last executing test programs: 3m11.094710829s ago: executing program 2 (id=1393): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="08002bbd7000fddbdf2502000000080002000200000052474d2304cef72da39a1d95996550e0832deda87cf98aa7b5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf011}, {0x0}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) capget(&(0x7f0000000640)={0x20071026, r2}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000f000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r5, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x63, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd39, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0xfff3}, {0x0, 0xe}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xe, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m10.037766622s ago: executing program 2 (id=1397): syz_emit_ethernet(0x25d, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x227, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91"}}}}}, 0x0) 3m9.617046641s ago: executing program 2 (id=1399): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000001180)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00009d5000/0x1000)=nil, 0x1, 0x0, 0x0, 0x3ee, 0x61, 0x0, 0x0, 0x6e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0xdc}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x9c940000, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, 0x0, 0x0, 0x0) 3m8.305835089s ago: executing program 2 (id=1414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x8, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x2, 0x78c6, 0xc, 0x9, 0xfff9, 0x3f, 0x8, 0x1, 0x7ff, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x202, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x404000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="02a9c23897693d0a", 0x8}], 0x1}}], 0x1, 0x24005805) 3m8.136692722s ago: executing program 2 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c", 0x29}, {&(0x7f0000000740)="0b0080ad43500165c1a6e6992572f946ddbcbf1a194568d16da1fe2a5a3001ba961c170963f2427f6894d8c48932dfb1c3f46e10d339563b8153c669804b8fdcee89a0b339e2d57b9af56b4a3b0700019de8ae1bb37515be26dc2dbf7d4242a69b00cc7181680a13abc24aab95647d11eaccf1f16d1b8c094f2455a99526b2d5b9a4d1a99946dfdc2252cddc59f3c00dd2a7afce184f6ae774d023a68f84e2e7f5e7094be60a4c451e8b868a074d3ecf6b1493", 0xb3}], 0x2}, 0x30008b08) 3m7.273089941s ago: executing program 2 (id=1411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffffd, 'syz0\x00', {0xfffffffffffffffb}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) 2m52.087115366s ago: executing program 32 (id=1411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffffd, 'syz0\x00', {0xfffffffffffffffb}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) 1m58.669287376s ago: executing program 3 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c", 0x29}, {&(0x7f0000000740)="0b0080ad43500165c1a6e6992572f946ddbcbf1a194568d16da1fe2a5a3001ba961c170963f2427f6894d8c48932dfb1c3f46e10d339563b8153c669804b8fdcee89a0b339e2d57b9af56b4a3b0700019de8ae1bb37515be26dc2dbf7d4242a69b00cc7181680a13abc24aab95647d11eaccf1f16d1b8c094f2455a99526b2d5b9a4d1a99946dfdc2252cddc59f3c00dd2a7afce184f6ae774d023a68f84e2e7f5e7094be60a4c451e8b868a074d3ecf6b1493", 0xb3}], 0x2}, 0x30008b08) 1m55.993912313s ago: executing program 3 (id=1669): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket(0x2b, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$cgroup_subtree(r2, &(0x7f0000002140)=ANY=[], 0xe) 1m55.153653751s ago: executing program 3 (id=1672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x9, 0x5}}}}]}, 0x44}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m50.879919592s ago: executing program 3 (id=1684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x4005) 1m48.906116244s ago: executing program 3 (id=1696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x8, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x2, 0x78c6, 0xc, 0x9, 0xfff9, 0x3f, 0x8, 0x1, 0x7ff, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x202, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x404000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="02a9c23897693d0a", 0x8}], 0x1}}], 0x1, 0x24005805) 1m43.317910804s ago: executing program 3 (id=1708): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1m27.510026821s ago: executing program 33 (id=1708): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 7.210709765s ago: executing program 1 (id=2051): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001800006d46c000000ac1414bb0000000000000000000000000000000000000000920100000000000006000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$devlink(0x0, r1) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @remote}, @ib={0x1b, 0x400, 0xc, {"9804b66279aea6ff00000000000000ae"}, 0xcc, 0xc98, 0x7}}}, 0x118) 6.940027051s ago: executing program 5 (id=2055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555550101}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 6.806105184s ago: executing program 1 (id=2056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f4000000", 0x29}], 0x1}, 0x4005) 6.694011647s ago: executing program 5 (id=2058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 6.638868328s ago: executing program 4 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a010200000000000000000200"], 0x20}}, 0x4000000) 6.636962148s ago: executing program 6 (id=2060): r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x50) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 5.538015292s ago: executing program 4 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000000060002408809000014000480060007400000000608000640000000090500030006"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 4.909509475s ago: executing program 5 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 4.558706832s ago: executing program 0 (id=2064): r0 = socket$netlink(0x10, 0x3, 0xc) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x78) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 4.556879992s ago: executing program 1 (id=2065): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="2000000000000000840000000200000004024100"], 0x20, 0x4048800}, 0x40440d0) 3.665889631s ago: executing program 4 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001800006d46c000000ac1414bb0000000000000000000000000000000000000000920100000000000006000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$devlink(0x0, r1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @remote}, @ib={0x1b, 0x400, 0xc, {"9804b66279aea6ff00000000000000ae"}, 0xcc, 0xc98, 0x7}}}, 0x118) 3.512637795s ago: executing program 5 (id=2067): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 3.505263375s ago: executing program 6 (id=2068): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0xffe0, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) 3.461910916s ago: executing program 0 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c", 0x29}, {&(0x7f0000000740)="0b0080ad43500165c1a6e6992572f946ddbcbf1a194568d16da1fe2a5a3001ba961c170963f2427f6894d8c48932dfb1c3f46e10d339563b8153c669804b8fdcee89a0b339e2d57b9af56b4a3b0700019de8ae1bb37515be26dc2dbf7d4242a69b00cc7181680a13abc24aab95647d11eaccf1f16d1b8c094f2455a99526b2d5b9a4d1a99946dfdc2252cddc59f3c00dd2a7afce184f6ae774d023a68f84e2e7f5e7094be60a4c451e8b868a074d3ecf6b1493", 0xb3}], 0x2}, 0x30008b08) 3.423989727s ago: executing program 6 (id=2070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x8, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x49bd, 0xffff, 0x5, 0x6, 0xf711, 0xff81, 0x0, 0x7092, 0x6, 0x0, 0x2, 0x5, 0x2, 0x78c6, 0xc, 0x9, 0xfff9, 0x3f, 0x8, 0x1, 0x7ff, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x202, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4], 0x56e}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x404000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x24005805) 3.337350918s ago: executing program 4 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x9, 0x5}}}}]}, 0x44}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.205322561s ago: executing program 0 (id=2072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.072404914s ago: executing program 0 (id=2073): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008686", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7d}, 0x3f) 3.035681805s ago: executing program 0 (id=2074): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="08002bbd7000fddbdf2502000000080002000200000052474d2304cef72da39a1d95996550e0832deda87cf98aa7b5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf011}, {0x0}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) capget(&(0x7f0000000640)={0x20071026, r2}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000f000000b7080000000000007baaf8ff00000000b5080000000000007b8a", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r5, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x63, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd39, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0xfff3}, {0x0, 0xe}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xe, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.965870726s ago: executing program 1 (id=2075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x4005) 2.964368946s ago: executing program 6 (id=2076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, 0x0}, 0x0) 2.114506185s ago: executing program 4 (id=2077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 2.100300854s ago: executing program 0 (id=2078): r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x50) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.030349076s ago: executing program 6 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}}, 0x40000) 1.83390771s ago: executing program 1 (id=2080): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, &(0x7f0000000280)='1', 0x1) 1.686350934s ago: executing program 5 (id=2081): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001800006d46c000000ac1414bb0000000000000000000000000000000000000000920100000000000006000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$devlink(0x0, r1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @remote}, @ib={0x1b, 0x400, 0xc, {"9804b66279aea6ff00000000000000ae"}, 0xcc, 0xc98, 0x7}}}, 0x118) 1.215457244s ago: executing program 4 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c", 0x29}, {&(0x7f0000000740)="0b0080ad43500165c1a6e6992572f946ddbcbf1a194568d16da1fe2a5a3001ba961c170963f2427f6894d8c48932dfb1c3f46e10d339563b8153c669804b8fdcee89a0b339e2d57b9af56b4a3b0700019de8ae1bb37515be26dc2dbf7d4242a69b00cc7181680a13abc24aab95647d11eaccf1f16d1b8c094f2455a99526b2d5b9a4d1a99946dfdc2252cddc59f3c00dd2a7afce184f6ae774d023a68f84e2e7f5e7094be60a4c451e8b868a074d3ecf6b1493", 0xb3}], 0x2}, 0x30008b08) 1.037892557s ago: executing program 6 (id=2083): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x40801) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x4004) close(r0) write(0xffffffffffffffff, 0x0, 0x0) 172.154816ms ago: executing program 5 (id=2084): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4603080a02fc0000000000000002000600fdfffd7ea301000038000000c5020000ffffff7f0d00200001000500080008000000000003000000db66264c0d000000090000000002"], 0x58) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=2085): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.753'. [ 224.784013][ T6627] device syzkaller0 entered promiscuous mode [ 225.549106][ T6642] loop4: detected capacity change from 0 to 128 [ 225.717406][ T6642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.729389][ T6640] loop1: detected capacity change from 0 to 1024 [ 225.788166][ T6642] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.865601][ T6640] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,auto_da_alloc,lazytime,nogrpid,dioread_lock,norecovery,,errors=continue. Quota mode: none. [ 227.088874][ T6655] fuse: Unknown parameter 'grou00000000000000000000' [ 227.252659][ T6659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.765'. [ 228.499003][ T6690] fuse: Unknown parameter 'grou00000000000000000000' [ 230.011859][ T6709] device syzkaller0 entered promiscuous mode [ 230.027876][ T6711] loop0: detected capacity change from 0 to 1024 [ 230.064637][ T6712] netlink: 80 bytes leftover after parsing attributes in process `syz.3.780'. [ 231.113216][ T6711] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,auto_da_alloc,lazytime,nogrpid,dioread_lock,norecovery,,errors=continue. Quota mode: none. [ 231.135854][ T6727] loop2: detected capacity change from 0 to 512 [ 231.218646][ T6727] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 231.278350][ T6731] netlink: 72 bytes leftover after parsing attributes in process `syz.3.786'. [ 231.349453][ T6727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.785: bg 0: block 4: invalid block bitmap [ 231.482373][ T6727] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 231.519566][ T6727] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.785: invalid indirect mapped block 1 (level 1) [ 231.582962][ T6735] fuse: Unknown parameter 'group_i00000000000000000000' [ 231.608935][ T6727] EXT4-fs (loop2): 1 truncate cleaned up [ 231.642363][ T6727] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.950934][ T6770] loop0: detected capacity change from 0 to 512 [ 234.123802][ T6774] tipc: Enabling of bearer rejected, failed to enable media [ 234.205482][ T6770] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.332914][ T6782] netlink: 80 bytes leftover after parsing attributes in process `syz.3.796'. [ 234.412218][ T6770] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.793: inode has both inline data and extents flags [ 234.527881][ T6770] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.793: couldn't read orphan inode 17 (err -117) [ 234.861221][ T6770] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.273188][ T6795] fuse: Unknown parameter 'group_i00000000000000000000' [ 235.536706][ T6805] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.805'. [ 235.613748][ T6812] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.805'. [ 238.163283][ T6840] tipc: Enabled bearer , priority 0 [ 238.176467][ T6840] tipc: Resetting bearer [ 238.323738][ T6839] tipc: Disabling bearer [ 238.505788][ T6847] fuse: Unknown parameter 'group_i00000000000000000000' [ 238.527143][ T6848] netlink: 80 bytes leftover after parsing attributes in process `syz.0.813'. [ 239.969459][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 240.303642][ T6863] loop1: detected capacity change from 0 to 512 [ 241.272574][ T6863] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.416747][ T6863] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.819: inode has both inline data and extents flags [ 241.490300][ T6863] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.819: couldn't read orphan inode 17 (err -117) [ 242.348614][ T6863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.573824][ T6883] loop3: detected capacity change from 0 to 128 [ 242.703721][ T6883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.776676][ T6883] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.839443][ T6887] fuse: Unknown parameter 'group_id00000000000000000000' [ 243.938324][ T6899] netlink: 72 bytes leftover after parsing attributes in process `syz.0.832'. [ 244.100751][ T6904] netlink: 80 bytes leftover after parsing attributes in process `syz.1.833'. [ 244.122416][ T6899] netlink: 23 bytes leftover after parsing attributes in process `syz.0.832'. [ 244.367271][ T6899] netlink: 23 bytes leftover after parsing attributes in process `syz.0.832'. [ 246.077210][ T6931] netlink: 56 bytes leftover after parsing attributes in process `syz.4.842'. [ 246.153277][ T6932] fuse: Unknown parameter 'group_id00000000000000000000' [ 246.191463][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 247.161950][ T6950] netlink: 80 bytes leftover after parsing attributes in process `syz.2.847'. [ 250.012820][ T6986] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.200725][ T6990] device syzkaller0 entered promiscuous mode [ 250.257987][ T6990] tipc: Enabled bearer , priority 0 [ 250.336639][ T6989] tipc: Resetting bearer [ 250.714305][ T6989] tipc: Disabling bearer [ 251.468567][ T7009] netlink: 80 bytes leftover after parsing attributes in process `syz.1.867'. [ 251.518963][ T1109] tipc: Node number set to 2991027399 [ 253.647946][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 253.687599][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 254.005397][ T7027] fuse: Bad value for 'user_id' [ 255.803470][ T7042] netlink: 80 bytes leftover after parsing attributes in process `syz.1.879'. [ 255.832848][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839231][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.729481][ T7050] netlink: 104 bytes leftover after parsing attributes in process `syz.4.881'. [ 257.432752][ T7056] sctp: [Deprecated]: syz.1.884 (pid 7056) Use of int in maxseg socket option. [ 257.432752][ T7056] Use struct sctp_assoc_value instead [ 258.069862][ T7068] fuse: Bad value for 'user_id' [ 260.763441][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 260.780124][ T7095] loop3: detected capacity change from 0 to 512 [ 260.804046][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.892'. [ 260.869618][ T7095] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 261.031107][ T7095] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.138307][ T7100] netlink: 80 bytes leftover after parsing attributes in process `syz.2.894'. [ 261.147692][ T7095] bridge0: port 3(geneve1) entered blocking state [ 261.198808][ T7095] bridge0: port 3(geneve1) entered disabled state [ 262.086270][ T7095] device geneve1 entered promiscuous mode [ 262.097385][ T7095] bridge0: port 3(geneve1) entered blocking state [ 262.104653][ T7095] bridge0: port 3(geneve1) entered forwarding state [ 263.384252][ T7115] fuse: Bad value for 'user_id' [ 272.199770][ T7164] fuse: Bad value for 'fd' [ 272.890648][ T7177] netlink: 80 bytes leftover after parsing attributes in process `syz.2.911'. [ 272.920149][ T7178] device syzkaller0 left promiscuous mode [ 277.892146][ T7202] fuse: Bad value for 'fd' [ 278.901821][ T7209] tipc: Enabled bearer , priority 0 [ 278.920566][ T7209] tipc: Resetting bearer [ 278.957296][ T7208] tipc: Disabling bearer [ 280.426554][ T7220] loop0: detected capacity change from 0 to 512 [ 280.682428][ T7220] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.001066][ T7220] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.937: inode has both inline data and extents flags [ 281.045762][ T7220] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.937: couldn't read orphan inode 17 (err -117) [ 281.058388][ T7220] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.145447][ T7250] tipc: Enabled bearer , priority 0 [ 285.221068][ T7254] tipc: Resetting bearer [ 285.334703][ T7259] netlink: 80 bytes leftover after parsing attributes in process `syz.4.950'. [ 285.488752][ T7249] tipc: Disabling bearer [ 291.666390][ T7299] netlink: 80 bytes leftover after parsing attributes in process `syz.2.964'. [ 291.942838][ T7297] team0 (unregistering): Port device team_slave_0 removed [ 292.042346][ T7297] team0 (unregistering): Port device team_slave_1 removed [ 292.072021][ T26] audit: type=1326 audit(1787265281.456:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 292.132410][ T26] audit: type=1326 audit(1787265281.456:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 292.189551][ T26] audit: type=1326 audit(1787265281.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 292.279243][ T26] audit: type=1326 audit(1787265281.486:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 292.547567][ T26] audit: type=1326 audit(1787265281.526:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 293.624151][ T26] audit: type=1326 audit(1787265281.526:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 293.922553][ T26] audit: type=1326 audit(1787265281.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 294.072335][ T26] audit: type=1326 audit(1787265281.546:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 294.167298][ T7325] loop4: detected capacity change from 0 to 512 [ 294.242778][ T26] audit: type=1326 audit(1787265281.546:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 294.335404][ T7325] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.350568][ T26] audit: type=1326 audit(1787265281.546:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f321a6770d9 code=0x7ffc0000 [ 294.734106][ T7325] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.958: inode has both inline data and extents flags [ 294.753699][ T7342] netlink: 80 bytes leftover after parsing attributes in process `syz.3.977'. [ 294.849622][ T7325] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.958: couldn't read orphan inode 17 (err -117) [ 295.076889][ T7344] netlink: 'syz.1.978': attribute type 6 has an invalid length. [ 295.120563][ T7325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.200819][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 298.036892][ T7357] sock: sock_timestamping_bind_phc: sock not bind to device [ 299.682602][ T7383] device syzkaller0 entered promiscuous mode [ 299.710639][ T7381] loop2: detected capacity change from 0 to 512 [ 300.000752][ T7381] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.834362][ T7381] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #17: comm syz.2.992: inode has both inline data and extents flags [ 301.772829][ T7381] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.992: couldn't read orphan inode 17 (err -117) [ 301.892818][ T7381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.155560][ T7393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 304.902438][ T7413] x_tables: unsorted entry at hook 3 [ 305.300459][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 305.463696][ T7432] device syzkaller0 entered promiscuous mode [ 306.751852][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'. [ 310.090829][ T7472] mmap: syz.1.1019 (7472) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 310.234802][ T7482] device syzkaller0 entered promiscuous mode [ 310.267133][ T7486] loop0: detected capacity change from 0 to 512 [ 310.518425][ T7486] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 310.582584][ T7486] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.604050][ T7506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1030'. [ 311.680312][ T7514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1030'. [ 311.706226][ T7512] loop1: detected capacity change from 0 to 2048 [ 311.853242][ T7512] Alternate GPT is invalid, using primary GPT. [ 311.965509][ T7512] loop1: p1 p2 p3 [ 314.724822][ T7523] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1036'. [ 316.073939][ T7551] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.137778][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 316.156844][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 316.181808][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 316.380976][ T7561] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1048'. [ 317.237073][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244276][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.317837][ T7570] loop1: detected capacity change from 0 to 512 [ 319.383177][ T7570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.465921][ T7574] device syzkaller0 entered promiscuous mode [ 319.477684][ T7570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 319.522593][ T7570] System zones: 1-12 [ 319.576884][ T7570] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 319.640446][ T7578] loop0: detected capacity change from 0 to 512 [ 319.675899][ T7570] EXT4-fs (loop1): 1 truncate cleaned up [ 319.681832][ T7570] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 319.749047][ T7578] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.858879][ T7578] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1054: inode has both inline data and extents flags [ 321.196242][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 321.216080][ T7578] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1054: couldn't read orphan inode 17 (err -117) [ 321.312677][ T7578] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.489609][ T7576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 321.866616][ T7611] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1062'. [ 325.409464][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 326.294557][ T7650] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1067'. [ 326.568720][ T7656] loop2: detected capacity change from 0 to 512 [ 326.630622][ T7656] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.743866][ T7664] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 16 [ 326.786962][ T7656] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #17: comm syz.2.1074: inode has both inline data and extents flags [ 326.881447][ T7656] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1074: couldn't read orphan inode 17 (err -117) [ 326.980698][ T7669] device syzkaller0 left promiscuous mode [ 326.990307][ T7656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 327.051952][ T7675] device syzkaller0 entered promiscuous mode [ 327.349896][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 327.349913][ T26] audit: type=1326 audit(1787265316.736:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a50dc0d9 code=0x7ffc0000 [ 327.423063][ T7687] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1084'. [ 327.600788][ T26] audit: type=1326 audit(1787265316.736:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a50dc0d9 code=0x7ffc0000 [ 330.702455][ T7696] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1087'. [ 331.903660][ T7728] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1098'. [ 333.050790][ T7746] tipc: Enabling of bearer rejected, failed to enable media [ 333.680291][ T7737] loop1: detected capacity change from 0 to 4096 [ 334.008687][ T7737] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.759480][ T26] audit: type=1800 audit(1787265325.136:21): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 336.130350][ T26] audit: type=1800 audit(1787265325.226:22): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 337.024700][ T7770] loop1: detected capacity change from 0 to 512 [ 338.096125][ T7787] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1113'. [ 339.447175][ T7816] tipc: Enabling of bearer rejected, failed to enable media [ 340.143742][ T7803] syz.1.1118 (7803) used greatest stack depth: 17760 bytes left [ 342.647320][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 344.798096][ T7870] tipc: Enabling of bearer rejected, failed to enable media [ 344.977096][ T7872] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1136'. [ 345.040698][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 345.193310][ T7879] device syzkaller0 entered promiscuous mode [ 345.243930][ T7885] netlink: 'syz.0.1140': attribute type 8 has an invalid length. [ 345.270218][ T7886] loop3: detected capacity change from 0 to 512 [ 345.464774][ T7886] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.538545][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 345.585948][ T7886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.216002][ T7886] EXT4-fs (loop3): 1 truncate cleaned up [ 346.521498][ T7886] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 346.648991][ T7899] loop1: detected capacity change from 0 to 512 [ 346.717242][ T7898] loop2: detected capacity change from 0 to 512 [ 346.969878][ T7899] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.321228][ T7898] EXT4-fs (loop2): Ignoring removed orlov option [ 348.023548][ T7898] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 348.031042][ T7898] EXT4-fs (loop2): inline encryption not supported [ 348.095610][ T7899] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1145: inode has both inline data and extents flags [ 348.277666][ T7899] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1145: couldn't read orphan inode 17 (err -117) [ 348.336994][ T7898] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1146: corrupted in-inode xattr [ 348.353725][ T7923] tipc: Enabling of bearer rejected, already enabled [ 348.402860][ T7899] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.520957][ T7898] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1146: couldn't read orphan inode 15 (err -117) [ 348.588681][ T7898] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,inlinecrypt,,errors=continue. Quota mode: writeback. [ 350.261359][ T7960] tipc: Enabling of bearer rejected, already enabled [ 351.085785][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 351.244731][ T7971] loop0: detected capacity change from 0 to 512 [ 351.318480][ T7971] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 351.406483][ T7976] netlink: 'syz.1.1169': attribute type 12 has an invalid length. [ 351.442415][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 351.498342][ T7971] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1167: inode has both inline data and extents flags [ 351.535414][ T7976] bond0: option primary_reselect: invalid value (254) [ 351.551475][ T7971] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1167: couldn't read orphan inode 17 (err -117) [ 351.600552][ T7971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.272946][ T8001] FAULT_INJECTION: forcing a failure. [ 353.272946][ T8001] name failslab, interval 1, probability 0, space 0, times 1 [ 353.352644][ T8003] device syzkaller0 entered promiscuous mode [ 353.390396][ T8001] CPU: 1 PID: 8001 Comm: syz.2.1177 Not tainted syzkaller #0 [ 353.398153][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.408552][ T8001] Call Trace: [ 353.411854][ T8001] [ 353.414901][ T8001] dump_stack_lvl+0x188/0x250 [ 353.419647][ T8001] ? show_regs_print_info+0x20/0x20 [ 353.424975][ T8001] ? load_image+0x410/0x410 [ 353.429867][ T8001] ? __might_sleep+0xf0/0xf0 [ 353.435012][ T8001] ? __lock_acquire+0x7b50/0x7b50 [ 353.440382][ T8001] should_fail+0x383/0x4b0 [ 353.445518][ T8001] should_failslab+0x5/0x20 [ 353.450469][ T8001] slab_pre_alloc_hook+0x51/0xc0 [ 353.455594][ T8001] ? getname_flags+0xb7/0x4f0 [ 353.460411][ T8001] kmem_cache_alloc+0x3d/0x280 [ 353.465202][ T8001] getname_flags+0xb7/0x4f0 [ 353.469748][ T8001] __x64_sys_mknodat+0x94/0xc0 [ 353.475050][ T8001] do_syscall_64+0x4c/0xa0 [ 353.479600][ T8001] ? clear_bhb_loop+0x30/0x80 [ 353.484619][ T8001] ? clear_bhb_loop+0x30/0x80 [ 353.489331][ T8001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.495547][ T8001] RIP: 0033:0x7f321a6770d9 [ 353.499982][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.519985][ T8001] RSP: 002b:00007f32188cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 353.528427][ T8001] RAX: ffffffffffffffda RBX: 00007f321a8fefa0 RCX: 00007f321a6770d9 [ 353.536647][ T8001] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 353.544731][ T8001] RBP: 00007f321a70e024 R08: 0000000000000000 R09: 0000000000000000 [ 353.552734][ T8001] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 353.561357][ T8001] R13: 00007f321a8ff038 R14: 00007f321a8fefa0 R15: 00007fff739f5c08 [ 353.569393][ T8001] [ 353.661644][ T8005] tipc: Enabled bearer , priority 0 [ 353.717209][ T8011] loop3: detected capacity change from 0 to 256 [ 353.727358][ T8005] tipc: Resetting bearer [ 353.754483][ T8013] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1181'. [ 353.907002][ T8004] tipc: Disabling bearer [ 354.150555][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1186'. [ 356.575086][ T8061] loop2: detected capacity change from 0 to 512 [ 356.726439][ T8061] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.756364][ T8070] device syzkaller0 entered promiscuous mode [ 356.775493][ T8070] tipc: Enabled bearer , priority 0 [ 356.855775][ T8072] loop0: detected capacity change from 0 to 512 [ 356.883451][ T8070] tipc: Resetting bearer [ 356.912534][ T8061] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 356.941763][ T8068] tipc: Resetting bearer [ 356.981198][ T8068] tipc: Disabling bearer [ 357.027968][ T8072] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.134608][ T8061] EXT4-fs (loop2): 1 truncate cleaned up [ 357.208543][ T8061] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 357.321258][ T8072] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1198: inode has both inline data and extents flags [ 357.507499][ T8072] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1198: couldn't read orphan inode 17 (err -117) [ 357.580896][ T8072] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.789807][ T8117] device syzkaller0 entered promiscuous mode [ 359.843951][ T8119] tipc: Enabled bearer , priority 0 [ 359.965297][ T8129] FAULT_INJECTION: forcing a failure. [ 359.965297][ T8129] name fail_futex, interval 1, probability 0, space 0, times 1 [ 360.042579][ T8129] CPU: 0 PID: 8129 Comm: syz.0.1211 Not tainted syzkaller #0 [ 360.050060][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.061125][ T8129] Call Trace: [ 360.064451][ T8129] [ 360.067427][ T8129] dump_stack_lvl+0x188/0x250 [ 360.072352][ T8129] ? show_regs_print_info+0x20/0x20 [ 360.077731][ T8129] ? load_image+0x410/0x410 [ 360.082306][ T8129] ? cgroup_rstat_updated+0xce/0x350 [ 360.087943][ T8129] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 360.094182][ T8129] should_fail+0x383/0x4b0 [ 360.098956][ T8129] get_futex_key+0x1a1/0x12d0 [ 360.104428][ T8129] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 360.110922][ T8129] ? futex_wait_restart+0x250/0x250 [ 360.116430][ T8129] ? lock_chain_count+0x20/0x20 [ 360.121353][ T8129] futex_wait_setup+0x4b/0x520 [ 360.126193][ T8129] ? lockdep_hardirqs_on+0x94/0x140 [ 360.131753][ T8129] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 360.138077][ T8129] futex_wait+0x22f/0x680 [ 360.142724][ T8129] ? do_futex+0x12b0/0x12b0 [ 360.147424][ T8129] ? verify_lock_unused+0x140/0x140 [ 360.152780][ T8129] ? verify_lock_unused+0x140/0x140 [ 360.158150][ T8129] do_futex+0xdc2/0x12b0 [ 360.162454][ T8129] ? vfs_write+0xaa6/0xd70 [ 360.167083][ T8129] ? futex_exit_release+0x1c0/0x1c0 [ 360.172427][ T8129] ? __context_tracking_exit+0x4c/0x80 [ 360.178711][ T8129] __se_sys_futex+0x389/0x420 [ 360.183629][ T8129] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 360.189868][ T8129] ? __x64_sys_futex+0xf0/0xf0 [ 360.194887][ T8129] ? __x64_sys_futex+0x1d/0xf0 [ 360.199895][ T8129] do_syscall_64+0x4c/0xa0 [ 360.204454][ T8129] ? clear_bhb_loop+0x30/0x80 [ 360.209617][ T8129] ? clear_bhb_loop+0x30/0x80 [ 360.214555][ T8129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.220741][ T8129] RIP: 0033:0x7fd2a50dc0d9 [ 360.225253][ T8129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.245893][ T8129] RSP: 002b:00007fd2a33340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.255073][ T8129] RAX: ffffffffffffffda RBX: 00007fd2a5363fa8 RCX: 00007fd2a50dc0d9 [ 360.263177][ T8129] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2a5363fa8 [ 360.271558][ T8129] RBP: 00007fd2a5363fa0 R08: 0000000000000000 R09: 0000000000000000 [ 360.279671][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.287779][ T8129] R13: 00007fd2a5364038 R14: 00007fffba2822e0 R15: 00007fffba2823c8 [ 360.295803][ T8129] [ 360.328115][ T8119] tipc: Resetting bearer [ 360.358035][ T8132] device syzkaller0 entered promiscuous mode [ 360.395870][ T8115] tipc: Resetting bearer [ 360.433393][ T8115] tipc: Disabling bearer [ 361.023494][ T8151] loop1: detected capacity change from 0 to 512 [ 361.079095][ T8156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1222'. [ 363.654668][ T8151] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 363.712591][ T8151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.046360][ T8151] EXT4-fs (loop1): 1 truncate cleaned up [ 364.120817][ T8151] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 364.763476][ T8176] tipc: Enabled bearer , priority 0 [ 364.866486][ T8177] tipc: Resetting bearer [ 365.074579][ T8172] loop4: detected capacity change from 0 to 4096 [ 365.113267][ T8175] tipc: Disabling bearer [ 365.400694][ T8191] FAULT_INJECTION: forcing a failure. [ 365.400694][ T8191] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.472345][ T8191] CPU: 0 PID: 8191 Comm: syz.1.1230 Not tainted syzkaller #0 [ 365.480037][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.490249][ T8191] Call Trace: [ 365.493573][ T8191] [ 365.496722][ T8191] dump_stack_lvl+0x188/0x250 [ 365.501491][ T8191] ? show_regs_print_info+0x20/0x20 [ 365.506850][ T8191] ? load_image+0x410/0x410 [ 365.511502][ T8191] ? cgroup_rstat_updated+0xce/0x350 [ 365.517032][ T8191] ? place_entity+0x4f0/0x4f0 [ 365.521777][ T8191] should_fail+0x383/0x4b0 [ 365.526514][ T8191] get_futex_key+0x1a1/0x12d0 [ 365.531250][ T8191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 365.537379][ T8191] ? futex_wait_restart+0x250/0x250 [ 365.542643][ T8191] ? lock_chain_count+0x20/0x20 [ 365.547589][ T8191] futex_wait_setup+0x4b/0x520 [ 365.552583][ T8191] ? lockdep_hardirqs_on+0x94/0x140 [ 365.558029][ T8191] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 365.564237][ T8191] futex_wait+0x22f/0x680 [ 365.568759][ T8191] ? do_futex+0x12b0/0x12b0 [ 365.573349][ T8191] ? verify_lock_unused+0x140/0x140 [ 365.578565][ T8191] ? verify_lock_unused+0x140/0x140 [ 365.583986][ T8191] do_futex+0xdc2/0x12b0 [ 365.588602][ T8191] ? vfs_write+0xaa6/0xd70 [ 365.593040][ T8191] ? futex_exit_release+0x1c0/0x1c0 [ 365.598476][ T8191] ? __context_tracking_exit+0x4c/0x80 [ 365.604184][ T8191] __se_sys_futex+0x389/0x420 [ 365.609080][ T8191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 365.615083][ T8191] ? __x64_sys_futex+0xf0/0xf0 [ 365.619876][ T8191] ? __x64_sys_futex+0x1d/0xf0 [ 365.624776][ T8191] do_syscall_64+0x4c/0xa0 [ 365.629292][ T8191] ? clear_bhb_loop+0x30/0x80 [ 365.634059][ T8191] ? clear_bhb_loop+0x30/0x80 [ 365.638753][ T8191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.645017][ T8191] RIP: 0033:0x7fd1e61f20d9 [ 365.650501][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.670647][ T8191] RSP: 002b:00007fd1e444a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.679076][ T8191] RAX: ffffffffffffffda RBX: 00007fd1e6479fa8 RCX: 00007fd1e61f20d9 [ 365.687061][ T8191] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6479fa8 [ 365.695046][ T8191] RBP: 00007fd1e6479fa0 R08: 0000000000000000 R09: 0000000000000000 [ 365.703027][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.711420][ T8191] R13: 00007fd1e647a038 R14: 00007ffef7d61ac0 R15: 00007ffef7d61ba8 [ 365.719485][ T8191] [ 365.747372][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 365.767381][ T8194] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1231'. [ 366.148458][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 366.182122][ T8207] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1236'. [ 367.056282][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 369.386867][ T8228] tipc: Enabled bearer , priority 0 [ 369.587342][ T8229] tipc: Resetting bearer [ 369.747414][ T8226] tipc: Disabling bearer [ 370.485956][ T8247] loop3: detected capacity change from 0 to 256 [ 370.775383][ T8255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1253'. [ 370.811989][ T8255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1253'. [ 370.891527][ T8258] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1254'. [ 372.452759][ T8277] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 373.352859][ T8293] device syzkaller0 entered promiscuous mode [ 373.382027][ T8295] loop4: detected capacity change from 0 to 512 [ 375.358998][ T8295] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.904703][ T8295] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 376.344099][ T8314] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1271'. [ 377.558209][ T8328] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 377.606891][ T8328] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 377.869502][ T8342] device syzkaller0 entered promiscuous mode [ 378.109560][ T8348] loop3: detected capacity change from 0 to 512 [ 378.142857][ T8347] device syzkaller0 entered promiscuous mode [ 378.188774][ T8348] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.197272][ T8347] tipc: Enabled bearer , priority 0 [ 378.281776][ T8347] tipc: Resetting bearer [ 378.301648][ T8348] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #17: comm syz.3.1283: inode has both inline data and extents flags [ 378.323030][ T8348] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1283: couldn't read orphan inode 17 (err -117) [ 378.366052][ T8345] tipc: Resetting bearer [ 378.372709][ T8348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.447254][ T8345] tipc: Disabling bearer [ 378.627771][ T8354] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1284'. [ 378.674105][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.680628][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.512261][ T8379] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1293'. [ 381.567316][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 381.592850][ T8381] loop1: detected capacity change from 0 to 256 [ 382.338148][ T8389] loop4: detected capacity change from 0 to 512 [ 383.085882][ T8389] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.168002][ T8389] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1297: inode has both inline data and extents flags [ 384.292746][ T8389] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1297: couldn't read orphan inode 17 (err -117) [ 384.342720][ T8389] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 385.239819][ T8406] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 386.859921][ T26] audit: type=1326 audit(1787265376.246:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 387.190987][ T26] audit: type=1326 audit(1787265376.296:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 387.937501][ T8459] loop0: detected capacity change from 0 to 512 [ 387.975871][ T26] audit: type=1326 audit(1787265376.296:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 388.062434][ T8459] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 388.282781][ T26] audit: type=1326 audit(1787265376.376:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 388.323021][ T8467] loop2: detected capacity change from 0 to 512 [ 388.367094][ T26] audit: type=1326 audit(1787265376.376:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc002983e42 code=0x7ffc0000 [ 388.439206][ T8467] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.484039][ T26] audit: type=1326 audit(1787265376.376:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc002983ed7 code=0x7ffc0000 [ 388.562454][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 388.583953][ T8467] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #17: comm syz.2.1324: inode has both inline data and extents flags [ 388.614367][ T26] audit: type=1326 audit(1787265376.376:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc002940dd1 code=0x7ffc0000 [ 388.634286][ T8467] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1324: couldn't read orphan inode 17 (err -117) [ 388.648423][ T26] audit: type=1326 audit(1787265376.376:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc002984ec9 code=0x7ffc0000 [ 388.680123][ T26] audit: type=1326 audit(1787265376.376:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc002940e3b code=0x7ffc0000 [ 388.710809][ T8467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 388.710866][ T26] audit: type=1326 audit(1787265376.376:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.1320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 388.835288][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 392.638199][ T8522] loop0: detected capacity change from 0 to 512 [ 392.756265][ T8522] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.867167][ T8522] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1341: inode has both inline data and extents flags [ 392.881142][ T8522] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1341: couldn't read orphan inode 17 (err -117) [ 392.902372][ T8522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 394.308373][ T8554] loop0: detected capacity change from 0 to 2048 [ 394.554958][ T8554] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 395.047076][ T8564] device syzkaller0 entered promiscuous mode [ 397.788441][ T8582] loop1: detected capacity change from 0 to 512 [ 397.968410][ T8588] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1363'. [ 397.987904][ T8582] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.762834][ T8582] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1361: inode has both inline data and extents flags [ 398.878985][ T8582] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1361: couldn't read orphan inode 17 (err -117) [ 398.927882][ T8582] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 398.954617][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 399.540338][ T8615] loop3: detected capacity change from 0 to 736 [ 399.730556][ T8615] rock: directory entry would overflow storage [ 399.772249][ T8615] rock: sig=0x3b10, size=4, remaining=3 [ 400.570959][ T8647] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1379'. [ 401.307251][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1380'. [ 401.520207][ T8653] loop4: detected capacity change from 0 to 512 [ 401.560670][ T8653] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 401.891495][ T8653] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1382: inode has both inline data and extents flags [ 402.339960][ T8653] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1382: couldn't read orphan inode 17 (err -117) [ 402.370054][ T8653] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 402.508431][ T8665] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 402.605428][ T8665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.735453][ T8668] bond1: (slave gretap1): making interface the new active one [ 402.746770][ T8668] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 402.767218][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 402.823587][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 403.527139][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 403.592343][ T8696] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1395'. [ 404.386380][ T8701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.481407][ T8709] loop4: detected capacity change from 0 to 512 [ 404.602539][ T8709] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 404.697089][ T8709] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1398: inode has both inline data and extents flags [ 404.851824][ T8709] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1398: couldn't read orphan inode 17 (err -117) [ 405.083678][ T8709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.434191][ T8708] loop2: detected capacity change from 0 to 8192 [ 405.567981][ T8708] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.776406][ T8726] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 406.391055][ T8726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.625941][ T8736] bond1: (slave gretap1): making interface the new active one [ 406.635452][ T8736] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 406.671290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 406.859130][ T8755] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1410'. [ 407.698495][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 408.702822][ T8772] loop3: detected capacity change from 0 to 512 [ 408.862806][ T8772] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.071385][ T8772] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #17: comm syz.3.1419: inode has both inline data and extents flags [ 409.245055][ T8772] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1419: couldn't read orphan inode 17 (err -117) [ 409.407315][ T8772] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.631138][ T8786] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 409.901507][ T8795] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1428'. [ 409.923950][ T8786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.988529][ T8788] bond1: (slave gretap1): making interface the new active one [ 410.650912][ T8788] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.767882][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 412.852689][ T8825] loop0: detected capacity change from 0 to 512 [ 412.958408][ T8825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.975864][ T8830] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1439'. [ 413.215512][ T8825] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1437: inode has both inline data and extents flags [ 413.421046][ T8825] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1437: couldn't read orphan inode 17 (err -117) [ 413.610255][ T8825] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.037569][ T8877] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1455'. [ 416.064819][ T8879] netlink: 'syz.0.1454': attribute type 13 has an invalid length. [ 416.882409][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.923503][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.938373][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.983437][ T8886] loop1: detected capacity change from 0 to 512 [ 417.090362][ T8886] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 417.221208][ T8886] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1456: inode has both inline data and extents flags [ 417.267981][ T8886] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1456: couldn't read orphan inode 17 (err -117) [ 417.373067][ T8886] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 418.598343][ T8911] loop3: detected capacity change from 0 to 512 [ 418.670898][ T8915] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1469'. [ 419.612854][ T8926] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1471'. [ 419.651473][ T8911] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 419.701656][ T8911] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.808576][ T8941] loop4: detected capacity change from 0 to 512 [ 420.884222][ T8941] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 421.587977][ T8941] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1478: inode has both inline data and extents flags [ 421.711355][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 421.763328][ T8941] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1478: couldn't read orphan inode 17 (err -117) [ 421.834032][ T8941] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 422.242660][ T8963] tipc: Failed to remove unknown binding: 66,0,0/3843868954:1689447052/1689447054 [ 422.301346][ T8963] tipc: Failed to remove unknown binding: 66,0,0/3843868954:1689447052/1689447053 [ 422.457469][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 422.506481][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 422.509148][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 422.572460][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 422.940646][ T8984] device syzkaller0 entered promiscuous mode [ 422.987155][ T8984] tipc: Enabled bearer , priority 0 [ 423.084098][ T8984] tipc: Resetting bearer [ 423.112835][ T8981] tipc: Resetting bearer [ 423.210919][ T8981] tipc: Disabling bearer [ 423.304015][ T8992] loop1: detected capacity change from 0 to 736 [ 424.126420][ T8992] rock: directory entry would overflow storage [ 424.255051][ T8992] rock: sig=0x3b10, size=4, remaining=3 [ 424.688208][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 424.832312][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 426.509221][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.522466][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.552403][ T8975] device bridge_slave_0 entered promiscuous mode [ 426.605292][ T9008] device syzkaller0 entered promiscuous mode [ 426.731923][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.774268][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.937182][ T8975] device bridge_slave_1 entered promiscuous mode [ 427.575501][ T9022] loop0: detected capacity change from 0 to 512 [ 427.643302][ T9022] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.684447][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.075626][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.140125][ T9022] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1505: inode has both inline data and extents flags [ 428.207285][ T4228] Bluetooth: hci5: command 0x041b tx timeout [ 428.252610][ T9022] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1505: couldn't read orphan inode 17 (err -117) [ 428.325875][ T9022] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 428.356402][ T8975] team0: Port device team_slave_0 added [ 428.399594][ T8975] team0: Port device team_slave_1 added [ 428.489368][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.586834][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.626320][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.652780][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.670075][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.739749][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.058170][ T9045] device syzkaller0 entered promiscuous mode [ 430.253041][ T8975] device hsr_slave_0 entered promiscuous mode [ 430.272556][ T6094] Bluetooth: hci5: command 0x040f tx timeout [ 430.425568][ T8975] device hsr_slave_1 entered promiscuous mode [ 430.559624][ T8975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.415364][ T8975] Cannot create hsr debugfs directory [ 432.018975][ T9071] device syzkaller0 entered promiscuous mode [ 432.347322][ T9082] loop0: detected capacity change from 0 to 512 [ 432.375626][ T4228] Bluetooth: hci5: command 0x0419 tx timeout [ 432.406916][ T9082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.495982][ T9082] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1521: inode has both inline data and extents flags [ 432.521967][ T9082] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1521: couldn't read orphan inode 17 (err -117) [ 432.539497][ T9082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.573216][ T8975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.618726][ T8975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.699444][ T6523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.739313][ T8975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.762121][ T8975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.916502][ T6523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.481664][ T6523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.954317][ T6523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.144872][ T9105] device syzkaller0 entered promiscuous mode [ 436.178582][ T9105] tipc: Enabled bearer , priority 0 [ 436.195496][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 436.195514][ T26] audit: type=1326 audit(1787265425.586:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 436.235905][ T26] audit: type=1326 audit(1787265425.626:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 436.261928][ T26] audit: type=1326 audit(1787265425.626:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 436.263935][ T9105] tipc: Resetting bearer [ 436.297270][ T26] audit: type=1326 audit(1787265425.626:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 436.338990][ T26] audit: type=1326 audit(1787265425.626:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 436.372046][ T26] audit: type=1326 audit(1787265425.676:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1e61b290e code=0x7ffc0000 [ 436.386349][ T9101] tipc: Resetting bearer [ 436.405216][ T26] audit: type=1326 audit(1787265425.686:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1e61b290e code=0x7ffc0000 [ 436.451905][ T9101] tipc: Disabling bearer [ 436.504506][ T26] audit: type=1326 audit(1787265425.726:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1e61b290e code=0x7ffc0000 [ 436.546849][ T26] audit: type=1326 audit(1787265425.726:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1e61b290e code=0x7ffc0000 [ 436.603604][ T26] audit: type=1326 audit(1787265425.726:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.1.1531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1e61b290e code=0x7ffc0000 [ 436.633075][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.659170][ T9119] loop1: detected capacity change from 0 to 512 [ 436.719783][ T9119] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.752933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.781291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.815144][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.858508][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.889827][ T9119] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1534: inode has both inline data and extents flags [ 436.908844][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.968487][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.975803][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.993718][ T9119] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1534: couldn't read orphan inode 17 (err -117) [ 437.073918][ T9119] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.214142][ T6523] tipc: Left network mode [ 437.243677][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.425370][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.642989][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.817855][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.825041][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.976968][ T9142] loop3: detected capacity change from 0 to 128 [ 438.041513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.168942][ T9142] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 438.257630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.355068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.518165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.653320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.181642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.255081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.115142][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.121740][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.324063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.370606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.390738][ T9169] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 440.390738][ T9169] The task syz.1.1545 (9169) triggered the difference, watch for misbehavior. [ 440.927690][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.961073][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.031996][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.148499][ T6523] bond1: (slave gretap1): Releasing active interface [ 441.231415][ T9179] tipc: Enabled bearer , priority 0 [ 441.293662][ T9179] tipc: Resetting bearer [ 441.309976][ T9178] tipc: Disabling bearer [ 441.578753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.595165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.693743][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.994707][ T9203] loop4: detected capacity change from 0 to 512 [ 442.313674][ T9203] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 442.643851][ T9203] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1554: inode has both inline data and extents flags [ 442.666225][ T9203] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1554: couldn't read orphan inode 17 (err -117) [ 442.700513][ T6523] device hsr_slave_0 left promiscuous mode [ 442.714420][ T9203] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 442.769945][ T6523] device hsr_slave_1 left promiscuous mode [ 442.825839][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.968023][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.224595][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.365542][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.525364][ T6523] device bridge_slave_1 left promiscuous mode [ 443.667952][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.963959][ T9213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 444.227038][ T6523] device bridge_slave_0 left promiscuous mode [ 444.418054][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.251897][ T6523] device veth1_macvtap left promiscuous mode [ 445.316209][ T6523] device veth0_macvtap left promiscuous mode [ 445.381908][ T6523] device veth1_vlan left promiscuous mode [ 445.415392][ T6523] device veth0_vlan left promiscuous mode [ 445.906013][ T6523] bond1 (unregistering): Released all slaves [ 446.050036][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 446.066539][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 446.081844][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.099492][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.168878][ T6523] bond0 (unregistering): Released all slaves [ 446.267440][ T9243] device syzkaller0 entered promiscuous mode [ 446.515295][ T9261] device syzkaller0 left promiscuous mode [ 446.549654][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.568728][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.828166][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.902364][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.058388][ T8975] device veth0_vlan entered promiscuous mode [ 447.163108][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.253769][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.416525][ T8975] device veth1_vlan entered promiscuous mode [ 447.518206][ T8975] device veth0_macvtap entered promiscuous mode [ 447.537450][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.549526][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.566929][ T9279] loop3: detected capacity change from 0 to 128 [ 447.603107][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.649581][ T8975] device veth1_macvtap entered promiscuous mode [ 447.917664][ T9287] device syzkaller0 entered promiscuous mode [ 448.391446][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.645205][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.848509][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.035799][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.194534][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.394065][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.579703][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.751523][ T9294] loop4: detected capacity change from 0 to 512 [ 449.764140][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.946874][ T9294] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 449.992748][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.109703][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.187561][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.299774][ T9294] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1573: inode has both inline data and extents flags [ 450.379186][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.563668][ T9294] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1573: couldn't read orphan inode 17 (err -117) [ 450.600040][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.642802][ T9294] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 450.671148][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.681497][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.692426][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.702717][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.713663][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.723887][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.736583][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.748927][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.766044][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.834222][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 450.915212][ T8975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.940599][ T8975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.956660][ T8975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.968916][ T8975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.098037][ T9320] loop0: detected capacity change from 0 to 512 [ 451.337300][ T9320] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1578: inode has both inline data and extents flags [ 451.643929][ T9320] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1578: couldn't read orphan inode 15 (err -117) [ 451.900103][ T9320] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: writeback. [ 452.230563][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.272438][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.272751][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.423085][ T9339] device syzkaller0 entered promiscuous mode [ 452.436738][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.436766][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.437067][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.510513][ T9349] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1482'. [ 454.735495][ T9354] netlink: 'syz.1.1589': attribute type 32 has an invalid length. [ 454.736086][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 455.570687][ T9359] loop5: detected capacity change from 0 to 512 [ 456.459251][ T9365] loop1: detected capacity change from 0 to 512 [ 456.497282][ T9359] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.538981][ T9365] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 456.585853][ T9359] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1590: inode has both inline data and extents flags [ 456.610109][ T9365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1591: bg 0: block 4: invalid block bitmap [ 456.712320][ T9359] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1590: couldn't read orphan inode 17 (err -117) [ 456.724949][ T9365] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 456.734511][ T9359] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.772603][ T9365] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1591: invalid indirect mapped block 1 (level 1) [ 457.003221][ T9365] EXT4-fs (loop1): 1 truncate cleaned up [ 457.009155][ T9365] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 457.327099][ T9388] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1597'. [ 457.550617][ T9392] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1600'. [ 457.584495][ T9393] device syzkaller0 entered promiscuous mode [ 458.408149][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 461.443855][ T9427] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1608'. [ 461.529124][ T9429] loop4: detected capacity change from 0 to 512 [ 461.546219][ T9429] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 461.654759][ T9429] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1609: inode has both inline data and extents flags [ 461.729135][ T9429] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1609: couldn't read orphan inode 17 (err -117) [ 461.752460][ T9429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.938787][ T9446] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1614'. [ 462.055096][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 462.055145][ T26] audit: type=1326 audit(1787265451.446:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.800598][ T26] audit: type=1326 audit(1787265451.486:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.826168][ T26] audit: type=1326 audit(1787265451.496:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.851729][ T26] audit: type=1326 audit(1787265451.496:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.876573][ T26] audit: type=1326 audit(1787265451.496:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.901313][ T26] audit: type=1326 audit(1787265451.506:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.928022][ T26] audit: type=1326 audit(1787265451.556:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 462.970693][ T26] audit: type=1326 audit(1787265451.556:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 463.205691][ T26] audit: type=1326 audit(1787265451.556:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 463.706500][ T26] audit: type=1326 audit(1787265451.606:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.1.1616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e61f20d9 code=0x7ffc0000 [ 464.069047][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 464.201680][ T9482] loop5: detected capacity change from 0 to 512 [ 464.272702][ T9482] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 464.365242][ T9482] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1627: inode has both inline data and extents flags [ 464.514549][ T9482] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1627: couldn't read orphan inode 17 (err -117) [ 464.657594][ T9482] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 465.156840][ T9497] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1630'. [ 467.552848][ T9435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 467.704269][ T9509] device syzkaller0 entered promiscuous mode [ 467.836016][ T9510] loop3: detected capacity change from 0 to 736 [ 468.256141][ T9534] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1641'. [ 469.406480][ T9543] loop1: detected capacity change from 0 to 764 [ 469.442698][ T9510] rock: directory entry would overflow storage [ 469.496491][ T8977] Bluetooth: Wrong link type (-22) [ 469.603010][ T9510] rock: sig=0x3b10, size=4, remaining=3 [ 471.472232][ T9556] loop4: detected capacity change from 0 to 512 [ 471.771660][ T9556] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.855640][ T9560] loop1: detected capacity change from 0 to 512 [ 472.110706][ T9560] EXT4-fs (loop1): Ignoring removed bh option [ 472.222073][ T9556] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1645: inode has both inline data and extents flags [ 472.359540][ T9560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e00ce01c, mo2=0002] [ 472.518875][ T9560] System zones: 1-12 [ 472.527788][ T9560] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1646: inode has both inline data and extents flags [ 472.552842][ T9556] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1645: couldn't read orphan inode 17 (err -117) [ 472.576069][ T9560] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1646: couldn't read orphan inode 15 (err -117) [ 472.594376][ T9556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 472.652873][ T9560] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,quota,bh,,errors=continue. Quota mode: writeback. [ 472.783370][ T9580] x_tables: duplicate underflow at hook 3 [ 472.913051][ T9586] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1652'. [ 473.856115][ T9578] device syzkaller0 entered promiscuous mode [ 474.267132][ T9601] device syzkaller0 entered promiscuous mode [ 474.335537][ T9605] loop5: detected capacity change from 0 to 256 [ 476.010386][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 477.484508][ T9627] loop1: detected capacity change from 0 to 512 [ 477.556054][ T9627] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.612365][ T9629] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1666'. [ 477.798347][ T9627] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1665: inode has both inline data and extents flags [ 478.117820][ T9627] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1665: couldn't read orphan inode 17 (err -117) [ 478.493845][ T9627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 478.583999][ T9639] device syzkaller0 entered promiscuous mode [ 479.058194][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 479.145123][ T9662] device syzkaller0 entered promiscuous mode [ 479.399578][ T9678] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1680'. [ 481.312139][ T9680] loop0: detected capacity change from 0 to 512 [ 481.565545][ T9680] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.974834][ T9680] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1681: inode has both inline data and extents flags [ 482.218823][ T9680] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1681: couldn't read orphan inode 17 (err -117) [ 482.327633][ T9680] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 483.225016][ T9694] device syzkaller0 entered promiscuous mode [ 483.353414][ T9700] rtc_cmos 00:00: Alarms can be up to one day in the future [ 485.100850][ T9735] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1694'. [ 485.178622][ T9736] device syzkaller0 entered promiscuous mode [ 485.876031][ T9738] loop3: detected capacity change from 0 to 512 [ 486.063214][ T9738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.370987][ T9738] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #17: comm syz.3.1696: inode has both inline data and extents flags [ 486.622052][ T9738] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1696: couldn't read orphan inode 17 (err -117) [ 486.874667][ T9738] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.213661][ T9758] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1701'. [ 489.742450][ T9766] device syzkaller0 entered promiscuous mode [ 489.802723][ T9750] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 490.459511][ T9783] loop1: detected capacity change from 0 to 512 [ 490.610252][ T9783] EXT4-fs error (device loop1): ext4_quota_enable:6444: comm syz.1.1706: inode #16777216: comm syz.1.1706: iget: illegal inode # [ 490.701033][ T9783] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.1706: Bad quota inode: 16777216, type: 2 [ 490.800149][ T9783] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 490.826195][ T9783] EXT4-fs (loop1): mount failed [ 490.965352][ T9806] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1710'. [ 491.388248][ T9818] device syzkaller0 entered promiscuous mode [ 491.507211][ T9800] infiniband syz1: set active [ 491.525954][ T9800] infiniband syz1: added syz_tun [ 491.650256][ T9800] RDS/IB: syz1: added [ 491.664356][ T9800] smc: adding ib device syz1 with port count 1 [ 491.671206][ T9800] smc: ib device syz1 port 1 has pnetid [ 492.847433][ T8977] Bluetooth: Wrong link type (-22) [ 496.020189][ T9849] loop1: detected capacity change from 0 to 512 [ 496.071570][ T9850] device syzkaller0 entered promiscuous mode [ 496.096557][ T9849] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 496.191556][ T9849] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1718: inode has both inline data and extents flags [ 496.243068][ T9849] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1718: couldn't read orphan inode 17 (err -117) [ 496.262253][ T9849] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 496.458034][ T9862] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1724'. [ 498.241505][ T9887] loop0: detected capacity change from 0 to 128 [ 498.284343][ T9885] device syzkaller0 entered promiscuous mode [ 498.564108][ T9887] FAT-fs (loop0): Directory bread(block 1048) failed [ 498.701163][ T9887] FAT-fs (loop0): Directory bread(block 1049) failed [ 498.810258][ T9887] FAT-fs (loop0): Directory bread(block 1050) failed [ 498.900283][ T9887] FAT-fs (loop0): Directory bread(block 1051) failed [ 498.997301][ T9887] FAT-fs (loop0): Directory bread(block 1052) failed [ 499.098069][ T9887] FAT-fs (loop0): Directory bread(block 1053) failed [ 499.189074][ T9887] FAT-fs (loop0): Directory bread(block 1054) failed [ 499.280977][ T9887] FAT-fs (loop0): Directory bread(block 1055) failed [ 500.693254][ T9898] loop4: detected capacity change from 0 to 512 [ 500.928810][ T9898] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 501.397959][ T9898] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1735: inode has both inline data and extents flags [ 501.420712][ T9898] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1735: couldn't read orphan inode 17 (err -117) [ 501.446066][ T9898] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.483095][ T9915] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1739'. [ 501.555010][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.561489][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.580768][ T9912] loop5: detected capacity change from 0 to 2048 [ 502.797492][ T9931] device syzkaller0 entered promiscuous mode [ 502.842455][ T9936] capability: warning: `syz.0.1746' uses 32-bit capabilities (legacy support in use) [ 503.165171][ T8977] Bluetooth: Wrong link type (-22) [ 503.173819][ T8977] Bluetooth: hci5: link tx timeout [ 503.180060][ T8977] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 506.368210][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 506.395822][ T9959] loop0: detected capacity change from 0 to 512 [ 506.440631][ T9959] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 506.459108][ T9952] device syzkaller0 entered promiscuous mode [ 506.567805][ T9959] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1753: inode has both inline data and extents flags [ 506.616821][ T9973] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1755'. [ 506.643042][ T9959] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1753: couldn't read orphan inode 17 (err -117) [ 506.684381][ T9959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 507.036336][ T9990] loop1: detected capacity change from 0 to 2048 [ 507.141397][ T9990] Alternate GPT is invalid, using primary GPT. [ 507.202129][ T9990] loop1: p1 p2 p3 [ 507.256022][ T9998] device syzkaller0 entered promiscuous mode [ 507.518606][ T9800] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 507.554394][ T9800] infiniband syz1: set down [ 507.653447][ T4226] infiniband syz1: ib_query_port failed (-19) [ 509.536124][ T6508] smc: removing ib device syz1 [ 510.513247][ T4226] Bluetooth: hci3: command 0x0409 tx timeout [ 510.603751][T10023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1768'. [ 510.621314][T10022] loop5: detected capacity change from 0 to 512 [ 510.910849][T10022] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 511.080866][T10035] device syzkaller0 entered promiscuous mode [ 511.135232][T10037] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1771'. [ 511.218873][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 511.218891][ T26] audit: type=1800 audit(1787265500.606:97): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1767" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 511.355583][T10044] loop0: detected capacity change from 0 to 512 [ 511.470505][T10044] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 511.614943][T10044] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1770: inode has both inline data and extents flags [ 511.669081][T10044] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1770: couldn't read orphan inode 17 (err -117) [ 511.740045][T10044] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.268355][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 512.800465][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 512.955448][T10084] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1781'. [ 513.073527][T10086] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1780'. [ 514.912556][T10090] Bluetooth: hci3: command 0x040f tx timeout [ 515.470732][T10094] loop0: detected capacity change from 0 to 128 [ 515.718690][T10094] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.158107][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.171934][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.200627][ T9985] device bridge_slave_0 entered promiscuous mode [ 516.234939][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.242381][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.263934][ T9985] device bridge_slave_1 entered promiscuous mode [ 516.359330][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.423238][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.591536][ T9985] team0: Port device team_slave_0 added [ 516.650317][ T9985] team0: Port device team_slave_1 added [ 516.689320][T10116] device syzkaller0 entered promiscuous mode [ 516.725509][T10118] device syzkaller0 left promiscuous mode [ 516.832983][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.850116][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.996717][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.633152][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 517.777244][T10131] loop0: detected capacity change from 0 to 512 [ 517.813024][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.822646][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.898952][T10131] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 517.909739][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1792'. [ 517.951511][T10137] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1793'. [ 517.972192][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.313556][T10131] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1791: inode has both inline data and extents flags [ 518.445440][T10131] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1791: couldn't read orphan inode 17 (err -117) [ 518.476115][ T9985] device hsr_slave_0 entered promiscuous mode [ 518.489720][T10131] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 518.531255][ T9985] device hsr_slave_1 entered promiscuous mode [ 518.552380][ T9985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.582553][ T9985] Cannot create hsr debugfs directory [ 519.098715][T10161] device syzkaller0 entered promiscuous mode [ 522.021524][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 522.090654][T10181] device syzkaller0 entered promiscuous mode [ 522.210512][T10194] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1806'. [ 522.282478][T10198] loop0: detected capacity change from 0 to 128 [ 522.416409][T10198] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.548729][T10199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.557424][T10199] bridge0: port 3(bond1) entered blocking state [ 522.565408][T10199] bridge0: port 3(bond1) entered disabled state [ 522.573383][T10206] loop1: detected capacity change from 0 to 512 [ 522.573614][T10199] device bond1 entered promiscuous mode [ 522.586966][T10199] bridge0: port 3(bond1) entered blocking state [ 522.593853][T10199] bridge0: port 3(bond1) entered forwarding state [ 522.658623][T10207] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 522.686834][T10206] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 522.723503][ T9985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.738558][T10207] FAT-fs (loop0): Filesystem has been set read-only [ 522.826317][T10206] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #17: comm syz.1.1810: inode has both inline data and extents flags [ 522.978355][ T6520] bridge0: port 3(bond1) entered disabled state [ 523.025009][ T9985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 523.080493][T10206] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1810: couldn't read orphan inode 17 (err -117) [ 523.277349][ T9985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 523.310794][T10206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.502464][ T9985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.594561][T10213] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 525.883945][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 525.932711][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.062911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.070973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.145451][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.211599][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.238497][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.253824][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.261049][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.278197][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.291225][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.331272][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.338940][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.383103][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.412373][T10239] device syzkaller0 entered promiscuous mode [ 526.455901][T10259] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1820'. [ 526.500325][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.549286][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.560892][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.570691][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.580268][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.591039][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.737857][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.779584][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.861300][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.876653][ T9985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.888637][ T9985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.905013][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.964929][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.911765][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'. [ 528.043699][T10287] loop0: detected capacity change from 0 to 512 [ 528.119081][ T8977] Bluetooth: Wrong link type (-22) [ 528.124774][ T8977] Bluetooth: hci5: link tx timeout [ 528.130130][ T8977] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 528.177018][T10287] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 528.491157][T10287] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1828: inode has both inline data and extents flags [ 528.500189][T10287] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1828: couldn't read orphan inode 17 (err -117) [ 528.507785][T10287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 531.004058][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.011639][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.076526][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.158120][T10312] device syzkaller0 entered promiscuous mode [ 531.190835][T10311] device syzkaller0 entered promiscuous mode [ 531.196319][T10322] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1834'. [ 531.566501][T10331] loop1: detected capacity change from 0 to 2048 [ 531.705744][T10331] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 531.872026][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.896931][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.014633][T10353] device syzkaller0 left promiscuous mode [ 532.020647][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.035278][T10358] loop5: detected capacity change from 0 to 512 [ 532.052522][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.090305][ T9985] device veth0_vlan entered promiscuous mode [ 532.110477][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.142400][T10358] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.153096][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.262125][ T9985] device veth1_vlan entered promiscuous mode [ 532.284089][T10358] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1841: inode has both inline data and extents flags [ 532.387993][T10358] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1841: couldn't read orphan inode 17 (err -117) [ 532.557829][T10358] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 532.863405][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.937578][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.128310][ T9985] device veth0_macvtap entered promiscuous mode [ 533.313901][T10343] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 533.489789][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.562646][ T9985] device veth1_macvtap entered promiscuous mode [ 533.875113][T10379] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1846'. [ 533.899219][T10378] device syzkaller0 entered promiscuous mode [ 534.281005][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.839963][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.050282][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.150406][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.160935][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.171734][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.182195][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.192765][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.204022][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.215076][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.228780][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.241856][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.252598][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.263291][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.292284][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.310130][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.335199][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.353641][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.364941][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.526089][ T9985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.626227][ T9985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.752997][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.044502][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.078203][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.137369][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.191516][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.224983][ T9985] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.262529][ T9985] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.271293][ T9985] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.292124][ T9985] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.489371][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.516788][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.555179][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.646761][T10415] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1856'. [ 536.683436][ T6523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.698764][ T6523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.320445][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.383978][T10424] device syzkaller0 entered promiscuous mode [ 539.553493][T10429] loop0: detected capacity change from 0 to 512 [ 539.606897][T10429] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.859149][T10429] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.1861: inode has both inline data and extents flags [ 540.044336][T10429] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1861: couldn't read orphan inode 17 (err -117) [ 540.200003][T10429] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 540.248841][T10436] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 540.277714][T10440] device syzkaller0 entered promiscuous mode [ 540.435781][T10449] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1867'. [ 540.778145][T10463] device syzkaller0 entered promiscuous mode [ 540.866594][ T8977] Bluetooth: Wrong link type (-22) [ 540.872367][ T8977] Bluetooth: hci5: link tx timeout [ 540.877914][ T8977] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 540.886201][ T8977] Bluetooth: hci5: link tx timeout [ 540.891420][ T8977] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 544.265936][T10090] Bluetooth: hci5: command 0x0406 tx timeout [ 544.321572][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 544.462460][T10475] loop0: detected capacity change from 0 to 512 [ 544.494475][T10479] device syzkaller0 entered promiscuous mode [ 544.536122][T10475] EXT4-fs (loop0): inline encryption not supported [ 544.574518][T10483] loop4: detected capacity change from 0 to 512 [ 544.579488][T10475] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 544.636882][T10483] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.669423][T10485] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1882'. [ 544.680706][T10475] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.723081][T10481] loop1: detected capacity change from 0 to 4096 [ 544.765512][T10475] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 544.780831][T10483] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1881: inode has both inline data and extents flags [ 544.850399][T10481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 544.868408][T10475] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1878: corrupted inode contents [ 544.884208][T10483] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1881: couldn't read orphan inode 17 (err -117) [ 544.912103][T10475] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.1878: mark_inode_dirty error [ 544.980633][ T26] audit: type=1326 audit(1787265534.366:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.006084][T10483] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.048482][T10475] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1878: corrupted inode contents [ 545.074781][T10475] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.1878: mark_inode_dirty error [ 545.078021][ T26] audit: type=1326 audit(1787265534.406:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.130684][ T26] audit: type=1326 audit(1787265534.406:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.159137][T10475] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1878: corrupted inode contents [ 545.170417][ T26] audit: type=1326 audit(1787265534.456:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.270094][T10475] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 545.279715][ T26] audit: type=1326 audit(1787265534.456:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.305015][T10475] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1878: corrupted inode contents [ 545.385157][ T26] audit: type=1326 audit(1787265534.456:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.411094][T10475] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.1878: mark_inode_dirty error [ 545.441698][T10475] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 545.456574][ T26] audit: type=1326 audit(1787265534.456:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 545.496722][T10475] EXT4-fs (loop0): 1 truncate cleaned up [ 545.513662][T10475] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,resgid=0x0000000000000000,inlinecrypt,jqfmt=vfsold,noblock_validity,usrjquota=,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 545.528307][T10508] device syzkaller0 entered promiscuous mode [ 545.554412][ T26] audit: type=1326 audit(1787265534.466:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.5.1884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa487b9f0d9 code=0x7ffc0000 [ 549.042625][T10520] usb usb8: usbfs: process 10520 (syz.0.1893) did not claim interface 0 before use [ 549.105269][T10522] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1895'. [ 549.265455][T10529] syz.1.1897 (10529): attempted to duplicate a private mapping with mremap. This is not supported. [ 550.603852][T10540] loop5: detected capacity change from 0 to 512 [ 550.674579][T10540] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 550.917165][T10540] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1901: inode has both inline data and extents flags [ 551.089965][T10540] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1901: couldn't read orphan inode 17 (err -117) [ 551.291680][T10540] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 551.642004][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 551.651896][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 551.686881][T10560] device gretap0 entered promiscuous mode [ 553.556328][T10560] device gretap0 left promiscuous mode [ 553.878447][T10552] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 554.894911][T10578] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1911'. [ 555.075588][T10586] loop1: detected capacity change from 0 to 2048 [ 555.205338][T10586] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 556.019915][T10607] loop6: detected capacity change from 0 to 164 [ 556.127406][T10609] device syzkaller0 entered promiscuous mode [ 556.395757][T10614] device syzkaller0 entered promiscuous mode [ 556.555106][T10615] loop4: detected capacity change from 0 to 512 [ 556.721863][T10615] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 557.021958][T10615] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1924: inode has both inline data and extents flags [ 557.218845][T10615] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1924: couldn't read orphan inode 17 (err -117) [ 557.394940][T10615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 558.589004][T10632] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1929'. [ 559.203955][ T26] audit: type=1326 audit(1787265548.596:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 559.344025][ T26] audit: type=1326 audit(1787265548.626:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 559.379667][ T26] audit: type=1326 audit(1787265548.626:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 559.412198][T10645] loop6: detected capacity change from 0 to 512 [ 559.422586][ T26] audit: type=1326 audit(1787265548.626:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 559.550892][ T26] audit: type=1326 audit(1787265548.626:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 559.584153][T10645] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 559.823280][T10645] EXT4-fs (loop6): 1 truncate cleaned up [ 559.924653][T10645] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 560.021836][ T26] audit: type=1326 audit(1787265548.626:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 560.296195][ T26] audit: type=1326 audit(1787265548.626:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 560.327585][ T26] audit: type=1326 audit(1787265548.626:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 560.358467][ T26] audit: type=1326 audit(1787265548.626:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.6.1930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f693e1020d9 code=0x7ffc0000 [ 560.603286][T10665] loop4: detected capacity change from 0 to 512 [ 560.617583][T10668] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1944'. [ 560.643001][T10673] loop6: detected capacity change from 0 to 128 [ 560.683375][T10665] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.266341][T10673] EXT4-fs (loop6): error: journal path ./file1 is not a block device [ 562.319730][T10665] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1942: inode has both inline data and extents flags [ 562.491340][T10665] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1942: couldn't read orphan inode 17 (err -117) [ 562.654107][T10665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 562.995360][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.001795][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.310614][T10680] autofs4:pid:10680:autofs_fill_super: called with bogus options [ 564.722847][T10702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.916039][T10702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.971047][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 565.031536][T10715] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1958'. [ 565.091200][T10702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.106551][T10712] device syzkaller0 entered promiscuous mode [ 565.206171][T10702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.354284][T10702] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.379808][T10702] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.576806][T10702] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.007079][T10702] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.357338][T10728] loop4: detected capacity change from 0 to 512 [ 567.608814][T10728] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 568.010967][T10728] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1962: inode has both inline data and extents flags [ 568.242069][T10728] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1962: couldn't read orphan inode 17 (err -117) [ 568.430889][T10728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 568.470387][T10738] device syzkaller0 entered promiscuous mode [ 568.676647][T10747] device syzkaller0 entered promiscuous mode [ 568.704414][T10746] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1969'. [ 569.842969][T10768] device syzkaller0 entered promiscuous mode [ 570.989620][T10771] loop4: detected capacity change from 0 to 512 [ 571.119619][T10771] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 571.452084][T10771] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.1981: inode has both inline data and extents flags [ 571.646891][T10771] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1981: couldn't read orphan inode 17 (err -117) [ 571.837929][T10771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 572.365882][T10780] loop1: detected capacity change from 0 to 512 [ 572.694714][T10780] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 572.777862][T10787] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1985'. [ 572.804809][T10780] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.275652][T10800] device syzkaller0 entered promiscuous mode [ 574.179246][T10827] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1998'. [ 574.284295][T10818] device syzkaller0 entered promiscuous mode [ 576.150065][T10831] loop5: detected capacity change from 0 to 512 [ 576.349202][T10831] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 576.667964][T10831] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1999: inode has both inline data and extents flags [ 576.821242][T10831] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1999: couldn't read orphan inode 17 (err -117) [ 576.862782][T10831] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 576.990269][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 577.068942][T10846] device syzkaller0 left promiscuous mode [ 578.091289][T10859] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2010'. [ 578.157134][T10862] device syzkaller0 entered promiscuous mode [ 578.293959][T10872] loop5: detected capacity change from 0 to 512 [ 578.300899][T10870] batman_adv: batadv0: Adding interface: veth0 [ 578.308405][T10870] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.337657][T10870] batman_adv: batadv0: Interface activated: veth0 [ 578.351289][T10868] device syzkaller0 entered promiscuous mode [ 578.427358][T10872] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 578.451020][T10870] batman_adv: batadv0: Interface deactivated: veth0 [ 578.458736][T10870] batman_adv: batadv0: Removing interface: veth0 [ 578.473347][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.485892][T10870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.507845][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.533298][T10870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.560882][T10872] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.2016: inode has both inline data and extents flags [ 578.580530][T10872] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2016: couldn't read orphan inode 17 (err -117) [ 578.608878][T10872] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 582.259331][T10902] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2025'. [ 582.666367][T10909] loop5: detected capacity change from 0 to 256 [ 582.779614][T10909] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 582.805841][T10909] FAT-fs (loop5): Filesystem has been set read-only [ 582.847704][T10915] tipc: Enabling of bearer rejected, failed to enable media [ 582.934036][T10917] device syzkaller0 entered promiscuous mode [ 583.132215][T10919] loop0: detected capacity change from 0 to 512 [ 583.264150][T10919] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.377304][T10919] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #17: comm syz.0.2031: inode has both inline data and extents flags [ 583.396211][T10919] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2031: couldn't read orphan inode 17 (err -117) [ 583.518798][T10919] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.768224][T10935] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2038'. [ 584.709439][T10909] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 585.270115][T10949] device syzkaller0 entered promiscuous mode [ 585.283500][T10949] tipc: Enabling of bearer rejected, failed to enable media [ 585.369821][T10951] device syzkaller0 entered promiscuous mode [ 586.669466][T10965] loop6: detected capacity change from 0 to 512 [ 586.737682][T10965] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 586.824289][ T26] audit: type=1326 audit(1787265576.216:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 586.918068][ T26] audit: type=1326 audit(1787265576.226:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 586.945258][ T26] audit: type=1326 audit(1787265576.226:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 586.956855][T10965] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #17: comm syz.6.2048: inode has both inline data and extents flags [ 586.972342][ T26] audit: type=1326 audit(1787265576.226:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.015685][ T26] audit: type=1326 audit(1787265576.226:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.044716][ T26] audit: type=1326 audit(1787265576.226:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.071589][T10965] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2048: couldn't read orphan inode 17 (err -117) [ 587.088213][ T26] audit: type=1326 audit(1787265576.226:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.105907][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 587.119192][T10965] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 587.148534][ T26] audit: type=1326 audit(1787265576.256:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.201201][ T26] audit: type=1326 audit(1787265576.256:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.246574][ T26] audit: type=1326 audit(1787265576.256:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.4.2052" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0029840d9 code=0x7ffc0000 [ 587.324048][T10989] device syzkaller0 entered promiscuous mode [ 587.425047][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 588.340132][ T8977] Bluetooth: Wrong link type (-22) [ 589.625173][T11004] netlink: 'syz.4.2062': attribute type 7 has an invalid length. [ 590.492763][T11013] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2066'. [ 590.688436][T11021] loop6: detected capacity change from 0 to 512 [ 590.738196][T11021] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.773268][T11023] device syzkaller0 entered promiscuous mode [ 590.808293][T11023] tipc: Enabling of bearer rejected, failed to enable media [ 590.831136][T11021] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #17: comm syz.6.2070: inode has both inline data and extents flags [ 590.846010][T11021] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2070: couldn't read orphan inode 17 (err -117) [ 590.863137][T11021] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 593.065231][T11054] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2081'. [ 593.939095][T11059] rxrpc: Assertion failed - 5(0x5) == 11(0xb) is false [ 594.078424][T11059] ------------[ cut here ]------------ [ 594.182398][T11059] kernel BUG at net/rxrpc/call_object.c:689! [ 594.328082][T11059] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 594.334320][T11059] CPU: 1 PID: 11059 Comm: syz.6.2083 Not tainted syzkaller #0 [ 594.343373][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.353652][T11059] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 594.359607][T11059] Code: e8 b6 96 74 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 c0 93 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 40 94 34 8b e8 31 8b b1 00 <0f> 0b e8 8a 96 74 f8 48 c7 c7 a0 94 34 8b e8 1e 8b b1 00 0f 0b 66 [ 594.379360][T11059] RSP: 0018:ffffc9000318f7d8 EFLAGS: 00010246 [ 594.385474][T11059] RAX: 0000000000000034 RBX: ffff888094f0e4c0 RCX: 821d0583129c4e00 [ 594.393481][T11059] RDX: ffffc90011cd6000 RSI: 0000000000004939 RDI: 000000000000493a [ 594.401485][T11059] RBP: ffff888094f0e4c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 594.409677][T11059] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888094f0e198 [ 594.417860][T11059] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 594.426134][T11059] FS: 00007f693c35a6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 594.435196][T11059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.442087][T11059] CR2: 00007fc002bd2458 CR3: 000000001e7cc000 CR4: 00000000003506e0 [ 594.450190][T11059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.458210][T11059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 594.466243][T11059] Call Trace: [ 594.469573][T11059] [ 594.472548][T11059] rxrpc_service_prealloc_one+0xa1a/0xef0 [ 594.478409][T11059] ? rxrpc_user_charge_accept+0xb4/0xe0 [ 594.484514][T11059] rxrpc_user_charge_accept+0xb4/0xe0 [ 594.490031][T11059] rxrpc_do_sendmsg+0x7c3/0x10c0 [ 594.495372][T11059] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 594.501407][T11059] ? rcu_lock_release+0x20/0x20 [ 594.506313][T11059] ? __local_bh_enable_ip+0x136/0x1c0 [ 594.511807][T11059] ? _local_bh_enable+0xa0/0xa0 [ 594.517248][T11059] ? rxrpc_sendmsg+0x36b/0x890 [ 594.522227][T11059] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 594.527631][T11059] ? rxrpc_getsockopt+0x150/0x150 [ 594.532698][T11059] ____sys_sendmsg+0x5be/0x8f0 [ 594.537592][T11059] ? __sys_sendmsg_sock+0x30/0x30 [ 594.542867][T11059] ? import_iovec+0x6f/0xa0 [ 594.547452][T11059] ___sys_sendmsg+0x236/0x2e0 [ 594.552272][T11059] ? __sys_sendmsg+0x290/0x290 [ 594.557481][T11059] __se_sys_sendmsg+0x1b7/0x2a0 [ 594.562459][T11059] ? __x64_sys_sendmsg+0x80/0x80 [ 594.567694][T11059] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 594.574011][T11059] ? lockdep_hardirqs_on+0x94/0x140 [ 594.579661][T11059] do_syscall_64+0x4c/0xa0 [ 594.584294][T11059] ? clear_bhb_loop+0x30/0x80 [ 594.589093][T11059] ? clear_bhb_loop+0x30/0x80 [ 594.593984][T11059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 594.599927][T11059] RIP: 0033:0x7f693e1020d9 [ 594.604394][T11059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.624253][T11059] RSP: 002b:00007f693c35a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.633137][T11059] RAX: ffffffffffffffda RBX: 00007f693e389fa0 RCX: 00007f693e1020d9 [ 594.641292][T11059] RDX: 0000000000004004 RSI: 0000200000000100 RDI: 0000000000000003 [ 594.649423][T11059] RBP: 00007f693e199024 R08: 0000000000000000 R09: 0000000000000000 [ 594.657445][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.665511][T11059] R13: 00007f693e38a038 R14: 00007f693e389fa0 R15: 00007fff360fc4d8 [ 594.673627][T11059] [ 594.676717][T11059] Modules linked in: [ 594.818036][T11063] process 'syz.5.2084' launched './file0' with NULL argv: empty string added [ 594.989200][T11059] ---[ end trace fd1171600db464c2 ]--- [ 595.001619][T11059] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 595.007692][T11059] Code: e8 b6 96 74 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 c0 93 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 40 94 34 8b e8 31 8b b1 00 <0f> 0b e8 8a 96 74 f8 48 c7 c7 a0 94 34 8b e8 1e 8b b1 00 0f 0b 66 [ 595.031825][T11067] loop4: detected capacity change from 0 to 512 [ 595.038821][T11059] RSP: 0018:ffffc9000318f7d8 EFLAGS: 00010246 [ 595.045411][T11059] RAX: 0000000000000034 RBX: ffff888094f0e4c0 RCX: 821d0583129c4e00 [ 595.053843][T11059] RDX: ffffc90011cd6000 RSI: 0000000000004939 RDI: 000000000000493a [ 595.062017][T11059] RBP: ffff888094f0e4c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 595.071246][T11059] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888094f0e198 [ 595.079612][T11059] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 595.089515][T11059] FS: 00007f693c35a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 595.098811][T11067] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.109327][T11059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.116220][T11059] CR2: 00007fbff87fb000 CR3: 000000001e7cc000 CR4: 00000000003506f0 [ 595.124831][T11059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.133393][T11059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.142048][T11059] Kernel panic - not syncing: Fatal exception [ 595.148455][T11059] Kernel Offset: disabled [ 595.152801][T11059] Rebooting in 86400 seconds..