.598:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.683949][ T27] audit: type=1326 audit(1744225909.598:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.745616][ T27] audit: type=1326 audit(1744225909.598:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 281.972635][ T8204] netlink: 'syz.4.1299': attribute type 4 has an invalid length. [ 282.459652][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 282.624719][ T8195] delete_channel: no stack [ 282.662111][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 282.980835][ T8237] netlink: 'syz.1.1309': attribute type 4 has an invalid length. [ 283.375001][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 283.595273][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 283.665064][ T8264] netlink: 'syz.1.1319': attribute type 4 has an invalid length. [ 284.098900][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 284.299456][ T8282] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 284.325719][ T8282] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1326'. [ 284.453374][ T8289] netlink: 'syz.4.1329': attribute type 4 has an invalid length. [ 284.700337][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 284.993784][ T8279] delete_channel: no stack [ 285.147740][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 285.177321][ T8310] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1335'. [ 285.521130][ T8318] netlink: 'syz.4.1339': attribute type 4 has an invalid length. [ 285.783187][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 285.859032][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1344'. [ 285.929074][ T8335] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1346'. [ 286.017488][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 286.179732][ T8342] netlink: 'syz.0.1349': attribute type 4 has an invalid length. [ 286.399383][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1354'. [ 286.643226][ T8359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.650525][ T8365] 9pnet_fd: Insufficient options for proto=fd [ 286.797585][ T8370] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 287.314455][ T8355] delete_channel: no stack [ 287.932858][ T8386] 9pnet_fd: Insufficient options for proto=fd [ 288.228160][ T8390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.712427][ T8394] netlink: 'syz.4.1370': attribute type 4 has an invalid length. [ 289.071601][ T8407] 9pnet_fd: Insufficient options for proto=fd [ 289.674864][ T8422] __nla_validate_parse: 10 callbacks suppressed [ 289.674888][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 289.883441][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'. [ 289.922780][ T8426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.106054][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1385'. [ 290.221673][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 291.056412][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 291.188554][ T8449] macvtap0: refused to change device tx_queue_len [ 291.204190][ T8449] random: crng reseeded on system resumption [ 291.389549][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1394'. [ 291.496520][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 291.627646][ T8461] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 291.635633][ T8461] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1397'. [ 291.873230][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 291.939264][ T8473] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 291.957291][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 291.984062][ T8473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.863447][ T8493] netlink: 'syz.0.1407': attribute type 10 has an invalid length. [ 293.354245][ T8502] netlink: 'syz.0.1410': attribute type 4 has an invalid length. [ 293.935308][ T8523] netlink: 'syz.1.1417': attribute type 10 has an invalid length. [ 293.953761][ T8527] netlink: 'syz.0.1420': attribute type 4 has an invalid length. [ 294.922917][ T8561] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 294.951008][ T8561] __nla_validate_parse: 10 callbacks suppressed [ 294.951032][ T8561] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1429'. [ 295.021818][ T8563] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 295.136045][ T8565] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1431'. [ 295.248760][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'. [ 295.540976][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 295.579102][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 295.965932][ T8595] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 296.076691][ T8597] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1441'. [ 296.225918][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 296.490120][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 296.637698][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 296.915144][ T8625] netlink: 'syz.4.1450': attribute type 4 has an invalid length. [ 297.101757][ T8628] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1451'. [ 297.392018][ T8636] macvtap0: refused to change device tx_queue_len [ 297.405217][ T8636] random: crng reseeded on system resumption [ 298.262522][ T8656] netlink: 'syz.0.1459': attribute type 4 has an invalid length. [ 298.369124][ T8664] netlink: 'syz.1.1462': attribute type 10 has an invalid length. [ 298.390381][ T8664] bridge0: port 1(team0) entered disabled state [ 298.398072][ T8664] device team0 left promiscuous mode [ 298.403585][ T8664] bridge0: port 1(team0) entered disabled state [ 298.412663][ T8664] batman_adv: batadv0: Adding interface: team0 [ 298.419373][ T8664] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.446878][ T8664] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 299.602362][ T8695] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 299.648254][ T8695] bridge0: port 3(team0) entered disabled state [ 299.675179][ T8695] device team0 left promiscuous mode [ 299.680913][ T8695] device team_slave_0 left promiscuous mode [ 299.687269][ T8695] device team_slave_1 left promiscuous mode [ 299.693714][ T8695] bridge0: port 3(team0) entered disabled state [ 299.702370][ T8695] batman_adv: batadv0: Adding interface: team0 [ 299.708882][ T8695] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.740721][ T8695] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 300.076464][ T8711] __nla_validate_parse: 6 callbacks suppressed [ 300.076482][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 300.632333][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 300.656238][ T8727] netlink: 'syz.4.1483': attribute type 10 has an invalid length. [ 300.699024][ T8727] bridge0: port 3(team0) entered disabled state [ 300.721758][ T8727] device team0 left promiscuous mode [ 300.732979][ T8727] device team_slave_0 left promiscuous mode [ 300.739651][ T8727] device team_slave_1 left promiscuous mode [ 300.751856][ T8727] bridge0: port 3(team0) entered disabled state [ 300.760780][ T8727] batman_adv: batadv0: Adding interface: team0 [ 300.773013][ T8727] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 300.793518][ T8727] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 300.947892][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 301.161169][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 301.443371][ T27] kauditd_printk_skb: 162 callbacks suppressed [ 301.443391][ T27] audit: type=1326 audit(1744225929.798:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.505628][ T27] audit: type=1326 audit(1744225929.798:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.512890][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1492'. [ 301.545654][ T27] audit: type=1326 audit(1744225929.828:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.585566][ T27] audit: type=1326 audit(1744225929.828:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.632983][ T27] audit: type=1326 audit(1744225929.828:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.650191][ T8756] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 301.685793][ T27] audit: type=1326 audit(1744225929.828:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.725616][ T27] audit: type=1326 audit(1744225929.828:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.767277][ T27] audit: type=1326 audit(1744225929.828:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.799971][ T27] audit: type=1326 audit(1744225929.828:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 301.871378][ T27] audit: type=1326 audit(1744225929.828:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8750 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 302.185399][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 302.417042][ T8780] netlink: 'syz.4.1502': attribute type 10 has an invalid length. [ 302.512667][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1503'. [ 302.775166][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 303.041530][ T8807] netlink: 'syz.0.1511': attribute type 4 has an invalid length. [ 303.213712][ T8813] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 303.571240][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1518'. [ 303.785700][ T8830] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 304.138304][ T8839] netlink: 'syz.0.1524': attribute type 10 has an invalid length. [ 304.672518][ T8853] netlink: 'syz.0.1530': attribute type 4 has an invalid length. [ 304.688561][ T8853] netlink: 'syz.0.1530': attribute type 4 has an invalid length. [ 305.112839][ T8861] macvtap0: refused to change device tx_queue_len [ 305.142016][ T8861] random: crng reseeded on system resumption [ 305.644359][ T8874] netlink: 'syz.0.1540': attribute type 4 has an invalid length. [ 305.672347][ T8874] netlink: 'syz.0.1540': attribute type 4 has an invalid length. [ 306.244888][ T8895] netlink: 'syz.1.1550': attribute type 4 has an invalid length. [ 306.643382][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 306.781391][ T8914] device bridge0 entered promiscuous mode [ 306.826839][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 307.606179][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 308.401425][ T8947] device bridge0 entered promiscuous mode [ 308.413057][ T8948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.440331][ T8975] loop4: detected capacity change from 0 to 512 [ 309.461596][ T8975] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 309.493960][ T8975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 309.527623][ T8975] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1583: corrupted in-inode xattr [ 309.554220][ T8975] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1583: couldn't read orphan inode 15 (err -117) [ 309.584399][ T8975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 309.765243][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 309.845000][ T8983] validate_nla: 1 callbacks suppressed [ 309.845019][ T8983] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 310.330840][ T9005] loop4: detected capacity change from 0 to 256 [ 310.360892][ T9007] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 310.721582][ T9028] netlink: 'syz.4.1605': attribute type 10 has an invalid length. [ 310.839829][ T9032] loop4: detected capacity change from 0 to 1024 [ 310.889046][ T9032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.010435][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 311.902915][ T9044] delete_channel: no stack [ 311.994278][ T9059] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 312.379728][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1624'. [ 312.532392][ T9083] netlink: 'syz.1.1627': attribute type 10 has an invalid length. [ 313.476283][ T9086] delete_channel: no stack [ 313.816842][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'. [ 314.098459][ T9114] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 314.965163][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1646'. [ 315.181287][ T9124] delete_channel: no stack [ 315.519603][ T9146] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 315.747349][ T9152] macvtap0: refused to change device tx_queue_len [ 315.755398][ T9152] random: crng reseeded on system resumption [ 316.307490][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 317.146647][ T9165] delete_channel: no stack [ 317.155056][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.161585][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.274087][ T9187] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 317.508226][ T9195] hub 2-0:1.0: USB hub found [ 317.513168][ T9195] hub 2-0:1.0: 1 port detected [ 317.799802][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'. [ 317.978432][ T9213] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 318.729425][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1675'. [ 318.848834][ T9214] delete_channel: no stack [ 318.933178][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 319.123402][ T9245] macvtap0: refused to change device tx_queue_len [ 319.131599][ T9245] random: crng reseeded on system resumption [ 319.341060][ T9248] loop4: detected capacity change from 0 to 8192 [ 319.926356][ T9258] loop4: detected capacity change from 0 to 256 [ 320.089750][ T9260] loop1: detected capacity change from 0 to 512 [ 320.114855][ T9260] EXT4-fs (loop1): orphan cleanup on readonly fs [ 320.135292][ T9260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1684: bg 0: block 248: padding at end of block bitmap is not set [ 320.158344][ T9260] __quota_error: 105 callbacks suppressed [ 320.158368][ T9260] Quota error (device loop1): write_blk: dquota write failed [ 320.189111][ T9260] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 320.210027][ T9260] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1684: Failed to acquire dquot type 1 [ 320.224139][ T9260] EXT4-fs (loop1): 1 truncate cleaned up [ 320.249666][ T9260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.266050][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 320.319436][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 320.435163][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 320.558614][ T9281] macvtap0: refused to change device tx_queue_len [ 320.575827][ T9281] random: crng reseeded on system resumption [ 320.608397][ T9283] loop1: detected capacity change from 0 to 8192 [ 321.035094][ T9291] loop1: detected capacity change from 0 to 256 [ 321.438983][ T9284] delete_channel: no stack [ 321.873025][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 322.033782][ T27] audit: type=1326 audit(1744225950.388:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.075650][ T27] audit: type=1326 audit(1744225950.418:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.125606][ T27] audit: type=1326 audit(1744225950.418:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.144901][ T9320] loop4: detected capacity change from 0 to 256 [ 322.148426][ T27] audit: type=1326 audit(1744225950.418:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.177195][ T27] audit: type=1326 audit(1744225950.418:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.210650][ T27] audit: type=1326 audit(1744225950.418:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.263693][ T27] audit: type=1326 audit(1744225950.418:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.308356][ T27] audit: type=1326 audit(1744225950.418:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5318d169 code=0x7ffc0000 [ 322.379911][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1706'. [ 322.608394][ T9335] program syz.1.1711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.749077][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 322.906215][ T9349] loop1: detected capacity change from 0 to 256 [ 323.074387][ T9356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1716'. [ 323.394288][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 323.432326][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 323.509172][ T9338] delete_channel: no stack [ 323.705734][ T9379] xt_hashlimit: size too large, truncated to 1048576 [ 323.713431][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 324.168555][ T9386] macvtap0: refused to change device tx_queue_len [ 324.176121][ T9386] random: crng reseeded on system resumption [ 325.769306][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 325.825156][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 325.835037][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 325.835054][ T27] audit: type=1326 audit(1744225954.188:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 325.950756][ T27] audit: type=1326 audit(1744225954.188:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.034320][ T27] audit: type=1326 audit(1744225954.248:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.072889][ T27] audit: type=1326 audit(1744225954.248:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.097915][ T27] audit: type=1326 audit(1744225954.248:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.120925][ T27] audit: type=1326 audit(1744225954.248:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.143655][ T27] audit: type=1326 audit(1744225954.248:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.166502][ T27] audit: type=1326 audit(1744225954.248:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.207041][ T27] audit: type=1326 audit(1744225954.248:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 326.243492][ T27] audit: type=1326 audit(1744225954.248:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 327.186043][ T9408] delete_channel: no stack [ 327.506670][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1735'. [ 327.907064][ T9420] macvtap0: refused to change device tx_queue_len [ 327.935039][ T9420] random: crng reseeded on system resumption [ 328.268780][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 328.364882][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 328.517761][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 328.588100][ T9438] syz.0.1741 (9438): attempted to duplicate a private mapping with mremap. This is not supported. [ 328.700168][ T9441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.717892][ T9441] team0: Port device bond0 added [ 328.941178][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'. [ 329.433890][ T9437] delete_channel: no stack [ 329.661934][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 329.687395][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 329.826479][ T9460] loop1: detected capacity change from 0 to 256 [ 330.041585][ T9466] macvtap0: refused to change device tx_queue_len [ 330.058689][ T9466] random: crng reseeded on system resumption [ 330.421966][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 330.463275][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1759'. [ 331.136454][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 331.447934][ T9490] delete_channel: no stack [ 331.578169][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 333.155532][ T9547] delete_channel: no stack [ 333.439525][ T9563] __nla_validate_parse: 4 callbacks suppressed [ 333.439546][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'. [ 333.552671][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 333.607909][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 333.641441][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 333.641460][ T27] audit: type=1326 audit(1744225961.998:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.701292][ T27] audit: type=1326 audit(1744225961.998:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.774908][ T27] audit: type=1326 audit(1744225962.038:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.806376][ T27] audit: type=1326 audit(1744225962.038:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.835066][ T27] audit: type=1326 audit(1744225962.038:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.880783][ T9582] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.895237][ T27] audit: type=1326 audit(1744225962.038:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.930347][ T27] audit: type=1326 audit(1744225962.038:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.954674][ T27] audit: type=1326 audit(1744225962.038:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 333.983638][ T27] audit: type=1326 audit(1744225962.038:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 334.019394][ T27] audit: type=1326 audit(1744225962.038:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638d169 code=0x7ffc0000 [ 334.051482][ T9582] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.182348][ T9582] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.253720][ T9582] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.891283][ T9584] delete_channel: no stack [ 335.142422][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1795'. [ 335.256274][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 335.290084][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 335.401621][ T9608] device vlan2 entered promiscuous mode [ 335.407549][ T9608] device dummy0 entered promiscuous mode [ 335.417365][ T9608] device dummy0 left promiscuous mode [ 335.525324][ T9610] macvtap0: refused to change device tx_queue_len [ 335.540857][ T9610] random: crng reseeded on system resumption [ 336.365261][ T9611] delete_channel: no stack [ 336.660765][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 336.798492][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 336.976926][ T9633] loop1: detected capacity change from 0 to 512 [ 336.984221][ T9633] EXT4-fs: inline encryption not supported [ 337.001259][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'. [ 337.005766][ T9633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 337.058638][ T9633] EXT4-fs (loop1): 1 truncate cleaned up [ 337.064363][ T9633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.145794][ T9633] loop1: detected capacity change from 512 to 0 [ 337.170467][ C1] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 337.180271][ T9633] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.1813: unable to read itable block [ 337.193890][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 337.205836][ T4392] loop: Write error at byte offset 9223372036854776831, length 1024. [ 337.217320][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.226903][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.237223][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 337.245545][ T9633] EXT4-fs (loop1): I/O error while writing superblock [ 337.253539][ T9633] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: IO failure [ 337.263825][ T5539] loop: Write error at byte offset 9223372036854776831, length 1024. [ 337.278890][ T9648] macvtap0: refused to change device tx_queue_len [ 337.285569][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.289897][ T9648] random: crng reseeded on system resumption [ 337.295062][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.310608][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 337.319057][ T9633] EXT4-fs (loop1): I/O error while writing superblock [ 337.335558][ T9633] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #18: comm syz.1.1813: mark_inode_dirty error [ 337.355779][ T4392] loop: Write error at byte offset 9223372036854776831, length 1024. [ 337.363997][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.373577][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 337.383084][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 337.391604][ T9633] EXT4-fs (loop1): I/O error while writing superblock [ 337.517966][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 337.532336][ C1] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 337.561654][ T9633] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.1813: unable to read itable block [ 337.593108][ T9653] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.1813: unable to read itable block [ 337.622860][ T7301] loop: Write error at byte offset 9223372036854776831, length 1024. [ 337.640547][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 337.765871][ T9633] EXT4-fs (loop1): I/O error while writing superblock [ 337.778192][ T9653] EXT4-fs (loop1): previous I/O error to superblock detected [ 337.872868][ T9633] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: IO failure [ 337.937564][ T5539] loop: Write error at byte offset 9223372036854776831, length 1024. [ 337.958231][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 337.966992][ T9653] EXT4-fs (loop1): I/O error while writing superblock [ 338.009940][ T9633] EXT4-fs (loop1): previous I/O error to superblock detected [ 338.061622][ T9653] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: IO failure [ 338.118474][ T5533] loop: Write error at byte offset 9223372036854776831, length 1024. [ 338.143534][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 338.152260][ T9633] EXT4-fs (loop1): I/O error while writing superblock [ 338.184707][ T9653] EXT4-fs (loop1): previous I/O error to superblock detected [ 338.231867][ T9651] delete_channel: no stack [ 338.248432][ T9633] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #18: comm syz.1.1813: mark_inode_dirty error [ 338.278512][ T4866] loop: Write error at byte offset 9223372036854776831, length 1024. [ 338.292715][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 338.301216][ T9653] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #18: comm syz.1.1813: mark_inode_dirty error [ 338.355598][ T4866] loop: Write error at byte offset 9223372036854776831, length 1024. [ 338.385658][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 338.401927][ T4866] loop: Write error at byte offset 9223372036854776831, length 1024. [ 338.413206][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 338.422999][ T9653] EXT4-fs error (device loop1): ext4_check_bdev_write_error:218: comm syz.1.1813: Error while async write back metadata [ 338.444451][ T4866] loop: Write error at byte offset 9223372036854776831, length 1024. [ 338.452991][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 338.527157][ T4251] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 338.591433][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 338.794563][ T9663] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.828653][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 338.861715][ T9663] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.921155][ T9663] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.961007][ T9663] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.114457][ T9663] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.130594][ T9663] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.143763][ T9663] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.157803][ T9663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.701872][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 341.130311][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 341.227106][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1834'. [ 354.122694][ T9700] loop4: detected capacity change from 0 to 512 [ 354.197674][ T9700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.221363][ T9700] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.412886][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 354.416727][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 354.784797][ T9730] loop4: detected capacity change from 0 to 256 [ 354.786390][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 354.822404][ T9730] FAT-fs (loop4): unable to read block(4294967296) for building NFS inode [ 356.165668][ T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 356.173312][ T28] Not tainted 6.1.133-syzkaller #0 [ 356.179273][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.188225][ T28] task:kworker/1:0 state:D stack:25208 pid:22 ppid:2 flags:0x00004000 [ 356.197563][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 356.204304][ T28] Call Trace: [ 356.207671][ T28] [ 356.210633][ T28] __schedule+0x143f/0x4570 [ 356.215185][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 356.221511][ T28] ? print_irqtrace_events+0x210/0x210 [ 356.227223][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 356.232460][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 356.237735][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 356.242978][ T28] schedule+0xbf/0x180 [ 356.247439][ T28] schedule_preempt_disabled+0xf/0x20 [ 356.252888][ T28] __mutex_lock+0x6b9/0xd80 [ 356.257461][ T28] ? __mutex_lock+0x53c/0xd80 [ 356.262169][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 356.269263][ T28] ? mutex_lock_nested+0x10/0x10 [ 356.274257][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 356.280359][ T28] ? print_irqtrace_events+0x210/0x210 [ 356.285951][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 356.292068][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 356.297360][ T28] ? process_one_work+0x806/0x1260 [ 356.302521][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 356.308656][ T28] ? process_one_work+0x806/0x1260 [ 356.313787][ T28] process_one_work+0x917/0x1260 [ 356.318816][ T28] ? worker_detach_from_pool+0x260/0x260 [ 356.324511][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 356.330389][ T28] ? kthread_data+0x4e/0xc0 [ 356.334943][ T28] ? wq_worker_running+0x97/0x190 [ 356.340155][ T28] worker_thread+0xa47/0x1200 [ 356.344873][ T28] kthread+0x28d/0x320 [ 356.349034][ T28] ? worker_clr_flags+0x190/0x190 [ 356.354089][ T28] ? kthread_blkcg+0xd0/0xd0 [ 356.358734][ T28] ret_from_fork+0x1f/0x30 [ 356.363179][ T28] [ 356.366444][ T28] [ 356.366444][ T28] Showing all locks held in the system: [ 356.374218][ T28] 1 lock held by rcu_tasks_kthre/12: [ 356.379581][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 356.390143][ T28] 1 lock held by rcu_tasks_trace/13: [ 356.395430][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 356.406635][ T28] 3 locks held by kworker/1:0/22: [ 356.411668][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 356.422222][ T28] #1: ffffc900001c7d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 356.435245][ T28] #2: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 356.446869][ T28] 1 lock held by khungtaskd/28: [ 356.451730][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 356.461697][ T28] 2 locks held by getty/4003: [ 356.466433][ T28] #0: ffff88814d3f0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 356.476271][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 356.486701][ T28] 1 lock held by syz-executor/4251: [ 356.491921][ T28] #0: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 356.502173][ T28] 1 lock held by syz-executor/4266: [ 356.507457][ T28] #0: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 356.517692][ T28] 2 locks held by kworker/u4:16/4392: [ 356.523102][ T28] #0: ffff8880b8f3a998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 356.533135][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x383/0x790 [ 356.544606][ T28] 2 locks held by syz.3.819/6807: [ 356.549699][ T28] #0: ffff888030f8c100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 356.559652][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 356.569982][ T28] 2 locks held by syz.2.839/6863: [ 356.575038][ T28] #0: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 356.585255][ T28] #1: ffff888030f8c100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 356.595007][ T28] 2 locks held by syz-executor/7161: [ 356.600348][ T28] #0: ffff8880754f6918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.610499][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.620480][ T28] 2 locks held by syz-executor/7176: [ 356.625839][ T28] #0: ffff8880754c3118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.635971][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.646061][ T28] 2 locks held by syz-executor/8312: [ 356.651375][ T28] #0: ffff888079196118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.661474][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.671717][ T28] 2 locks held by syz-executor/8347: [ 356.677053][ T28] #0: ffff88807be04918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.687175][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.697253][ T28] 2 locks held by syz-executor/9695: [ 356.702563][ T28] #0: ffff888077beb118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.712693][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.722698][ T28] 2 locks held by syz-executor/9697: [ 356.728632][ T28] #0: ffff888076bf0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.738785][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.748846][ T28] 2 locks held by syz-executor/9710: [ 356.754149][ T28] #0: ffff888079149118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 356.764242][ T28] #1: ffffffff8e812c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 356.774371][ T28] [ 356.776917][ T28] ============================================= [ 356.776917][ T28] [ 356.785371][ T28] NMI backtrace for cpu 0 [ 356.789710][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 356.797611][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 356.807706][ T28] Call Trace: [ 356.811002][ T28] [ 356.813939][ T28] dump_stack_lvl+0x1e3/0x2cb [ 356.818663][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 356.824187][ T28] ? panic+0x764/0x764 [ 356.828292][ T28] ? vprintk_emit+0x622/0x740 [ 356.833002][ T28] ? printk_sprint+0x490/0x490 [ 356.837789][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 356.842920][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 356.847898][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 356.854066][ T28] ? _printk+0xd1/0x111 [ 356.858233][ T28] ? panic+0x764/0x764 [ 356.862312][ T28] ? __wake_up_klogd+0xcc/0x100 [ 356.867292][ T28] ? panic+0x764/0x764 [ 356.871368][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 356.877448][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 356.883436][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 356.889519][ T28] watchdog+0xf88/0xfd0 [ 356.893699][ T28] ? watchdog+0x1f8/0xfd0 [ 356.898048][ T28] kthread+0x28d/0x320 [ 356.902125][ T28] ? hungtask_pm_notify+0x50/0x50 [ 356.907164][ T28] ? kthread_blkcg+0xd0/0xd0 [ 356.911764][ T28] ret_from_fork+0x1f/0x30 [ 356.916207][ T28] [ 356.919620][ T28] Sending NMI from CPU 0 to CPUs 1: [ 356.924902][ C1] NMI backtrace for cpu 1 [ 356.924916][ C1] CPU: 1 PID: 4238 Comm: syz-executor Not tainted 6.1.133-syzkaller #0 [ 356.924934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 356.924944][ C1] RIP: 0010:memset+0x1f/0x40 [ 356.924971][ C1] Code: 24 ba 01 00 00 00 e9 c0 ec ff ff 55 41 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 a1 ec ff ff <84> c0 74 12 48 89 ef 44 89 f6 48 89 da 5b 41 5e 5d e9 1b 69 cd 08 [ 356.924986][ C1] RSP: 0018:ffffc90003db7940 EFLAGS: 00000256 [ 356.925002][ C1] RAX: 0000000000000001 RBX: 0000000000000030 RCX: ffffffff892fbda7 [ 356.925015][ C1] RDX: 0000000000000001 RSI: 0000000000000030 RDI: ffffc90003db79f0 [ 356.925026][ C1] RBP: ffffc90003db79f0 R08: dffffc0000000000 R09: fffff520007b6f44 [ 356.925040][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000040 [ 356.925051][ C1] R13: ffffc90003db79f0 R14: 0000000000000000 R15: 1ffff920007b6f3c [ 356.925064][ C1] FS: 000055558cff6500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 356.925079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.925092][ C1] CR2: 00007fa914579178 CR3: 000000007d6c4000 CR4: 00000000003506e0 [ 356.925107][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.925117][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.925128][ C1] Call Trace: [ 356.925134][ C1] [ 356.925141][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 356.925160][ C1] ? read_lock_is_recursive+0x10/0x10 [ 356.925188][ C1] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 356.925207][ C1] ? nmi_handle+0x25/0x440 [ 356.925241][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 356.925258][ C1] ? nmi_handle+0x12e/0x440 [ 356.925284][ C1] ? nmi_handle+0x25/0x440 [ 356.925309][ C1] ? memset+0x1f/0x40 [ 356.925329][ C1] ? default_do_nmi+0x62/0x150 [ 356.925348][ C1] ? exc_nmi+0xa8/0x100 [ 356.925365][ C1] ? end_repeat_nmi+0x16/0x31 [ 356.925391][ C1] ? tcp_recvmsg+0xc7/0x920 [ 356.925416][ C1] ? memset+0x1f/0x40 [ 356.925441][ C1] ? memset+0x1f/0x40 [ 356.925463][ C1] ? memset+0x1f/0x40 [ 356.925485][ C1] [ 356.925491][ C1] [ 356.925498][ C1] tcp_recvmsg+0xc7/0x920 [ 356.925526][ C1] ? mark_lock+0x9a/0x340 [ 356.925541][ C1] ? tcp_recv_timestamp+0x710/0x710 [ 356.925567][ C1] ? aa_sk_perm+0x92d/0xa60 [ 356.925590][ C1] ? sock_rps_record_flow+0x1a/0x3f0 [ 356.925610][ C1] ? inet_recvmsg+0xda/0x250 [ 356.925631][ C1] inet_recvmsg+0x13b/0x250 [ 356.925654][ C1] ? inet_sendpage+0x360/0x360 [ 356.925675][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 356.925700][ C1] ? security_socket_recvmsg+0x86/0xb0 [ 356.925727][ C1] ? inet_sendpage+0x360/0x360 [ 356.925748][ C1] sock_read_iter+0x3b2/0x4b0 [ 356.925772][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 356.925798][ C1] ? common_file_perm+0x17d/0x1d0 [ 356.925819][ C1] vfs_read+0x88d/0xbf0 [ 356.925842][ C1] ? kernel_read+0x1f0/0x1f0 [ 356.925862][ C1] ? __rseq_handle_notify_resume+0x3b7/0x1500 [ 356.925901][ C1] ? __fdget_pos+0x1db/0x360 [ 356.925922][ C1] ksys_read+0x19c/0x2c0 [ 356.925940][ C1] ? print_irqtrace_events+0x210/0x210 [ 356.925967][ C1] ? vfs_write+0xbc0/0xbc0 [ 356.925986][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 356.926008][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 356.926029][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 356.926053][ C1] do_syscall_64+0x3b/0xb0 [ 356.926068][ C1] ? clear_bhb_loop+0x45/0xa0 [ 356.926090][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.926111][ C1] RIP: 0033:0x7f65b678bb3d [ 356.926133][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 01 1a 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 356.926147][ C1] RSP: 002b:00007ffd54c53ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.926165][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65b678bb3d [ 356.926176][ C1] RDX: 0000000000000004 RSI: 00007ffd54c53cbc RDI: 0000000000000003 [ 356.926187][ C1] RBP: 0000000000000000 R08: 00007ffd54d640b0 R09: 0000000000000010 [ 356.926198][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd54c540d0 [ 356.926209][ C1] R13: 0000000000000004 R14: 00007ffd54c53cbc R15: 00007ffd54c53d50 [ 356.926228][ C1] [ 356.935559][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 356.935577][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 356.935601][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 356.935615][ T28] Call Trace: [ 356.935625][ T28] [ 356.935634][ T28] dump_stack_lvl+0x1e3/0x2cb [ 356.935673][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 356.935697][ T28] ? panic+0x764/0x764 [ 356.935724][ T28] ? llist_add_batch+0x160/0x1d0 [ 356.935754][ T28] ? vscnprintf+0x59/0x80 [ 356.935785][ T28] panic+0x318/0x764 [ 356.935813][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 356.935839][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 356.935869][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 356.935904][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 356.935927][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 356.935955][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 356.935978][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 356.936007][ T28] watchdog+0xfc7/0xfd0 [ 356.936044][ T28] ? watchdog+0x1f8/0xfd0 [ 356.936080][ T28] kthread+0x28d/0x320 [ 356.936100][ T28] ? hungtask_pm_notify+0x50/0x50 [ 356.936131][ T28] ? kthread_blkcg+0xd0/0xd0 [ 356.936155][ T28] ret_from_fork+0x1f/0x30 [ 356.936199][ T28] [ 356.939141][ T28] Kernel Offset: disabled [ 357.482646][ T28] Rebooting in 86400 seconds..