last executing test programs: 2m9.62642009s ago: executing program 2 (id=972): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040004) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1341696c75ae59ef60d6651e533427c321931342789e9ecca6cdcaed44b9203b1b", @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='neigh_update\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x2d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffdd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a0101000000000000000001000000"], 0xac}}, 0x0) close(r2) 2m7.743614217s ago: executing program 2 (id=980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m7.594586193s ago: executing program 2 (id=982): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYBLOB="00000000000000c545f956b5743869007b8af8ff00000000bfa200000000000007020000f8ffffffb703000108000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) 2m7.37811524s ago: executing program 2 (id=986): openat(0xffffffffffffff9c, 0x0, 0x129241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x8) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) 2m4.110632533s ago: executing program 2 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 2m2.876607698s ago: executing program 2 (id=1004): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 2m2.429784742s ago: executing program 32 (id=1004): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 1m17.798246806s ago: executing program 1 (id=1142): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000040000"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) 1m17.146069234s ago: executing program 1 (id=1144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001240)="911a995f86574c05757e9ef8b24c8005604ab304ca96ed3c743bd74e73de9368f18861a94ae6772a998c489b83a7d73d5ba9c2abe1cc4037e85c557122b962d722d61a0ae93ef1d7cf858a1422a68bf75119f0f9df682c6d58a3685beee7485d1bf40c9652fc8a69984407373a0c85562cc8a6892b7e954b799ddd1877cb79284fd090b2429f2f38975d56a7321ffe1b4a3d4379c7c72fd205cf51eccb7542d19c8ab880e4952766f3d1639cf3fabe53f0d7fd713e0a9125d36c36f5a3bf4b29a4a9bb2d4e290d196dd5b673eb7d625e3a1947011959a96799f11ee50405a013a6971e6b8ee135f07aba87a26a0642", 0xef}, {&(0x7f00000009c0)="dfa0bc5257bd0b0fa14d9b0586632a86dc01cb714bff8daab07252c6c4f281ebe583ae9c374ab002a6e20b1ea069a7e580a32db65cb8c448bd18e298b8f0563619b131ad95834bbce58d453c4e167b542038ad5da49ca99c7bd8e9dd3215153b08d6d75a408a8394583bb2f313a3463bc3f70d3e465ad08663ff1a7492318a2a5ebe8ec98b8d1172b0b16647b6045446accd77af242a32b77bc3b8d8cdccda98285b8cf669088fb7fb1cdf67c40ba7eb89783d476e7d3077292512ef96c569f6d40c79bfee78a0510cb3e00e10f8b3bd9b14875d0bb53566185f6c8513acfbfc6bce36384da4f58aa3aec3ba429cb598471472c5bcd4", 0xf6}, {&(0x7f0000000ac0)="e1b7e5e5ed072893487722d93ae5148f8fbfc00174e292b01a523495a8337f6338cec42bbf7596ca60ffa58084f6d9c418f561939cb5de01640d1ce9f6001fe0d7d21893696f0005dcf400703ec4d4ac7ae4d924a6b2249014505e1bfd5d567ba018d018546cdf285604a2bad378d301160b251b871b8b32b585bfeb5a24e31bb087b76992423fed0f78139e910ed451faed57e8ce08d89d3c51f7ba14efbabc962991e0424cf0ca54a4b50aceedde994803f0c129214c", 0xb7}, {&(0x7f0000000b80)="631940239aa1390eb7364996bb0e30043599876e2a57925280483a2dc5e4bc54d7dbe38536a3093e49a65400ebf8a799de89d35cbe9197f4b7feb08a137437475f871d34a7cd42ddfb51a0f35dcb67138d10fa18d7b67e1189eab53ef3f3098a48bf64f365f925b726b4d3d87f85aad8a6256da6a5be6eb1f397cf6831c319890dbeed59ad4caf9557c0ceb6fde01bbeb68483e81f05e5dc722b", 0x9a}, {&(0x7f0000000500)="a2477e284653dcd0189d73010fe052bd099b5dcac526ce27211077c2e21bc5d4cb62dacced3392a5473f052189cfe9e77b06d1d44802d377a75b966d2877b14851b36b68b682", 0x46}, {&(0x7f0000000d40)="d57bd5532d215a7d8559b31c6e4b90690ed12a7206e4b1d2648b837385e064ec5536e80a50f44efb9bacb87057be08bb8bd7824a70c183d949b26e002db16717d52fc4adaaa107f88c7cd609ae820b417142fdc96ea84e54ab13ff6cc878c15fb5ff18d934c71f689173930c07e35c5ad4bf042af3c59f92ccd4", 0x7a}, {&(0x7f0000001000)="ff89db37d7839bbb4d4dac1780fb5050a66f3772dbd15eaad9a4a8e19948d4992142413bb5706cce7b74651cfd3cb40abb3ea1973e629190107c9ed61b351390378646d10db64cf9639536d92e05e4d95d4d7560d2eccb143bbfc32d1a6c1bc9866d7ec1a741be216297dfa95227591280f02c5d0a96b39cbc73682b2f0cdd9e3e60cb17c9efb2baaa02c8d56a40f553a712cd119b30379aec66005d25628df699241f863a31eba52505942c6446f18ab17669d264e0ea9db49aacdb3e470a796bc9d54f49b6e27c198fcf5443a45b479659095623", 0xd5}, {&(0x7f0000000380)="538a1b2deb90b7b8196656f8e1f17629a6410b4759d9f4e55b4540380cbb79", 0x1f}], 0x8}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="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", 0x185}, {&(0x7f0000001440)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a", 0x78}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m16.793571108s ago: executing program 1 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) syz_emit_ethernet(0x1162, &(0x7f0000001b00)=ANY=[], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01dfffffff9a260000"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x4000, 0x0, 0xf, 0x8}, {0x8, 0x8, 0x9, 0x8}, {0x0, 0x9, 0x31, 0x3ff}, {0x3, 0x9, 0x5d}, {0x6, 0x5, 0x2e, 0x8}, {0x5, 0x2, 0x7f, 0xa}, {0xffff, 0x7, 0xa, 0x7}, {0x8, 0x3, 0x3, 0x80}, {0x4, 0x4, 0x7f, 0x7}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") 1m12.730783891s ago: executing program 1 (id=1152): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x5) 1m12.540236856s ago: executing program 1 (id=1153): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000001740)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000001780)={0x7f, {{0xa, 0x4e24, 0x80000001, @local, 0x7}}}, 0x88) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020000008500000086"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r5, r3, 0x4, r2}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001840)={0x0, 0x5, 0xdea76a90aacc0997, [0x3, 0x6, 0x3ff, 0x4, 0x7], [0x8, 0x1, 0x4, 0x401, 0xb5, 0x7fffffff, 0x4, 0x5, 0x8000000000000001, 0x9, 0x1a97, 0x6, 0xffffffffffffb2e7, 0x30a, 0x0, 0x100000000, 0xff, 0xf, 0x2, 0xfffffffffffffffe, 0x838, 0x1030, 0x0, 0x40000, 0x7, 0xffff, 0x80000000, 0x2, 0x83b, 0x5, 0x60000000000, 0xde6, 0x8, 0x2, 0xea, 0x7, 0x100, 0x2, 0x379135f5, 0x5, 0x1583, 0x4, 0x6, 0xfffffffffffffff9, 0x3, 0x8, 0x9, 0x0, 0x8000, 0x1, 0x0, 0xffffffff, 0x6, 0x7fffffffffffffff, 0xfffffffffffffff7, 0x5, 0x8, 0x8001, 0x5, 0xc0e, 0x6, 0x8, 0x7f, 0x5, 0xadc, 0x1, 0x8, 0x114, 0xd1, 0x8, 0x2, 0x1, 0x5, 0xf, 0x0, 0x0, 0x3, 0x17, 0x5, 0x5, 0x3, 0x5, 0x6, 0xf, 0x80, 0x7, 0x8, 0x1000, 0xfffffffffffffffa, 0x7, 0x6, 0x54b, 0x10, 0x8, 0x3, 0x7, 0xa996, 0xc0, 0x7f0, 0x10001, 0x1, 0x5, 0xff, 0x7fffffffffffffff, 0x10, 0x7fffffff, 0x3, 0x8001, 0x400, 0xffffffffffffff32, 0x9, 0xfffffffffffffc56, 0x5, 0x81, 0x7f, 0x7ff, 0x6, 0x8000000000000000, 0xfd6f4f2, 0x5, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001c80)={r8, 0x6, 0x2ae9}) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x7ff, @vifc_lcl_addr=@remote, @broadcast}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1b, 0x11, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r12, 0x0, 0xe, 0x0, &(0x7f0000001a00)="000000000000000062385ba988a8", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x7142, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x4) sendfile(r13, r13, 0x0, 0x7a680000) 1m11.610602325s ago: executing program 1 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 55.52800317s ago: executing program 33 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 30.267961483s ago: executing program 4 (id=1280): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="f5ffffff000000008f000000000000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) 28.594046385s ago: executing program 3 (id=1288): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x5, &(0x7f0000000080)={0x0, 0x2, 0x87fd, 0xfffffffffffffff6}) 26.813319227s ago: executing program 3 (id=1290): pipe(&(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 26.038627897s ago: executing program 4 (id=1291): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 25.106331829s ago: executing program 3 (id=1294): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000500)={0x0, 0x3, 0x7fff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'veth0_vlan\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004000) socket(0x1e, 0x1, 0xfff) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x20) 23.824897673s ago: executing program 3 (id=1298): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000200)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727365743d757466382c757466383d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c646973636172642c00512733c8ef1654be3cad5b8bbe4f"], 0x1, 0x369, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000340)='./file2/file0\x00', 0x2a, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 23.613968207s ago: executing program 4 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe800000000000"], 0x10da) 22.255384854s ago: executing program 4 (id=1302): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5af94d74c6eb627a4698ba3a442df444", 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x1}, 0x68, {0x2, 0x4e20, @loopback}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(0xffffffffffffffff, 0xffffffff, 0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004891}, 0x40084) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r3, &(0x7f00000057c0), 0x2, 0x10000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3b000300010006", 0x7) 20.810079045s ago: executing program 3 (id=1305): pipe(&(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 20.598324137s ago: executing program 4 (id=1306): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001240)="911a995f86574c05757e9ef8b24c8005604ab304ca96ed3c743bd74e73de9368f18861a94ae6772a998c489b83a7d73d5ba9c2abe1cc4037e85c557122b962d722d61a0ae93ef1d7cf858a1422a68bf75119f0f9df682c6d58a3685beee7485d1bf40c9652fc8a69984407373a0c85562cc8a6892b7e954b799ddd1877cb79284fd090b2429f2f38975d56a7321ffe1b4a3d4379c7c72fd205cf51eccb7542d19c8ab880e4952766f3d1639cf3fabe53f0d7fd713e0a9125d36c36f5a3bf4b29a4a9bb2d4e290d196dd5b673eb7d625e3a1947011959a96799f11ee50405a013a6971e6b8ee135f07aba87a26a0642", 0xef}, {&(0x7f00000009c0)="dfa0bc5257bd0b0fa14d9b0586632a86dc01cb714bff8daab07252c6c4f281ebe583ae9c374ab002a6e20b1ea069a7e580a32db65cb8c448bd18e298b8f0563619b131ad95834bbce58d453c4e167b542038ad5da49ca99c7bd8e9dd3215153b08d6d75a408a8394583bb2f313a3463bc3f70d3e465ad08663ff1a7492318a2a5ebe8ec98b8d1172b0b16647b6045446accd77af242a32b77bc3b8d8cdccda98285b8cf669088fb7fb1cdf67c40ba7eb89783d476e7d3077292512ef96c569f6d40c79bfee78a0510cb3e00e10f8b3bd9b14875d0bb53566185f6c8513acfbfc6bce36384da4f58aa3aec3ba429cb598471472c5bcd4", 0xf6}, {&(0x7f0000000ac0)="e1b7e5e5ed072893487722d93ae5148f8fbfc00174e292b01a523495a8337f6338cec42bbf7596ca60ffa58084f6d9c418f561939cb5de01640d1ce9f6001fe0d7d21893696f0005dcf400703ec4d4ac7ae4d924a6b2249014505e1bfd5d567ba018d018546cdf285604a2bad378d301160b251b871b8b32b585bfeb5a24e31bb087b76992423fed0f78139e910ed451faed57e8ce08d89d3c51f7ba14efbabc962991e0424cf0ca54a4b50aceedde994803f0c129214c", 0xb7}, {&(0x7f0000000b80)="631940239aa1390eb7364996bb0e30043599876e2a57925280483a2dc5e4bc54d7dbe38536a3093e49a65400ebf8a799de89d35cbe9197f4b7feb08a137437475f871d34a7cd42ddfb51a0f35dcb67138d10fa18d7b67e1189eab53ef3f3098a48bf64f365f925b726b4d3d87f85aad8a6256da6a5be6eb1f397cf6831c319890dbeed59ad4caf9557c0ceb6fde01bbeb68483e81f05e5dc722b", 0x9a}, {&(0x7f0000000d40)="d57bd5532d215a7d8559b31c6e4b90690ed12a7206e4b1d2648b837385e064ec5536e80a50f44efb9bacb87057be08bb8bd7824a70c183d949b26e002db16717d52fc4adaaa107f88c7cd609ae820b417142fdc96ea84e54ab13ff6cc878c15fb5ff18d934c71f689173930c07e35c5ad4bf042af3c59f92ccd4fff951d7b1b378fd5b1069d8f47667fd12", 0x8b}, {&(0x7f0000001000)="ff89db37d7839bbb4d4dac1780fb5050a66f3772dbd15eaad9a4a8e19948d4992142413bb5706cce7b74651cfd3cb40abb3ea1973e629190107c9ed61b351390378646d10db64cf9639536d92e05e4d95d4d7560d2eccb143bbfc32d1a6c1bc9866d7ec1a741be216297dfa95227591280f02c5d0a96b39cbc73682b2f0cdd9e3e60cb17c9efb2baaa02c8d56a40f553a712cd119b30379aec66005d25628df699241f863a31eba52505942c6446f18ab17669d264e0ea9db49aacdb3e470a796bc9d54f49b6e27c198fcf5443a45b479659095623", 0xd5}, {&(0x7f0000000380)="538a1b2deb90b7b8196656f8e1f17629a6410b4759d9f4e55b4540380cbb79", 0x1f}], 0x7}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="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", 0x185}, {&(0x7f0000001440)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a", 0x78}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 19.218578944s ago: executing program 4 (id=1308): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf35", 0x11}], 0x2) 17.513830293s ago: executing program 3 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe800000000000"], 0x10da) 16.122998102s ago: executing program 5 (id=1317): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5af94d74c6eb627a4698ba3a442df444", 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x1}, 0x68, {0x2, 0x4e20, @loopback}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(0xffffffffffffffff, 0xffffffff, 0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004891}, 0x40084) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r3, &(0x7f00000057c0), 0x2, 0x10000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3b000300010006", 0x7) 15.166086498s ago: executing program 5 (id=1320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 11.251512792s ago: executing program 5 (id=1325): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 10.422672224s ago: executing program 5 (id=1326): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x181) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140100001600010028bd7000fddbdf25fe8000000000000000000000000000bbfe80000000000000000000000000002e4e2200024e2400000a0000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000230000000000000004d233000001fe8000000000000000000000000000aaffffffff0000000001040000000000000400000000000000dbc60000000000000101000000000000cedd197900eeff0007000000000000000200000000000000ea7b00000000000000c8fe00000000000900000000000000050000000000000005000000040000000700000025bd7000023500000a0000081c0000000000000003000000010000800c0015005b07350006000000080016000b00000008001f0002000035"], 0x114}}, 0x8480) socket$inet6(0xa, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) sendto$inet6(r1, &(0x7f0000000080)="d3521f9e6f6ad1d1bf7b86adf67cc7973af6f67aa9225dbe589207cf8ae081e2f822cfac3476b874290565263cbecab4fcf4b7f8271629cc5e", 0x39, 0x40010, &(0x7f00000000c0)={0xa, 0x4e22, 0xe, @mcast1, 0xc49}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fstat(r4, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, r5, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 9.625972993s ago: executing program 0 (id=1328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0b000291"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_012={0x1, 0x2, 0x7, ')'}]}}, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') 8.696935714s ago: executing program 5 (id=1331): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5af94d74c6eb627a4698ba3a442df444", 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x1}, 0x68, {0x2, 0x4e20, @loopback}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(0xffffffffffffffff, 0xffffffff, 0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004891}, 0x40084) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r3, &(0x7f00000057c0), 0x2, 0x10000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3b000300010006", 0x7) 8.502875809s ago: executing program 5 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0xfffffffffffffffe, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)={0x6, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0x1, 0x98, &(0x7f0000000580)=""/152}, {0xeeee8000, 0xa1, &(0x7f0000000a00)=""/161}, {0x8080000, 0x5d, &(0x7f0000000ac0)=""/93}, {0x1, 0x5c, &(0x7f0000000b40)=""/92}, {0x1, 0x55, &(0x7f0000000bc0)=""/85}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 8.14299858s ago: executing program 0 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 3.84582206s ago: executing program 34 (id=1308): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf35", 0x11}], 0x2) 3.782699302s ago: executing program 0 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 3.691529284s ago: executing program 6 (id=1338): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={[&(0x7f0000000240)='\x00']}, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getpgrp(r2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setns(0xffffffffffffffff, 0x24020000) close_range(r5, 0xffffffffffffffff, 0x0) 2.427061585s ago: executing program 6 (id=1339): pipe(&(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.332110427s ago: executing program 35 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe800000000000"], 0x10da) 1.927643579s ago: executing program 0 (id=1341): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000100)={[{@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000180)='./bus\x00', 0x90) 1.429748979s ago: executing program 6 (id=1342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001240)="911a995f86574c05757e9ef8b24c8005604ab304ca96ed3c743bd74e73de9368f18861a94ae6772a998c489b83a7d73d5ba9c2abe1cc4037e85c557122b962d722d61a0ae93ef1d7cf858a1422a68bf75119f0f9df682c6d58a3685beee7485d1bf40c9652fc8a69984407373a0c85562cc8a6892b7e954b799ddd1877cb79284fd090b2429f2f38975d56a7321ffe1b4a3d4379c7c72fd205cf51eccb7542d19c8ab880e4952766f3d1639cf3fabe53f0d7fd713e0a9125d36c36f5a3bf4b29a4a9bb2d4e290d196dd5b673eb7d625e3a1947011959a96799f1", 0xda}, {&(0x7f0000000ac0)="e1b7e5e5ed072893487722d93ae5148f8fbfc00174e292b01a523495a8337f6338cec42bbf7596ca60ffa58084f6d9c418f561939cb5de01640d1ce9f6001fe0d7d21893696f0005dcf400703ec4d4ac7ae4d924a6b2249014505e1bfd5d567ba018d018546cdf285604a2bad378d301160b251b871b8b32b585bfeb5a24e31bb087b76992423fed0f78139e910ed451faed57e8ce08d89d3c51f7ba14efbabc962991e0424cf0ca54a4b50aceedde99", 0xb0}, {&(0x7f0000000b80)="631940239aa1390eb7364996bb0e30043599876e2a57925280483a2dc5e4bc54d7dbe38536a3093e49a65400ebf8a799de89d35cbe9197f4b7feb08a137437475f871d34a7cd42ddfb51a0f35dcb67138d10fa18d7b67e1189eab53ef3f3098a48bf64f365f925b726b4d3d87f85aad8a6256da6a5be6eb1f397cf6831c319890dbeed59ad4caf9557c0ceb6fde01bbeb68483e81f05e5dc722b3901", 0x9c}, {&(0x7f0000000500)="a2477e284653dcd0189d73010fe052bd099b5dcac526ce27211077c2e21bc5d4cb62dacced3392a5473f052189cfe9e77b06d1d44802d377a75b966d2877b14851b36b68b682", 0x46}, {&(0x7f0000000d40)="d57bd5532d215a7d8559b31c6e4b90690ed12a7206e4b1d2648b837385e064ec5536e80a50f44efb9bacb87057be08bb8bd7824a70c183d949b26e002db16717d52fc4adaaa107f88c7cd609ae820b417142fdc96ea84e54ab13ff6cc878c15fb5ff18d934c71f689173930c07e35c5ad4bf042af3c59f92ccd4fff951d7b1b378fd5b1069d8f4", 0x87}, {&(0x7f0000001000)="ff89db37d7839bbb4d4dac1780fb5050a66f3772dbd15eaad9a4a8e19948d4992142413bb5706cce7b74651cfd3cb40abb3ea1973e629190107c9ed61b351390378646d10db64cf9639536d92e05e4d95d4d7560d2eccb143bbfc32d1a6c1bc9866d7ec1a741be216297dfa95227591280f02c5d0a96b39cbc73682b2f0cdd9e3e60cb17c9efb2baaa02c8d56a40f553a712cd119b30379aec66005d25628df699241f863a31eba52505942c6446f18ab17669d264e0ea9db49aacdb3e470a796bc9d54f49b6e27c198fcf5443a45b4796590956", 0xd4}, {&(0x7f0000000380)="538a1b2deb90b7b8196656f8e1", 0xd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f00000006c0)="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", 0x1c2}, {&(0x7f0000001440)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a8", 0xee}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.415909965s ago: executing program 0 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.293908348s ago: executing program 6 (id=1344): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x380, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0) 1.183277385s ago: executing program 6 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0xa, 0x3, 0x3a) 42.426121ms ago: executing program 6 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xd, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b88", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) kernel console output (not intermixed with test programs): 174.834444][ T7540] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.860151][ T7540] EXT4-fs (loop1): 1 truncate cleaned up [ 174.883715][ T7540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.160226][ T7549] netlink: 'syz.3.584': attribute type 16 has an invalid length. [ 176.168036][ T7549] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.584'. [ 176.780995][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.043130][ T6481] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 177.046042][ T7561] netlink: 300 bytes leftover after parsing attributes in process `syz.3.590'. [ 177.129947][ T3156] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.216458][ T6481] usb 6-1: config 1 interface 0 has no altsetting 0 [ 177.242631][ T6481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.260746][ T6481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.281990][ T6481] usb 6-1: Product: syz [ 177.292821][ T6481] usb 6-1: Manufacturer: syz [ 177.305549][ T6481] usb 6-1: SerialNumber: syz [ 177.309672][ T7572] macvlan4: entered allmulticast mode [ 177.326251][ T3156] usb 3-1: Using ep0 maxpacket: 32 [ 177.341089][ T3156] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.349449][ T7572] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 177.366472][ T3156] usb 3-1: config 0 has no interface number 0 [ 177.381445][ T7572] team0: Port device macvlan4 added [ 177.386802][ T3156] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 177.475636][ T3156] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.491644][ T3156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.513067][ T3156] usb 3-1: Product: syz [ 177.517241][ T3156] usb 3-1: Manufacturer: syz [ 177.545091][ T3156] usb 3-1: SerialNumber: syz [ 177.585981][ T3156] usb 3-1: config 0 descriptor?? [ 177.611567][ T3156] smsc95xx v2.0.0 [ 177.615221][ T3156] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 177.655433][ T3156] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 177.747197][ T6481] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 177.782570][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 177.782586][ T30] audit: type=1326 audit(1746327447.282:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.3.596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca9158e969 code=0x0 [ 177.996996][ T7587] loop1: detected capacity change from 0 to 256 [ 178.014444][ T7587] exfat: Deprecated parameter 'utf8' [ 178.029801][ T7587] exfat: Deprecated parameter 'utf8' [ 178.058785][ T7587] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 179.330778][ T7601] loop1: detected capacity change from 0 to 512 [ 179.379786][ T7601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 179.389509][ T7601] System zones: 0-2, 18-18, 34-34 [ 179.419059][ T7601] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.601: bg 0: block 248: padding at end of block bitmap is not set [ 179.439399][ T7601] Quota error (device loop1): write_blk: dquota write failed [ 179.447770][ T7601] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 179.461555][ T7601] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.601: Failed to acquire dquot type 1 [ 179.495400][ T7601] EXT4-fs (loop1): 1 truncate cleaned up [ 179.504203][ T7601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.516838][ T7601] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.712501][ C0] usblp0: nonzero write bulk status received: -71 [ 179.719737][ T6474] usb 6-1: USB disconnect, device number 4 [ 179.756067][ T7550] usblp0: removed [ 180.571106][ T6487] usb 3-1: USB disconnect, device number 5 [ 180.587194][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.897099][ T7620] loop1: detected capacity change from 0 to 1024 [ 180.944006][ T7620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.046653][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.607754][ T7609] vxcan1 speed is unknown, defaulting to 1000 [ 182.814959][ T7634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.822376][ T7634] IPv6: NLM_F_CREATE should be set when creating new route [ 183.244751][ T7646] loop5: detected capacity change from 0 to 512 [ 183.310777][ T7646] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 184.697075][ T6480] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 185.714514][ T6480] usb 2-1: config 1 interface 0 has no altsetting 0 [ 185.764362][ T6480] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.807256][ T6480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.835609][ T6480] usb 2-1: Product: syz [ 185.839784][ T6480] usb 2-1: Manufacturer: syz [ 185.879914][ T6480] usb 2-1: SerialNumber: syz [ 186.272007][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 186.916539][ T7675] syz.5.620 (7675) used greatest stack depth: 20048 bytes left [ 186.924771][ T7676] loop3: detected capacity change from 0 to 512 [ 187.200863][ T6480] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 187.260333][ T6481] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.331257][ T7676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.344388][ T7676] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.008474][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.074478][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.126655][ T6481] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.188244][ T6481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.267514][ T6481] usb 1-1: config 0 descriptor?? [ 188.933668][ T7692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.941031][ T7692] IPv6: NLM_F_CREATE should be set when creating new route [ 189.367468][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.490587][ T6471] usb 2-1: USB disconnect, device number 5 [ 189.529245][ T6471] usblp0: removed [ 189.541702][ T6481] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 189.569985][ T6481] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 189.598087][ T6481] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 189.628333][ T6481] usb 1-1: USB disconnect, device number 6 [ 189.802924][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 190.018807][ T7706] loop5: detected capacity change from 0 to 512 [ 190.193123][ T7706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.206198][ T7706] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.553311][ T7716] netlink: 'syz.1.635': attribute type 16 has an invalid length. [ 191.561934][ T7716] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.635'. [ 191.979072][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.557679][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.856889][ T6487] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 194.135776][ T7752] loop4: detected capacity change from 0 to 256 [ 195.901189][ T6487] usb 2-1: config 1 interface 0 has no altsetting 0 [ 195.985407][ T6487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.971460][ T6487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.979486][ T6487] usb 2-1: Product: syz [ 196.999913][ T6487] usb 2-1: Manufacturer: syz [ 197.004526][ T6487] usb 2-1: SerialNumber: syz [ 197.295402][ T7760] loop0: detected capacity change from 0 to 16 [ 197.303201][ T6487] usb 2-1: can't set config #1, error -71 [ 197.313706][ T7760] erofs (device loop0): unidentified algorithms fff0, please upgrade kernel [ 197.329078][ T6487] usb 2-1: USB disconnect, device number 6 [ 197.565206][ T7767] loop3: detected capacity change from 0 to 256 [ 197.699463][ T7767] FAT-fs (loop3): Directory bread(block 64) failed [ 197.731418][ T7767] FAT-fs (loop3): Directory bread(block 65) failed [ 197.759638][ T7767] FAT-fs (loop3): Directory bread(block 66) failed [ 197.813996][ T7767] FAT-fs (loop3): Directory bread(block 67) failed [ 197.882450][ T7767] FAT-fs (loop3): Directory bread(block 68) failed [ 197.917776][ T7767] FAT-fs (loop3): Directory bread(block 69) failed [ 197.951895][ T7767] FAT-fs (loop3): Directory bread(block 70) failed [ 197.990058][ T7767] FAT-fs (loop3): Directory bread(block 71) failed [ 198.030374][ T7767] FAT-fs (loop3): Directory bread(block 72) failed [ 198.061600][ T7767] FAT-fs (loop3): Directory bread(block 73) failed [ 199.002632][ T7783] vxcan1 speed is unknown, defaulting to 1000 [ 199.577688][ T30] audit: type=1326 audit(1746327469.072:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 199.642274][ T30] audit: type=1326 audit(1746327469.072:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 199.695116][ T30] audit: type=1326 audit(1746327469.072:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 199.779949][ T30] audit: type=1326 audit(1746327469.072:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 199.810528][ T6487] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 199.869899][ T30] audit: type=1326 audit(1746327469.072:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 199.944045][ T30] audit: type=1326 audit(1746327469.072:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 200.001964][ T6487] usb 6-1: config 1 interface 0 has no altsetting 0 [ 200.017454][ T6487] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.022840][ T30] audit: type=1326 audit(1746327469.132:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb17b8e969 code=0x7ffc0000 [ 200.042096][ T6487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.096791][ T6487] usb 6-1: Product: syz [ 200.115586][ T6487] usb 6-1: Manufacturer: syz [ 200.130048][ T6487] usb 6-1: SerialNumber: syz [ 200.416247][ T7809] netlink: 'syz.0.668': attribute type 15 has an invalid length. [ 200.665446][ T6487] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 200.688233][ T7816] bridge_slave_0: left allmulticast mode [ 200.703525][ T7816] bridge_slave_0: left promiscuous mode [ 200.727260][ T7817] loop4: detected capacity change from 0 to 2048 [ 200.729328][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.984565][ T7817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.013186][ T7816] bridge_slave_1: left allmulticast mode [ 201.041996][ T7816] bridge_slave_1: left promiscuous mode [ 201.066646][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.139465][ T7825] loop0: detected capacity change from 0 to 256 [ 201.152708][ T7825] vfat: Unknown parameter 'ÿÿÿÿ' [ 202.013011][ T7817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.672: bg 0: block 234: padding at end of block bitmap is not set [ 202.044590][ T7817] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 54 with error 28 [ 202.057387][ T7817] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.057387][ T7817] [ 202.104680][ T7817] EXT4-fs (loop4): Total free blocks count 0 [ 202.130347][ T7817] EXT4-fs (loop4): Free/Dirty block details [ 202.175857][ T7817] EXT4-fs (loop4): free_blocks=0 [ 202.234322][ T7817] EXT4-fs (loop4): dirty_blocks=64 [ 202.256625][ T7817] EXT4-fs (loop4): Block reservation details [ 202.391659][ T7816] bond0: (slave bond_slave_0): Releasing backup interface [ 202.420749][ T7817] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 202.463337][ T7816] bond_slave_0: left allmulticast mode [ 202.483443][ T7816] bond_slave_0: left promiscuous mode [ 202.552405][ T7816] bond0: (slave bond_slave_1): Releasing backup interface [ 202.602558][ T7816] bond_slave_1: left allmulticast mode [ 202.627857][ T7816] bond_slave_1: left promiscuous mode [ 202.641665][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.696064][ T7816] team0: Port device team_slave_0 removed [ 202.733129][ T7816] team0: Port device team_slave_1 removed [ 202.755107][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.788622][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.815608][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.837506][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.922015][ T7816] team0: Port device macvlan2 removed [ 202.948501][ T7816] team0: Port device macvlan3 removed [ 202.978478][ T7816] bond1: (slave veth3): Releasing backup interface [ 203.048715][ T7816] bond0: left allmulticast mode [ 203.110185][ T7816] team0: Port device macvlan4 removed [ 203.122212][ T6470] usb 6-1: USB disconnect, device number 5 [ 203.197755][ T6470] usblp0: removed [ 203.454126][ T7838] loop5: detected capacity change from 0 to 256 [ 203.496768][ T7838] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 203.525728][ T7838] exFAT-fs (loop5): error, data size is invalid(10) [ 203.534661][ T7838] exFAT-fs (loop5): Filesystem has been set read-only [ 203.929813][ T7842] exFAT-fs (loop5): error, data size is invalid(10) [ 207.029434][ T7851] vxcan1 speed is unknown, defaulting to 1000 [ 207.295837][ T5828] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.367359][ T7865] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 207.461290][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 207.497461][ T5828] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 207.510295][ T5828] usb 6-1: config 0 has no interface number 0 [ 207.527127][ T7867] tipc: Started in network mode [ 207.551081][ T7867] tipc: Node identity ac14140f, cluster identity 4711 [ 207.560114][ T5828] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 207.569170][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.577472][ T7867] tipc: New replicast peer: 255.255.255.255 [ 207.578124][ T7867] tipc: Enabled bearer , priority 10 [ 207.628320][ T5828] usb 6-1: Product: syz [ 207.629073][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 207.654283][ T5828] usb 6-1: Manufacturer: syz [ 207.654983][ T7872] tipc: Disabling bearer [ 207.658876][ T5828] usb 6-1: SerialNumber: syz [ 207.873111][ T5828] usb 6-1: config 0 descriptor?? [ 207.882602][ T5828] smsc95xx v2.0.0 [ 207.890499][ T6471] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 208.071926][ T6471] usb 5-1: config 1 interface 0 has no altsetting 0 [ 208.085997][ T6471] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.105639][ T6471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.123545][ T6471] usb 5-1: Product: syz [ 208.127720][ T6471] usb 5-1: Manufacturer: syz [ 208.142246][ T6471] usb 5-1: SerialNumber: syz [ 208.288410][ T5828] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 208.304604][ T5828] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 208.387766][ T7875] loop0: detected capacity change from 0 to 40427 [ 208.406762][ T7875] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 208.419313][ T7875] F2FS-fs (loop0): invalid crc value [ 208.532756][ T5828] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 208.549745][ T5828] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 208.578740][ T7875] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.605231][ T6471] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 208.687403][ T5817] syz-executor: attempt to access beyond end of device [ 208.687403][ T5817] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.705581][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 208.705611][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 208.705625][ T5817] Call Trace: [ 208.705635][ T5817] [ 208.705645][ T5817] dump_stack_lvl+0x189/0x250 [ 208.705690][ T5817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.705727][ T5817] ? __pfx_queue_work_on+0x10/0x10 [ 208.705749][ T5817] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 208.705776][ T5817] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.705804][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.705847][ T5817] f2fs_handle_critical_error+0x37c/0x540 [ 208.705884][ T5817] f2fs_write_end_io+0x4e2/0x6d0 [ 208.705937][ T5817] __submit_merged_bio+0x27a/0x6a0 [ 208.705977][ T5817] __submit_merged_write_cond+0x255/0x530 [ 208.706028][ T5817] f2fs_write_data_pages+0x2854/0x31f0 [ 208.706056][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706132][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.706263][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706290][ T5817] ? __lock_acquire+0xaac/0xd20 [ 208.706336][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706380][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706407][ T5817] ? do_raw_spin_unlock+0x122/0x240 [ 208.706437][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.706467][ T5817] do_writepages+0x3b1/0x7b0 [ 208.706524][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706551][ T5817] ? do_raw_spin_lock+0x121/0x290 [ 208.706577][ T5817] ? __pfx_do_writepages+0x10/0x10 [ 208.706615][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706652][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706679][ T5817] ? do_raw_spin_unlock+0x122/0x240 [ 208.706713][ T5817] filemap_fdatawrite+0x191/0x230 [ 208.706739][ T5817] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 208.706808][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.706834][ T5817] ? do_raw_spin_unlock+0x122/0x240 [ 208.706860][ T5817] f2fs_sync_dirty_inodes+0x31f/0x830 [ 208.706900][ T5817] f2fs_write_checkpoint+0x94a/0x1de0 [ 208.706949][ T5817] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 208.707023][ T5817] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 208.707046][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.707065][ T5817] ? kfree+0x193/0x440 [ 208.707088][ T5817] ? kill_f2fs_super+0x298/0x6c0 [ 208.707117][ T5817] kill_f2fs_super+0x2c3/0x6c0 [ 208.707147][ T5817] ? __pfx_kill_f2fs_super+0x10/0x10 [ 208.707171][ T5817] ? radix_tree_delete_item+0x2b6/0x400 [ 208.707210][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.707238][ T5817] ? shrinker_free+0x2ce/0x3e0 [ 208.707268][ T5817] deactivate_locked_super+0xbc/0x130 [ 208.707313][ T5817] cleanup_mnt+0x425/0x4c0 [ 208.707351][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.707373][ T5817] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.707397][ T5817] task_work_run+0x1d4/0x260 [ 208.707425][ T5817] ? __pfx_task_work_run+0x10/0x10 [ 208.707449][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.707481][ T5817] resume_user_mode_work+0x5e/0x80 [ 208.707507][ T5817] syscall_exit_to_user_mode+0x9a/0x120 [ 208.707530][ T5817] do_syscall_64+0x103/0x210 [ 208.707553][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.707572][ T5817] ? exc_page_fault+0x91/0x110 [ 208.707595][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.707612][ T5817] RIP: 0033:0x7f8470d8fc97 [ 208.707628][ T5817] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 208.707642][ T5817] RSP: 002b:00007fff54a3a988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 208.707661][ T5817] RAX: 0000000000000000 RBX: 00007f8470e1089d RCX: 00007f8470d8fc97 [ 208.707673][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff54a3aa40 [ 208.707684][ T5817] RBP: 00007fff54a3aa40 R08: 0000000000000000 R09: 0000000000000000 [ 208.707695][ T5817] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff54a3bad0 [ 208.707706][ T5817] R13: 00007f8470e1089d R14: 0000000000032ef3 R15: 00007fff54a3bb10 [ 208.707738][ T5817] [ 208.716796][ T5817] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 209.870413][ T6481] usb 6-1: USB disconnect, device number 6 [ 210.514100][ C0] usblp0: nonzero write bulk status received: -71 [ 210.522004][ C0] usblp0: nonzero write bulk status received: -71 [ 210.532631][ T6481] usb 5-1: USB disconnect, device number 6 [ 210.547862][ T6481] usblp0: removed [ 210.990226][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 211.150406][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 211.156787][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 211.164358][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 211.211426][ T7902] tipc: Started in network mode [ 211.216339][ T7902] tipc: Node identity 5a9ffbdde779, cluster identity 4711 [ 211.272041][ T7902] tipc: Enabled bearer , priority 0 [ 211.296065][ T7902] syzkaller0: entered promiscuous mode [ 211.315549][ T7902] syzkaller0: entered allmulticast mode [ 211.406168][ T7907] loop5: detected capacity change from 0 to 2048 [ 211.427605][ T7901] tipc: Resetting bearer [ 211.498068][ T7907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.570980][ T7909] loop2: detected capacity change from 0 to 1024 [ 211.589199][ T7901] tipc: Disabling bearer [ 211.600822][ T30] audit: type=1800 audit(1746327481.092:24): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.701" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 211.641022][ T7909] EXT4-fs: Ignoring removed orlov option [ 211.651508][ T7909] EXT4-fs (loop2): Test dummy encryption mode enabled [ 211.700073][ T7909] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 211.734456][ T7914] tipc: New replicast peer: 255.255.255.255 [ 211.752793][ T7914] tipc: Enabled bearer , priority 10 [ 211.799745][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 211.846384][ T7909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.880141][ T7917] tipc: Disabling bearer [ 212.697527][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.799768][ T7928] loop3: detected capacity change from 0 to 512 [ 212.831395][ T7928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.852497][ T7928] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.864521][ T7928] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 212.874316][ T7928] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 212.883734][ T7928] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.706: Failed to acquire dquot type 1 [ 212.901889][ T7928] EXT4-fs (loop3): 1 truncate cleaned up [ 212.910162][ T7928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.001630][ T6471] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.136643][ T30] audit: type=1326 audit(1746327482.632:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f1bb8e969 code=0x0 [ 213.179924][ T6471] usb 2-1: Using ep0 maxpacket: 32 [ 213.193847][ T6471] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.208589][ T6471] usb 2-1: config 0 has no interface number 0 [ 213.226862][ T6471] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.236330][ T6471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.253984][ T6471] usb 2-1: Product: syz [ 213.262752][ T6471] usb 2-1: Manufacturer: syz [ 213.273050][ T6471] usb 2-1: SerialNumber: syz [ 213.306906][ T6471] usb 2-1: config 0 descriptor?? [ 213.330212][ T6471] smsc95xx v2.0.0 [ 213.683089][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.750665][ T6471] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 213.767007][ T6471] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.979007][ T6471] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 214.025221][ T6471] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 215.092147][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.209985][ T6474] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 216.265112][ T6480] usb 2-1: USB disconnect, device number 7 [ 216.402615][ T6474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.405725][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 216.430839][ T6474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.467191][ T6474] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.486579][ T6474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.514405][ T6474] usb 4-1: config 0 descriptor?? [ 217.173257][ T6474] usb 4-1: string descriptor 0 read error: -22 [ 217.384644][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 217.393094][ T6474] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 217.424159][ T6474] usb 4-1: USB disconnect, device number 5 [ 217.837573][ T7966] tipc: Enabled bearer , priority 0 [ 218.022451][ T7986] loop1: detected capacity change from 0 to 128 [ 218.970783][ T6470] tipc: Node number set to 2886997007 [ 218.978968][ T7971] tipc: Disabling bearer [ 219.384636][ T8003] loop3: detected capacity change from 0 to 256 [ 219.868975][ T8003] exfat: Deprecated parameter 'namecase' [ 220.155600][ T8003] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 220.225372][ T8004] syzkaller0: entered promiscuous mode [ 220.255477][ T8004] syzkaller0: entered allmulticast mode [ 220.430024][ T6480] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.437891][ T6480] usb 1-1: Using ep0 maxpacket: 32 [ 221.464815][ T6480] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.493639][ T6480] usb 1-1: config 0 has no interface number 0 [ 221.512700][ T6480] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.532725][ T6480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.551649][ T6480] usb 1-1: Product: syz [ 221.561003][ T6480] usb 1-1: Manufacturer: syz [ 221.567180][ T6480] usb 1-1: SerialNumber: syz [ 221.581085][ T6480] usb 1-1: config 0 descriptor?? [ 221.582455][ T8025] loop5: detected capacity change from 0 to 512 [ 221.597275][ T6480] smsc95xx v2.0.0 [ 221.660137][ T30] audit: type=1326 audit(1746327747.153:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.703861][ T30] audit: type=1326 audit(1746327747.153:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.732782][ T30] audit: type=1326 audit(1746327747.153:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.742799][ T8025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.756155][ T30] audit: type=1326 audit(1746327747.153:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.791303][ T30] audit: type=1326 audit(1746327747.153:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.818182][ T30] audit: type=1326 audit(1746327747.153:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.823753][ T8025] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.843620][ T30] audit: type=1326 audit(1746327747.153:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.874504][ T30] audit: type=1326 audit(1746327747.153:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.921144][ T30] audit: type=1326 audit(1746327747.153:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 221.944768][ T30] audit: type=1326 audit(1746327747.153:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 222.041997][ T6480] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 222.053818][ T6480] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 222.901666][ T6480] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 222.930081][ T6480] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 223.038682][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.127655][ T8044] loop5: detected capacity change from 0 to 512 [ 223.144971][ T8044] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.176480][ T8044] EXT4-fs (loop5): 1 truncate cleaned up [ 223.189211][ T8044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.463692][ T6470] usb 1-1: USB disconnect, device number 7 [ 223.519983][ T6480] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 223.720699][ T6480] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 223.731291][ T6480] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 223.743732][ T6480] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.754102][ T6480] usb 6-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 223.790937][ T6480] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.800250][ T6480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.814217][ T6480] usb 6-1: SerialNumber: syz [ 224.374346][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 225.323100][ T8114] loop4: detected capacity change from 0 to 512 [ 225.522303][ T8114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.535316][ T8114] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.069914][ T6481] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.110608][ T8046] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 226.285799][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.382718][ T8097] tipc: Enabled bearer , priority 0 [ 226.434776][ T8101] tipc: Disabling bearer [ 226.790054][ T6487] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.964889][ T6487] usb 4-1: Using ep0 maxpacket: 32 [ 226.987825][ T6487] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.019451][ T6487] usb 4-1: config 0 has no interface number 0 [ 227.049214][ T6487] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.067997][ T6480] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 227.089785][ T6487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.093386][ T6480] usb 6-1: USB disconnect, device number 7 [ 227.151339][ T6487] usb 4-1: Product: syz [ 227.162767][ T8126] loop1: detected capacity change from 0 to 1024 [ 227.174947][ T6487] usb 4-1: Manufacturer: syz [ 227.203365][ T6487] usb 4-1: SerialNumber: syz [ 227.215934][ T8126] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 227.242450][ T6487] usb 4-1: config 0 descriptor?? [ 227.272674][ T6487] smsc95xx v2.0.0 [ 227.391552][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.444300][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.485741][ T6481] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.544740][ T6481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.598925][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.762803][ T6487] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 227.980894][ T6487] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.234766][ T6487] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 228.297367][ T6487] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 228.313606][ T6481] usb 1-1: config 0 descriptor?? [ 228.329998][ T6481] usb 1-1: can't set config #0, error -71 [ 228.337353][ T6481] usb 1-1: USB disconnect, device number 8 [ 228.975022][ T8145] loop1: detected capacity change from 0 to 128 [ 229.023333][ T8145] EXT4-fs (loop1): Test dummy encryption mode enabled [ 229.096448][ T8145] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.110922][ T8145] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.107125][ T8138] syzkaller0: entered promiscuous mode [ 230.213288][ T8138] syzkaller0: entered allmulticast mode [ 230.693926][ T6470] usb 4-1: USB disconnect, device number 6 [ 231.257175][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.539958][ T6487] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.704403][ T6487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.716234][ T6487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.726574][ T6487] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 232.735685][ T6487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.747056][ T6487] usb 2-1: config 0 descriptor?? [ 233.675988][ T8182] vxcan1 speed is unknown, defaulting to 1000 [ 233.800138][ T6487] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 233.846968][ T6487] usb 2-1: USB disconnect, device number 8 [ 234.184044][ T8188] vxcan1 speed is unknown, defaulting to 1000 [ 234.283822][ T6481] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 234.499890][ T6481] usb 6-1: Using ep0 maxpacket: 32 [ 234.525624][ T6481] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.539538][ T6481] usb 6-1: config 0 has no interface number 0 [ 234.553868][ T6481] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.576053][ T6481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.586748][ T6481] usb 6-1: Product: syz [ 234.608196][ T6481] usb 6-1: Manufacturer: syz [ 234.613127][ T6481] usb 6-1: SerialNumber: syz [ 234.774550][ T6481] usb 6-1: config 0 descriptor?? [ 234.783387][ T6481] smsc95xx v2.0.0 [ 235.241580][ T6481] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 235.427854][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 235.427896][ T30] audit: type=1326 audit(1746327760.923:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 235.959460][ T6481] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.968814][ T30] audit: type=1326 audit(1746327760.963:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.013239][ T30] audit: type=1326 audit(1746327760.973:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.060404][ T6481] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 236.126790][ T30] audit: type=1326 audit(1746327760.973:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.130382][ T6481] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 236.154152][ T30] audit: type=1326 audit(1746327761.023:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.194916][ T30] audit: type=1326 audit(1746327761.073:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.255895][ T30] audit: type=1326 audit(1746327761.073:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.510412][ T30] audit: type=1326 audit(1746327761.163:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f258e969 code=0x7ffc0000 [ 236.687693][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 237.389272][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 237.595579][ T6481] usb 6-1: USB disconnect, device number 8 [ 240.004409][ T8265] loop5: detected capacity change from 0 to 1024 [ 240.020817][ T8265] EXT4-fs: Ignoring removed orlov option [ 240.043231][ T8265] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 240.078892][ T8265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.111201][ T8265] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 240.387278][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.787616][ T8254] syzkaller0: entered promiscuous mode [ 240.798983][ T8254] syzkaller0: entered allmulticast mode [ 242.262463][ T8287] loop5: detected capacity change from 0 to 512 [ 242.276678][ T8287] EXT4-fs (loop5): Test dummy encryption mode enabled [ 242.300765][ T8287] EXT4-fs error (device loop5): __ext4_iget:5025: inode #11: block 1: comm syz.5.800: invalid block [ 242.315073][ T8287] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.800: couldn't read orphan inode 11 (err -117) [ 242.331898][ T8287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.612216][ T6474] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.794007][ T6474] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.803260][ T6474] usb 6-1: config 1 has no interface number 0 [ 242.809393][ T6474] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.820655][ T6474] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 242.831470][ T6474] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.851346][ T6474] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.860823][ T6474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.868841][ T6474] usb 6-1: Product: syz [ 242.873375][ T6474] usb 6-1: Manufacturer: syz [ 242.877991][ T6474] usb 6-1: SerialNumber: syz [ 242.903846][ T8244] vxcan1 speed is unknown, defaulting to 1000 [ 243.280332][ T6487] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.443927][ T6487] usb 2-1: Using ep0 maxpacket: 32 [ 243.458078][ T6487] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 243.476716][ T6487] usb 2-1: config 0 has no interface number 0 [ 243.506771][ T6474] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 243.512942][ T6487] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 243.512972][ T6487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.512996][ T6487] usb 2-1: Product: syz [ 243.513022][ T6487] usb 2-1: Manufacturer: syz [ 243.513041][ T6487] usb 2-1: SerialNumber: syz [ 243.523723][ T6487] usb 2-1: config 0 descriptor?? [ 243.548810][ T6474] cdc_ncm 6-1:1.1: bind() failure [ 243.614585][ T6487] smsc95xx v2.0.0 [ 244.021501][ T6487] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 244.056682][ T6487] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.278677][ T30] audit: type=1326 audit(1746327769.773:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 244.307998][ T8301] loop3: detected capacity change from 0 to 16 [ 244.327240][ T8294] loop4: detected capacity change from 0 to 40427 [ 244.340568][ T8301] erofs (device loop3): mounted with root inode @ nid 36. [ 244.348189][ T6487] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 244.362339][ T30] audit: type=1326 audit(1746327769.773:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 244.369316][ T8294] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 244.414223][ T30] audit: type=1326 audit(1746327769.803:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 244.451353][ T8294] F2FS-fs (loop4): invalid crc value [ 244.496266][ T30] audit: type=1326 audit(1746327769.813:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 244.615150][ T6487] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 244.679924][ T30] audit: type=1326 audit(1746327769.813:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.058609][ T30] audit: type=1326 audit(1746327769.823:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.372737][ T30] audit: type=1326 audit(1746327769.823:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.454071][ T5828] usb 6-1: USB disconnect, device number 9 [ 245.510570][ T30] audit: type=1326 audit(1746327769.823:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.534377][ T30] audit: type=1326 audit(1746327769.823:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.545101][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.560619][ T30] audit: type=1326 audit(1746327769.823:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 245.598549][ T8294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.861094][ T5822] syz-executor: attempt to access beyond end of device [ 245.861094][ T5822] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.906132][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 245.906165][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 245.906180][ T5822] Call Trace: [ 245.906190][ T5822] [ 245.906200][ T5822] dump_stack_lvl+0x189/0x250 [ 245.906244][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.906286][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 245.906309][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 245.906335][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 245.906363][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906401][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 245.906436][ T5822] f2fs_write_end_io+0x4e2/0x6d0 [ 245.906484][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 245.906516][ T5822] __submit_merged_write_cond+0x255/0x530 [ 245.906566][ T5822] f2fs_write_data_pages+0x2854/0x31f0 [ 245.906635][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.906679][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906706][ T5822] ? _raw_spin_unlock+0x28/0x50 [ 245.906727][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906788][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906816][ T5822] ? __mod_node_page_state+0xf4/0x170 [ 245.906856][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906883][ T5822] ? lru_gen_update_size+0x7bd/0xd20 [ 245.906925][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.906953][ T5822] ? __lock_acquire+0xaac/0xd20 [ 245.906996][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907037][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907064][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 245.907095][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.907124][ T5822] do_writepages+0x3b1/0x7b0 [ 245.907174][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907202][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 245.907229][ T5822] ? __pfx_do_writepages+0x10/0x10 [ 245.907265][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907301][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907328][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 245.907362][ T5822] filemap_fdatawrite+0x191/0x230 [ 245.907395][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 245.907477][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907510][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 245.907544][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 245.907593][ T5822] f2fs_write_checkpoint+0x94a/0x1de0 [ 245.907653][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 245.907732][ T5822] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 245.907763][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907790][ T5822] ? kfree+0x193/0x440 [ 245.907820][ T5822] ? kill_f2fs_super+0x298/0x6c0 [ 245.907858][ T5822] kill_f2fs_super+0x2c3/0x6c0 [ 245.907897][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 245.907925][ T5822] ? radix_tree_delete_item+0x2b6/0x400 [ 245.907960][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.907988][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 245.908015][ T5822] deactivate_locked_super+0xbc/0x130 [ 245.908057][ T5822] cleanup_mnt+0x425/0x4c0 [ 245.908094][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.908121][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.908153][ T5822] task_work_run+0x1d4/0x260 [ 245.908189][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 245.908222][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.908262][ T5822] resume_user_mode_work+0x5e/0x80 [ 245.908303][ T5822] syscall_exit_to_user_mode+0x9a/0x120 [ 245.908334][ T5822] do_syscall_64+0x103/0x210 [ 245.908364][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.908391][ T5822] ? exc_page_fault+0x91/0x110 [ 245.908421][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.908444][ T5822] RIP: 0033:0x7fbb17b8fc97 [ 245.908465][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 245.908486][ T5822] RSP: 002b:00007ffeb036be48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 245.908512][ T5822] RAX: 0000000000000000 RBX: 00007fbb17c1089d RCX: 00007fbb17b8fc97 [ 245.908529][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb036bf00 [ 245.908545][ T5822] RBP: 00007ffeb036bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.908561][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb036cf90 [ 245.908577][ T5822] R13: 00007fbb17c1089d R14: 000000000003c00c R15: 00007ffeb036cfd0 [ 245.908615][ T5822] [ 245.908689][ T5822] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 246.410885][ T8320] loop2: detected capacity change from 0 to 256 [ 246.942486][ T6487] usb 2-1: USB disconnect, device number 9 [ 246.992557][ T8320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 249.234298][ T8335] vxcan1 speed is unknown, defaulting to 1000 [ 249.333444][ T8345] loop0: detected capacity change from 0 to 1024 [ 249.547975][ T8345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.337221][ T8356] xt_CT: No such helper "netbios-ns" [ 250.411371][ T8352] tty tty26: ldisc open failed (-12), clearing slot 25 [ 251.304721][ T8337] vxcan1 speed is unknown, defaulting to 1000 [ 251.378510][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.532007][ T8365] loop4: detected capacity change from 0 to 256 [ 251.547984][ T8365] exfat: Unknown parameter 'iochar' [ 252.342747][ T8354] vxcan1 speed is unknown, defaulting to 1000 [ 252.651481][ T8359] vxcan1 speed is unknown, defaulting to 1000 [ 252.738213][ T8369] loop0: detected capacity change from 0 to 512 [ 252.784029][ T8369] EXT4-fs: Ignoring removed oldalloc option [ 252.828165][ T8369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.991167][ T8369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 253.040693][ T8369] __quota_error: 3 callbacks suppressed [ 253.040710][ T8369] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 253.100801][ T8369] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 253.137877][ T8369] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.820: Failed to acquire dquot type 1 [ 253.183294][ T8369] EXT4-fs (loop0): 1 truncate cleaned up [ 253.418205][ T8369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.595787][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.995468][ T8384] loop4: detected capacity change from 0 to 512 [ 254.015278][ T8384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.044607][ T8375] loop1: detected capacity change from 0 to 1024 [ 254.052598][ T8375] ext4: Unknown parameter 'obj_user' [ 254.069592][ T8384] EXT4-fs (loop4): 1 truncate cleaned up [ 254.093634][ T8384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.542746][ T6480] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 254.749580][ T6480] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 254.781807][ T6480] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 254.833364][ T6480] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.845035][ T8396] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 254.875970][ T6480] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 254.940618][ T30] audit: type=1326 audit(1746327780.443:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 254.967151][ T6480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.978191][ T30] audit: type=1326 audit(1746327780.463:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.021740][ T30] audit: type=1326 audit(1746327780.463:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.044582][ T30] audit: type=1326 audit(1746327780.463:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.045997][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.067636][ T30] audit: type=1326 audit(1746327780.463:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.082328][ T6480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.137248][ T6480] usb 5-1: SerialNumber: syz [ 255.171583][ T30] audit: type=1326 audit(1746327780.463:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.241075][ T30] audit: type=1326 audit(1746327780.473:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.257715][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 255.275486][ T30] audit: type=1326 audit(1746327780.513:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 255.308069][ T8402] veth3: entered promiscuous mode [ 255.322142][ T8402] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 255.331750][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 255.377832][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 255.393457][ T8400] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 255.791404][ T8412] loop0: detected capacity change from 0 to 512 [ 255.893104][ T8414] vxcan1 speed is unknown, defaulting to 1000 [ 255.939323][ T8412] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.832: Failed to acquire dquot type 1 [ 256.014772][ T8412] EXT4-fs (loop0): 1 truncate cleaned up [ 256.015311][ T6480] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -22 [ 256.027501][ T8412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.087726][ T8412] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.100711][ T6480] usb 5-1: USB disconnect, device number 7 [ 256.295559][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.406006][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 256.973329][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.754226][ T8419] vxcan1 speed is unknown, defaulting to 1000 [ 258.041935][ T8447] tipc: New replicast peer: 255.255.255.255 [ 258.079008][ T8447] tipc: Enabled bearer , priority 10 [ 258.136426][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 258.193804][ T8449] tipc: Disabling bearer [ 258.263005][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 258.457360][ T8453] loop4: detected capacity change from 0 to 1024 [ 258.517878][ T8453] EXT4-fs: Ignoring removed i_version option [ 258.568997][ T8453] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.632444][ T8453] EXT4-fs: Ignoring removed nobh option [ 258.664019][ T8453] EXT4-fs: Ignoring removed bh option [ 258.934552][ T8453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.130832][ T8453] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.848: Allocating blocks 385-513 which overlap fs metadata [ 259.234514][ T8466] loop2: detected capacity change from 0 to 512 [ 259.250282][ T8466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.273525][ T8451] EXT4-fs (loop4): pa ffff888056d32bc8: logic 16, phys. 129, len 24 [ 259.281966][ T8451] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 259.330039][ T8466] EXT4-fs error (device loop2): __ext4_iget:5025: inode #11: block 1: comm syz.2.851: invalid block [ 259.350727][ T8466] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.851: couldn't read orphan inode 11 (err -117) [ 259.366932][ T8466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.459582][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.887006][ T8477] 9pnet_virtio: no channels available for device syz [ 261.756828][ T8484] vxcan1 speed is unknown, defaulting to 1000 [ 262.146977][ T8458] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 262.999606][ T8497] loop1: detected capacity change from 0 to 16 [ 263.097631][ T8497] erofs (device loop1): mounted with root inode @ nid 36. [ 263.642967][ T8502] loop0: detected capacity change from 0 to 512 [ 265.848923][ T8514] loop0: detected capacity change from 0 to 512 [ 265.863633][ T8514] EXT4-fs: Invalid want_extra_isize 129 [ 266.895285][ T8514] vxcan1 speed is unknown, defaulting to 1000 [ 267.478260][ T8522] macvlan0: entered allmulticast mode [ 268.317385][ T8528] vxcan1 speed is unknown, defaulting to 1000 [ 269.546179][ T8539] tty tty30: ldisc open failed (-12), clearing slot 29 [ 269.832607][ T8543] loop3: detected capacity change from 0 to 512 [ 269.882417][ T8543] EXT4-fs: Ignoring removed oldalloc option [ 269.900758][ T8543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.913420][ T8543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 269.914658][ T8543] __quota_error: 5 callbacks suppressed [ 269.914673][ T8543] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 269.914801][ T8543] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 269.914823][ T8543] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.872: Failed to acquire dquot type 1 [ 269.916168][ T8543] EXT4-fs (loop3): 1 truncate cleaned up [ 269.933406][ T8543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.463555][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.870483][ T8551] loop0: detected capacity change from 0 to 256 [ 271.985614][ T8551] xt_hashlimit: max too large, truncated to 1048576 [ 272.290961][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.822466][ T8581] loop0: detected capacity change from 0 to 512 [ 274.003596][ T8581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.016942][ T8581] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.532201][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.551136][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 278.410561][ T8607] vxcan1 speed is unknown, defaulting to 1000 [ 278.468426][ T30] audit: type=1326 audit(1746327803.963:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 278.843476][ T30] audit: type=1326 audit(1746327803.963:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 278.843533][ T30] audit: type=1326 audit(1746327803.963:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 278.843585][ T30] audit: type=1326 audit(1746327803.963:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 279.777014][ T8614] tty tty29: ldisc open failed (-12), clearing slot 28 [ 279.971241][ T8629] loop3: detected capacity change from 0 to 512 [ 280.007996][ T8629] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 280.061491][ T8629] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 280.079933][ T8629] EXT4-fs (loop3): 1 truncate cleaned up [ 280.091445][ T8629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.130613][ T8629] EXT4-fs error (device loop3): ext4_find_dest_de:2054: inode #2: block 3: comm syz.3.896: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 280.720106][ T6481] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 280.929935][ T6481] usb 6-1: Using ep0 maxpacket: 32 [ 280.955654][ T6481] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.970052][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 283.318762][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.319636][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.331143][ T6481] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 283.352200][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.364439][ T6481] usb 6-1: config 0 descriptor?? [ 283.380823][ T6481] usb 6-1: can't set config #0, error -71 [ 283.444736][ T6481] usb 6-1: USB disconnect, device number 10 [ 283.812136][ T8656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.819418][ T8656] IPv6: NLM_F_CREATE should be set when creating new route [ 286.822916][ T8685] loop3: detected capacity change from 0 to 1024 [ 286.890572][ T8685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.757762][ T8668] loop4: detected capacity change from 0 to 40427 [ 287.818429][ T8668] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 287.871635][ T8668] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 287.987563][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.356680][ T8668] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 288.426428][ T8668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 289.989110][ T8697] loop0: detected capacity change from 0 to 128 [ 290.082541][ T8697] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.112952][ T8697] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.413498][ T8735] loop2: detected capacity change from 0 to 512 [ 291.138659][ T8740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.146011][ T8740] IPv6: NLM_F_CREATE should be set when creating new route [ 292.073156][ T8743] loop5: detected capacity change from 0 to 128 [ 293.258676][ T8735] EXT4-fs (loop2): 1 orphan inode deleted [ 293.283304][ T8735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.300562][ T8735] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.316723][ T62] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 293.326952][ T62] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 293.393137][ T8743] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.195045][ T8743] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.321091][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.046698][ T5817] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.072950][ T8753] loop3: detected capacity change from 0 to 1024 [ 295.238737][ T8753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.458227][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.769371][ T8775] macvlan1: entered allmulticast mode [ 295.963129][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.347857][ T8789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.296076][ T30] audit: type=1326 audit(1746327822.793:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.390141][ T30] audit: type=1326 audit(1746327822.793:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.470699][ T30] audit: type=1326 audit(1746327822.793:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.767185][ T30] audit: type=1326 audit(1746327822.793:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.790403][ T30] audit: type=1326 audit(1746327822.793:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.819913][ T30] audit: type=1326 audit(1746327822.793:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.882642][ T30] audit: type=1326 audit(1746327822.823:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 297.954728][ T8802] loop2: detected capacity change from 0 to 256 [ 297.969491][ T8802] vfat: Unknown parameter 'ÿÿÿÿ' [ 298.551658][ T8804] netlink: 'syz.5.955': attribute type 1 has an invalid length. [ 298.630735][ T30] audit: type=1326 audit(1746327822.843:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 298.798029][ T30] audit: type=1326 audit(1746327822.843:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 299.175153][ T8812] veth9: entered promiscuous mode [ 299.212988][ T8788] loop3: detected capacity change from 0 to 40427 [ 299.233528][ T8812] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 299.749800][ T30] audit: type=1326 audit(1746327822.843:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 299.772448][ T30] audit: type=1326 audit(1746327822.843:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 299.795090][ T30] audit: type=1326 audit(1746327822.843:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1bb8e969 code=0x7ffc0000 [ 299.808377][ T8823] macvlan1: entered allmulticast mode [ 300.124945][ T8829] loop2: detected capacity change from 0 to 1024 [ 300.242107][ T8829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.167443][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.233696][ T8848] loop3: detected capacity change from 0 to 128 [ 302.325839][ T8848] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.360299][ T8848] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.393260][ T8849] loop0: detected capacity change from 0 to 8192 [ 303.284084][ T8859] vxcan1 speed is unknown, defaulting to 1000 [ 304.387705][ T8868] netlink: 'syz.0.971': attribute type 1 has an invalid length. [ 304.471963][ T8865] syzkaller0: entered promiscuous mode [ 304.477463][ T8865] syzkaller0: entered allmulticast mode [ 304.521381][ T8874] loop4: detected capacity change from 0 to 1024 [ 304.536348][ T8874] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.588814][ T8874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.705799][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.828583][ T8876] veth13: entered promiscuous mode [ 305.843128][ T8876] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 306.085666][ T5825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.232686][ T8897] vxcan1 speed is unknown, defaulting to 1000 [ 306.423071][ T8906] loop5: detected capacity change from 0 to 512 [ 306.431269][ T8906] EXT4-fs (loop5): Test dummy encryption mode enabled [ 306.447192][ T8906] EXT4-fs error (device loop5): __ext4_iget:5025: inode #11: block 1: comm syz.5.984: invalid block [ 306.466884][ T8906] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.984: couldn't read orphan inode 11 (err -117) [ 306.485989][ T8906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.554151][ T8909] loop3: detected capacity change from 0 to 1024 [ 306.643033][ T8909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.141484][ T8920] 9pnet_fd: Insufficient options for proto=fd [ 307.654677][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.931610][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.254747][ T8929] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 308.390743][ T8934] bond2: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 308.422625][ T8911] loop2: detected capacity change from 0 to 40427 [ 308.434690][ T8911] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 308.450029][ T8911] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 308.468578][ T8911] F2FS-fs (loop2): invalid crc value [ 308.504005][ T8929] veth7: entered promiscuous mode [ 308.529741][ T8929] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 308.680599][ T8911] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 308.704976][ T8911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.747373][ T8935] syzkaller0: entered promiscuous mode [ 308.755040][ T8935] syzkaller0: entered allmulticast mode [ 308.820191][ T8954] syz.2.986: attempt to access beyond end of device [ 308.820191][ T8954] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 309.276617][ T8954] syz.2.986: attempt to access beyond end of device [ 309.276617][ T8954] loop2: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 309.373095][ T8958] xt_CT: No such helper "netbios-ns" [ 309.444010][ T8954] syz.2.986: attempt to access beyond end of device [ 309.444010][ T8954] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 309.516622][ T8911] syz.2.986: attempt to access beyond end of device [ 309.516622][ T8911] loop2: rw=2049, sector=77840, nr_sectors = 120 limit=40427 [ 309.545269][ T8954] syz.2.986: attempt to access beyond end of device [ 309.545269][ T8954] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 309.686060][ T8954] syz.2.986 (8954) used greatest stack depth: 18920 bytes left [ 309.765491][ T5818] syz-executor: attempt to access beyond end of device [ 309.765491][ T5818] loop2: rw=2051, sector=77824, nr_sectors = 136 limit=40427 [ 309.792775][ T5818] syz-executor: attempt to access beyond end of device [ 309.792775][ T5818] loop2: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 309.812925][ T5818] F2FS-fs (loop2): Issue discard(9728, 9728, 17) failed, ret: -5 [ 309.823554][ T5818] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 311.207268][ T8609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.309546][ T8609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.433750][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 311.457985][ T8609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.545200][ T8977] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 311.572793][ T8977] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 311.714873][ T8609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.029428][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1013'. [ 313.437983][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.446649][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.456151][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.476567][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.488534][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.855884][ T8609] bond0 (unregistering): left allmulticast mode [ 313.870986][ T8609] team0: Port device macvlan2 removed [ 313.888285][ T8609] bond0 (unregistering): Released all slaves [ 313.993825][ T9008] syzkaller0: entered promiscuous mode [ 313.999482][ T9008] syzkaller0: entered allmulticast mode [ 314.146241][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 314.173389][ T8609] tipc: Left network mode [ 314.292980][ T6481] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.338564][ T9031] loop3: detected capacity change from 0 to 1024 [ 314.396432][ T9031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.467002][ T6481] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.477518][ T6481] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.502443][ T6481] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.515629][ T6481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.552163][ T6481] usb 5-1: SerialNumber: syz [ 314.717146][ T30] audit: type=1326 audit(1746327840.213:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 314.765827][ T30] audit: type=1326 audit(1746327840.233:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 314.812802][ T6481] usb 5-1: 0:2 : does not exist [ 314.819753][ T30] audit: type=1326 audit(1746327840.233:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 314.889094][ T30] audit: type=1326 audit(1746327840.243:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 314.896781][ T6481] usb 5-1: USB disconnect, device number 8 [ 314.917042][ T30] audit: type=1326 audit(1746327840.243:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.013732][ T30] audit: type=1326 audit(1746327840.243:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.036654][ T30] audit: type=1326 audit(1746327840.243:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.059667][ T30] audit: type=1326 audit(1746327840.243:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.085464][ T30] audit: type=1326 audit(1746327840.243:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.108353][ T30] audit: type=1326 audit(1746327840.243:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25278e969 code=0x7ffc0000 [ 315.272344][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.631891][ T54] Bluetooth: hci1: command tx timeout [ 316.559168][ T9048] loop4: detected capacity change from 0 to 512 [ 316.590482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.627816][ T9048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.681627][ T9048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.694595][ T9048] ext4 filesystem being mounted at /171/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.881862][ T9029] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 317.073259][ T9011] vxcan1 speed is unknown, defaulting to 1000 [ 317.435538][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.167232][ T54] Bluetooth: hci1: command tx timeout [ 319.344309][ T9099] loop5: detected capacity change from 0 to 256 [ 319.550657][ T9100] xt_CT: No such helper "netbios-ns" [ 320.033889][ T9109] loop0: detected capacity change from 0 to 1024 [ 320.190004][ T54] Bluetooth: hci1: command tx timeout [ 322.157606][ T8609] hsr_slave_0: left promiscuous mode [ 322.190173][ T8609] hsr_slave_1: left promiscuous mode [ 322.270199][ T54] Bluetooth: hci1: command tx timeout [ 322.305831][ T8609] veth1_macvtap: left promiscuous mode [ 322.356644][ T8609] veth0_macvtap: left promiscuous mode [ 322.700097][ T6471] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 322.860099][ T6471] usb 1-1: Using ep0 maxpacket: 32 [ 322.867547][ T6471] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.888636][ T6471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 322.928269][ T6471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.951628][ T6471] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.970850][ T6471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.008891][ T6471] usb 1-1: config 0 descriptor?? [ 323.027371][ T9142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.045985][ T6471] hub 1-1:0.0: USB hub found [ 323.259510][ T6471] hub 1-1:0.0: 2 ports detected [ 324.425090][ T9175] xt_CT: No such helper "netbios-ns" [ 324.435635][ T6471] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 324.774580][ T9180] loop5: detected capacity change from 0 to 512 [ 324.810522][ T9180] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 325.292673][ T9182] loop5: detected capacity change from 0 to 512 [ 325.308877][ T9182] EXT4-fs: inline encryption not supported [ 325.315312][ T9182] ext4: Bad value for 'stripe' [ 325.895693][ T36] smc: removing ib device syz2 [ 326.253947][ T6471] usb 1-1: USB disconnect, device number 9 [ 326.653665][ T6470] vxcan1 speed is unknown, defaulting to 1000 [ 326.668718][ T6470] syz2: Port: 1 Link DOWN [ 327.293830][ T9011] chnl_net:caif_netlink_parms(): no params data found [ 327.927288][ T5828] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.238843][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.265117][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.299923][ T5828] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 328.308983][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.386716][ T9210] loop5: detected capacity change from 0 to 8192 [ 328.399081][ T5828] usb 1-1: config 0 descriptor?? [ 329.056559][ T9194] loop4: detected capacity change from 0 to 40427 [ 329.073851][ T5828] usb 1-1: string descriptor 0 read error: -71 [ 329.520212][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.663936][ T9230] xt_CT: No such helper "netbios-ns" [ 329.727527][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.750508][ T9194] F2FS-fs (loop4): invalid crc value [ 329.786043][ T9011] bridge_slave_0: entered allmulticast mode [ 329.813125][ T9194] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 329.856697][ T5828] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 329.881894][ T9011] bridge_slave_0: entered promiscuous mode [ 329.939736][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.981158][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.991517][ T5828] usb 1-1: USB disconnect, device number 10 [ 330.031105][ T9011] bridge_slave_1: entered allmulticast mode [ 330.078224][ T9011] bridge_slave_1: entered promiscuous mode [ 330.140941][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 330.140960][ T30] audit: type=1326 audit(1746327855.623:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 330.240044][ T30] audit: type=1326 audit(1746327855.623:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 330.400706][ T30] audit: type=1326 audit(1746327855.623:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 330.495973][ T30] audit: type=1326 audit(1746327855.623:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 330.794801][ T9242] loop4: detected capacity change from 0 to 1024 [ 330.831182][ T9242] EXT4-fs: Ignoring removed orlov option [ 331.010472][ T5828] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 331.491506][ T9242] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 331.572666][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.610341][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 331.628892][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.641992][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.646495][ T9242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.693061][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 331.759985][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.820204][ T5828] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.869461][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.971418][ T5828] usb 6-1: config 0 descriptor?? [ 332.758550][ T9244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 332.800660][ T5828] hub 6-1:0.0: USB hub found [ 332.930833][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.014673][ T5828] hub 6-1:0.0: 2 ports detected [ 333.046004][ T9263] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 333.287940][ T9011] team0: Port device team_slave_0 added [ 333.371368][ T9271] veth15: entered promiscuous mode [ 333.384859][ T9271] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 333.412586][ T9011] team0: Port device team_slave_1 added [ 333.765123][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.782793][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.858006][ T9011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.896195][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.912717][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.964431][ T9011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.017051][ T9294] loop4: detected capacity change from 0 to 256 [ 334.034557][ T5828] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 334.134104][ T9296] tipc: Started in network mode [ 334.145534][ T9296] tipc: Node identity 4, cluster identity 4711 [ 334.158989][ T9296] tipc: Node number set to 4 [ 334.423241][ T9011] hsr_slave_0: entered promiscuous mode [ 334.482306][ T9011] hsr_slave_1: entered promiscuous mode [ 336.307883][ T6481] usb 6-1: USB disconnect, device number 11 [ 336.368908][ T9320] loop5: detected capacity change from 0 to 128 [ 336.467933][ T9325] syz.5.1084: attempt to access beyond end of device [ 336.467933][ T9325] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 336.505617][ T9325] syz.5.1084: attempt to access beyond end of device [ 336.505617][ T9325] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 337.211319][ T9325] syz.5.1084: attempt to access beyond end of device [ 337.211319][ T9325] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 337.834927][ T9325] syz.5.1084: attempt to access beyond end of device [ 337.834927][ T9325] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 338.543429][ T9325] syz.5.1084: attempt to access beyond end of device [ 338.543429][ T9325] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 338.570144][ T9325] syz.5.1084: attempt to access beyond end of device [ 338.570144][ T9325] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 339.434004][ T9325] syz.5.1084: attempt to access beyond end of device [ 339.434004][ T9325] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 339.589088][ T9325] syz.5.1084: attempt to access beyond end of device [ 339.589088][ T9325] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 340.893693][ T9353] loop3: detected capacity change from 0 to 256 [ 341.092276][ T9011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.129050][ T9357] loop4: detected capacity change from 0 to 512 [ 341.137684][ T9357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.368077][ T9357] EXT4-fs (loop4): orphan cleanup on readonly fs [ 341.386155][ T9357] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 341.396218][ T9357] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 341.405723][ T9357] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1093: Failed to acquire dquot type 1 [ 341.512222][ T9357] EXT4-fs (loop4): 1 truncate cleaned up [ 341.540069][ T9011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.605439][ T9011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.643485][ T9353] tipc: Cannot configure node identity twice [ 341.663946][ T9011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.574643][ T9357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.012996][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.042781][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.026305][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.214713][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.221934][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.301497][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.308755][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.335152][ T9402] loop5: detected capacity change from 0 to 1024 [ 345.436553][ T9402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.776142][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.253213][ T9436] loop3: detected capacity change from 0 to 512 [ 348.264587][ T9436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.289563][ T9436] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.299649][ T9436] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 348.309320][ T9436] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 348.318913][ T9436] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1109: Failed to acquire dquot type 1 [ 348.333521][ T9436] EXT4-fs (loop3): 1 truncate cleaned up [ 348.341680][ T9436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.930394][ T9442] xt_CT: No such helper "netbios-ns" [ 349.156548][ T30] audit: type=1326 audit(1746327874.643:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.195652][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.225899][ T30] audit: type=1326 audit(1746327874.643:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.289589][ T30] audit: type=1326 audit(1746327874.713:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.382660][ T30] audit: type=1326 audit(1746327874.713:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.460552][ T30] audit: type=1326 audit(1746327874.723:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.498838][ T30] audit: type=1326 audit(1746327874.723:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.521689][ T6481] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 349.567467][ T30] audit: type=1326 audit(1746327874.723:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.625779][ T30] audit: type=1326 audit(1746327874.723:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 349.717531][ T6481] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.759087][ T6481] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.538366][ T6481] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.550522][ T6481] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 350.559577][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.574496][ T9451] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.882389][ T9451] loop5: detected capacity change from 0 to 256 [ 350.963300][ T9451] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.098748][ T6481] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 351.163419][ T6481] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input9 [ 351.216225][ T9476] loop3: detected capacity change from 0 to 256 [ 351.343770][ T6481] usb 6-1: USB disconnect, device number 12 [ 351.349750][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 351.446312][ T9480] pim6reg1: entered promiscuous mode [ 351.486222][ T9480] pim6reg1: entered allmulticast mode [ 351.848969][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'. [ 351.924764][ T9489] loop5: detected capacity change from 0 to 256 [ 352.320024][ T9476] FAT-fs (loop3): Directory bread(block 64) failed [ 352.337434][ T9476] FAT-fs (loop3): Directory bread(block 65) failed [ 352.369444][ T9476] FAT-fs (loop3): Directory bread(block 66) failed [ 352.401608][ T9476] FAT-fs (loop3): Directory bread(block 67) failed [ 352.408287][ T9476] FAT-fs (loop3): Directory bread(block 68) failed [ 352.482467][ T9476] FAT-fs (loop3): Directory bread(block 69) failed [ 352.495551][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.541696][ T9476] FAT-fs (loop3): Directory bread(block 70) failed [ 352.587842][ T9476] FAT-fs (loop3): Directory bread(block 71) failed [ 352.632662][ T9476] FAT-fs (loop3): Directory bread(block 72) failed [ 352.654491][ T9476] FAT-fs (loop3): Directory bread(block 73) failed [ 353.630679][ T9514] xt_CT: No such helper "netbios-ns" [ 353.636950][ T9513] loop5: detected capacity change from 0 to 512 [ 353.638137][ T9513] EXT4-fs: Invalid want_extra_isize 129 [ 354.420154][ T9510] tty tty28: ldisc open failed (-12), clearing slot 27 [ 355.399032][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 355.399054][ T30] audit: type=1326 audit(1746327880.893:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 355.532903][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 355.670392][ T30] audit: type=1326 audit(1746327880.963:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 355.860045][ T30] audit: type=1326 audit(1746327880.973:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 356.009207][ T30] audit: type=1326 audit(1746327881.123:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 356.046650][ T9559] loop4: detected capacity change from 0 to 256 [ 356.281810][ T9011] veth0_vlan: entered promiscuous mode [ 356.306011][ T9559] FAT-fs (loop4): Directory bread(block 64) failed [ 356.356612][ T9559] FAT-fs (loop4): Directory bread(block 65) failed [ 356.394691][ T9011] veth1_vlan: entered promiscuous mode [ 356.404455][ T9559] FAT-fs (loop4): Directory bread(block 66) failed [ 356.499093][ T30] audit: type=1326 audit(1746327881.123:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 356.532493][ T9559] FAT-fs (loop4): Directory bread(block 67) failed [ 356.539137][ T9559] FAT-fs (loop4): Directory bread(block 68) failed [ 356.555270][ T9565] loop5: detected capacity change from 0 to 256 [ 356.576656][ T30] audit: type=1326 audit(1746327881.123:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca915c1225 code=0x7ffc0000 [ 356.624975][ T9565] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 356.637765][ T9559] FAT-fs (loop4): Directory bread(block 69) failed [ 356.657239][ T30] audit: type=1326 audit(1746327881.273:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fca9158e969 code=0x7ffc0000 [ 356.710478][ T9559] FAT-fs (loop4): Directory bread(block 70) failed [ 356.733309][ T9011] veth0_macvtap: entered promiscuous mode [ 356.769003][ T9559] FAT-fs (loop4): Directory bread(block 71) failed [ 356.780584][ T9559] FAT-fs (loop4): Directory bread(block 72) failed [ 356.800443][ T9559] FAT-fs (loop4): Directory bread(block 73) failed [ 357.796276][ T9574] xt_CT: No such helper "netbios-ns" [ 359.349429][ T9011] veth1_macvtap: entered promiscuous mode [ 359.673459][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 360.941377][ T9602] loop3: detected capacity change from 0 to 512 [ 360.949072][ T9602] EXT4-fs: Invalid want_extra_isize 129 [ 361.409568][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 361.535302][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.626623][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.743211][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.013657][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.073784][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.126681][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.691355][ T9011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.737265][ T9011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.938122][ T9011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.669022][ T9627] xt_CT: No such helper "netbios-ns" [ 363.706919][ T9011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.313367][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.356709][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.768482][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 365.418619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.512704][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.274728][ T9675] macvlan2: entered allmulticast mode [ 367.322050][ T9678] bond1: (slave ip6gretap1): Releasing backup interface [ 367.375399][ T9678] bond2: (slave veth3): Releasing backup interface [ 367.404682][ T9681] loop3: detected capacity change from 0 to 1024 [ 367.472377][ T9681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.486946][ T9678] bond4: (slave veth11): Releasing backup interface [ 367.535945][ T9678] bond5: (slave veth13): Releasing backup interface [ 367.595142][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.669205][ T9678] bond6: (slave veth15): Releasing backup interface [ 369.233249][ T9709] loop4: detected capacity change from 0 to 2048 [ 369.310457][ T9709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 371.830704][ T9723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.396913][ T9727] loop3: detected capacity change from 0 to 512 [ 372.625165][ T9727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.639006][ T9727] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.291108][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.836044][ T9730] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 375.116671][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.133686][ T9741] macvlan0: entered allmulticast mode [ 378.040459][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.486726][ T9786] loop4: detected capacity change from 0 to 1024 [ 378.635918][ T9786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.292025][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.510276][ T30] audit: type=1326 audit(1746327906.953:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb876b8e969 code=0x7fc00000 [ 382.137528][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.147989][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.160500][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.173256][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.183229][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.722056][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1212'. [ 384.010037][ T9863] loop3: detected capacity change from 0 to 1024 [ 384.301484][ T54] Bluetooth: hci6: command tx timeout [ 384.841789][ T9863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.963938][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.103294][ T9872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 386.120410][ T9872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 386.273186][ T9831] chnl_net:caif_netlink_parms(): no params data found [ 386.351217][ T54] Bluetooth: hci6: command tx timeout [ 386.463414][ T9872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 386.581353][ T9905] loop3: detected capacity change from 0 to 128 [ 386.625814][ T9905] vfat: Bad value for 'shortname' [ 386.638460][ T9872] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 386.692040][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 386.867851][ T9908] loop5: detected capacity change from 0 to 512 [ 387.156997][ T9908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.170768][ T9908] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.631845][ T9912] 9pnet_fd: Insufficient options for proto=fd [ 387.646759][ T9912] 9pnet_fd: Insufficient options for proto=fd [ 387.801235][ T9872] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 387.808994][ T9872] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 387.891780][ T9872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.897791][ T9872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 388.051365][ T9872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 388.115753][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 388.159018][ T9872] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 388.180652][ T9872] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 388.251722][ T9872] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 388.318581][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.383610][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.444505][ T9928] loop3: detected capacity change from 0 to 256 [ 388.466730][ T9831] bridge_slave_0: entered allmulticast mode [ 388.523830][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 388.560019][ T9831] bridge_slave_0: entered promiscuous mode [ 388.626643][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.674618][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.745031][ T9831] bridge_slave_1: entered allmulticast mode [ 388.760073][ T9831] bridge_slave_1: entered promiscuous mode [ 388.788854][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.044331][ T9939] loop6: detected capacity change from 0 to 512 [ 389.072736][ T9939] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 389.317902][ T9831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.318259][ T9939] EXT4-fs (loop6): 1 truncate cleaned up [ 389.969453][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 389.975627][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 390.001810][ T9939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.038828][ T9949] loop4: detected capacity change from 0 to 1024 [ 390.111063][ T9949] EXT4-fs: Ignoring removed orlov option [ 390.184934][ T9949] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 390.190070][ T54] Bluetooth: hci6: command 0x0419 tx timeout [ 390.201768][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 390.492394][ T9949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.516171][ T9960] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:298: inode #15: comm syz.6.1233: verity file has no extents [ 390.751151][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 391.313424][ T7373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.359079][ T9960] EXT4-fs (loop6): Remounting filesystem read-only [ 391.452687][ T9960] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 391.466555][ T9831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.581313][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.882248][ T9973] loop4: detected capacity change from 0 to 16 [ 391.928336][ T9973] erofs (device loop4): mounted with root inode @ nid 36. [ 391.962115][ T9975] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1239'. [ 391.982481][ T9011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.027211][ T7373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.052764][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 392.059236][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 392.091668][ T9831] team0: Port device team_slave_0 added [ 392.112012][ T9831] team0: Port device team_slave_1 added [ 392.271709][ T5841] Bluetooth: hci6: command 0x0419 tx timeout [ 392.865412][ T30] audit: type=1326 audit(1746327918.363:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 392.985630][ T30] audit: type=1326 audit(1746327918.363:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.073211][ T30] audit: type=1326 audit(1746327918.363:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.127415][ T7373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.155538][ T30] audit: type=1326 audit(1746327918.363:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.232932][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.269792][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.276546][ T30] audit: type=1326 audit(1746327918.363:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.411590][ T9831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.503969][ T30] audit: type=1326 audit(1746327918.393:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.654576][ T30] audit: type=1326 audit(1746327918.393:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 393.662181][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.686974][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.729915][ T9831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.110347][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.430500][ T5841] Bluetooth: hci6: command 0x0419 tx timeout [ 394.627826][T10010] loop4: detected capacity change from 0 to 256 [ 394.748572][ T30] audit: type=1326 audit(1746327918.393:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 395.719936][ T30] audit: type=1326 audit(1746327918.393:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 395.747397][ T7373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.819648][ T30] audit: type=1326 audit(1746327918.403:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.0.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8470d8e969 code=0x7ffc0000 [ 396.393387][T10027] netlink: 'syz.6.1249': attribute type 4 has an invalid length. [ 396.544166][ T5841] Bluetooth: hci6: command 0x0419 tx timeout [ 397.989983][T10046] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1255'. [ 398.112926][ T9831] hsr_slave_0: entered promiscuous mode [ 398.119738][ T9831] hsr_slave_1: entered promiscuous mode [ 398.144261][ T9831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.153117][ T9831] Cannot create hsr debugfs directory [ 398.354201][T10052] loop5: detected capacity change from 0 to 256 [ 399.906444][T10042] loop6: detected capacity change from 0 to 40427 [ 399.988863][T10042] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 400.037641][T10042] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 400.119224][ T7373] bridge_slave_1: left allmulticast mode [ 400.148911][ T7373] bridge_slave_1: left promiscuous mode [ 400.165610][T10042] F2FS-fs (loop6): invalid crc value [ 400.179106][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.194148][T10042] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-4) [ 400.250350][ T7373] bridge_slave_0: left allmulticast mode [ 400.256402][ T7373] bridge_slave_0: left promiscuous mode [ 400.300216][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.348331][ T7373] bond_slave_0: left promiscuous mode [ 400.358125][T10079] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1268'. [ 400.383802][ T7373] bond_slave_1: left promiscuous mode [ 400.665190][ T7373] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 400.706055][T10087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.951789][ T7373] bond0 (unregistering): left allmulticast mode [ 401.979932][ T7373] bond_slave_0: left allmulticast mode [ 401.985458][ T7373] bond_slave_1: left allmulticast mode [ 402.003318][T10099] loop3: detected capacity change from 0 to 1024 [ 402.030186][ T7373] team0: Port device macvlan0 removed [ 402.052246][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.052559][T10099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.084194][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.103286][ T7373] bond0 (unregistering): Released all slaves [ 402.128835][ T7373] bond1 (unregistering): (slave veth3): Releasing backup interface [ 402.155854][ T7373] bond1 (unregistering): Released all slaves [ 403.115344][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.240583][ T7373] tipc: Left network mode [ 403.304610][T10117] loop5: detected capacity change from 0 to 256 [ 403.534107][T10117] FAT-fs (loop5): Directory bread(block 64) failed [ 403.579036][T10117] FAT-fs (loop5): Directory bread(block 65) failed [ 403.608124][T10117] FAT-fs (loop5): Directory bread(block 66) failed [ 403.637185][T10117] FAT-fs (loop5): Directory bread(block 67) failed [ 403.674149][T10117] FAT-fs (loop5): Directory bread(block 68) failed [ 403.710332][T10117] FAT-fs (loop5): Directory bread(block 69) failed [ 403.717010][T10117] FAT-fs (loop5): Directory bread(block 70) failed [ 403.762372][T10117] FAT-fs (loop5): Directory bread(block 71) failed [ 403.780036][T10117] FAT-fs (loop5): Directory bread(block 72) failed [ 403.786688][T10117] FAT-fs (loop5): Directory bread(block 73) failed [ 403.872203][T10139] tipc: Enabling of bearer rejected, failed to enable media [ 403.989304][ T9831] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.975760][ T9831] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.250619][ T7373] hsr_slave_0: left promiscuous mode [ 405.266794][ T7373] hsr_slave_1: left promiscuous mode [ 405.287902][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.308087][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.344378][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.374265][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.402483][T10160] loop3: detected capacity change from 0 to 1024 [ 405.472076][T10160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.505508][ T7373] veth1_macvtap: left promiscuous mode [ 405.512374][ T7373] veth0_macvtap: left promiscuous mode [ 406.894545][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.022928][T10170] loop6: detected capacity change from 0 to 4096 [ 407.274099][T10170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.617097][ T7373] team0 (unregistering): Port device team_slave_1 removed [ 408.856491][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 408.923629][ T7373] team0 (unregistering): Port device team_slave_0 removed [ 409.680424][ T9831] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.716904][ T9831] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.770326][T10196] tipc: Enabling of bearer rejected, failed to enable media [ 410.815683][T10209] loop3: detected capacity change from 0 to 256 [ 410.859123][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.988078][T10209] FAT-fs (loop3): Directory bread(block 64) failed [ 411.070173][T10209] FAT-fs (loop3): Directory bread(block 65) failed [ 411.089408][ T9831] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.098226][T10209] FAT-fs (loop3): Directory bread(block 66) failed [ 411.143478][T10209] FAT-fs (loop3): Directory bread(block 67) failed [ 411.168719][T10209] FAT-fs (loop3): Directory bread(block 68) failed [ 411.189074][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.196297][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.220504][T10209] FAT-fs (loop3): Directory bread(block 69) failed [ 411.235727][T10209] FAT-fs (loop3): Directory bread(block 70) failed [ 411.274042][T10209] FAT-fs (loop3): Directory bread(block 71) failed [ 411.291215][T10209] FAT-fs (loop3): Directory bread(block 72) failed [ 411.308092][T10209] FAT-fs (loop3): Directory bread(block 73) failed [ 411.377953][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.385255][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.720490][T10252] syz_tun: entered promiscuous mode [ 414.334463][T10249] syz_tun: left promiscuous mode [ 415.064241][T10260] tipc: Enabled bearer , priority 0 [ 415.394484][T10256] tipc: Resetting bearer [ 417.345809][ T9011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.195038][T10337] loop6: detected capacity change from 0 to 1024 [ 425.258496][T10337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.306802][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 425.306824][ T30] audit: type=1800 audit(1746327950.803:339): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1332" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 428.073724][ T9011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.428718][T10354] loop6: detected capacity change from 0 to 1024 [ 428.466491][T10354] EXT4-fs: Ignoring removed orlov option [ 428.508999][T10354] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 428.639600][T10354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.074469][ T9011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.433700][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.442723][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.450619][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.459799][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.468301][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.937200][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 431.946995][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 431.955995][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 431.966026][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 431.975049][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 432.439163][T10384] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 432.514487][ T54] Bluetooth: hci3: command tx timeout [ 432.535814][T10256] tipc: Disabling bearer [ 432.618598][T10388] veth17: entered promiscuous mode [ 433.807200][ T9831] ================================================================== [ 433.815305][ T9831] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x35d/0x590 [ 433.823135][ T9831] Read of size 8 at addr ffffffff99d14828 by task syz-executor/9831 [ 433.831117][ T9831] [ 433.833437][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 433.833463][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 433.833477][ T9831] Call Trace: [ 433.833486][ T9831] [ 433.833494][ T9831] dump_stack_lvl+0x189/0x250 [ 433.833529][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.833555][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.833579][ T9831] ? __kasan_check_byte+0x12/0x40 [ 433.833606][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.833636][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.833660][ T9831] ? rcu_is_watching+0x15/0xb0 [ 433.833693][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.833717][ T9831] ? lock_release+0x4b/0x3e0 [ 433.833749][ T9831] ? __virt_addr_valid+0x18c/0x540 [ 433.833777][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.833801][ T9831] ? __virt_addr_valid+0x469/0x540 [ 433.833830][ T9831] print_report+0xb4/0x290 [ 433.833856][ T9831] ? fib6_clean_node+0x35d/0x590 [ 433.833879][ T9831] kasan_report+0x118/0x150 [ 433.833904][ T9831] ? fib6_add+0x2fd5/0x4360 [ 433.833925][ T9831] ? fib6_clean_node+0x35d/0x590 [ 433.833952][ T9831] fib6_clean_node+0x35d/0x590 [ 433.833977][ T9831] ? __pfx_fib6_clean_node+0x10/0x10 [ 433.834003][ T9831] ? __local_bh_enable_ip+0x12d/0x1c0 [ 433.834037][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834064][ T9831] fib6_walk_continue+0x67b/0x910 [ 433.834095][ T9831] fib6_walk+0x149/0x290 [ 433.834118][ T9831] __fib6_clean_all+0x234/0x380 [ 433.834139][ T9831] ? __fib6_clean_all+0x9b/0x380 [ 433.834161][ T9831] ? __pfx_fib6_ifup+0x10/0x10 [ 433.834184][ T9831] ? __pfx___fib6_clean_all+0x10/0x10 [ 433.834208][ T9831] ? __pfx_fib6_clean_node+0x10/0x10 [ 433.834231][ T9831] ? __pfx_fib6_ifup+0x10/0x10 [ 433.834262][ T9831] rt6_sync_up+0x128/0x160 [ 433.834285][ T9831] ? __pfx_rt6_sync_up+0x10/0x10 [ 433.834307][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834335][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834359][ T9831] ? do_raw_read_unlock+0x3d/0x80 [ 433.834390][ T9831] addrconf_notify+0xb1c/0x1010 [ 433.834419][ T9831] notifier_call_chain+0x1b6/0x3e0 [ 433.834444][ T9831] __dev_notify_flags+0x18d/0x2e0 [ 433.834473][ T9831] ? __pfx___dev_notify_flags+0x10/0x10 [ 433.834497][ T9831] ? __dev_change_flags+0x4cc/0x6d0 [ 433.834525][ T9831] ? __pfx___dev_change_flags+0x10/0x10 [ 433.834554][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834581][ T9831] netif_change_flags+0xe8/0x1a0 [ 433.834609][ T9831] do_setlink+0xcb9/0x40d0 [ 433.834643][ T9831] ? __pfx_do_setlink+0x10/0x10 [ 433.834666][ T9831] ? do_raw_spin_lock+0x121/0x290 [ 433.834696][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834719][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.834744][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834769][ T9831] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 433.834791][ T9831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 433.834815][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834840][ T9831] ? rcu_is_watching+0x15/0xb0 [ 433.834873][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.834897][ T9831] ? __mutex_lock+0xa6d/0xe80 [ 433.834922][ T9831] ? __mutex_lock+0x51b/0xe80 [ 433.834950][ T9831] ? rtnl_newlink+0x8db/0x1c70 [ 433.834973][ T9831] ? __pfx___mutex_lock+0x10/0x10 [ 433.834997][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835026][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835050][ T9831] ? ns_capable+0x8a/0xf0 [ 433.835070][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835094][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835121][ T9831] rtnl_newlink+0x160b/0x1c70 [ 433.835142][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835173][ T9831] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.835194][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835219][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835249][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835273][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835305][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835329][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835360][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835392][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835416][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835453][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835479][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 433.835511][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835535][ T9831] ? is_bpf_text_address+0x292/0x2b0 [ 433.835564][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 433.835597][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835621][ T9831] ? aa_get_newest_label+0xf7/0x5d0 [ 433.835645][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835669][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835704][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835734][ T9831] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.835755][ T9831] rtnetlink_rcv_msg+0x7cf/0xb70 [ 433.835776][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835801][ T9831] ? kasan_save_track+0x4f/0x80 [ 433.835825][ T9831] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 433.835846][ T9831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.835867][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.835891][ T9831] ? __lock_acquire+0xaac/0xd20 [ 433.835927][ T9831] netlink_rcv_skb+0x21c/0x490 [ 433.835950][ T9831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.835973][ T9831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.835993][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836027][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836052][ T9831] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.836074][ T9831] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.836100][ T9831] netlink_unicast+0x75b/0x8d0 [ 433.836139][ T9831] netlink_sendmsg+0x805/0xb30 [ 433.836167][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.836192][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836216][ T9831] ? aa_sock_msg_perm+0x94/0x160 [ 433.836238][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836262][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836286][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.836310][ T9831] __sock_sendmsg+0x21c/0x270 [ 433.836345][ T9831] __sys_sendto+0x3bd/0x520 [ 433.836376][ T9831] ? __pfx___sys_sendto+0x10/0x10 [ 433.836407][ T9831] ? fput_close_sync+0x119/0x200 [ 433.836444][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.836469][ T9831] ? dnotify_flush+0x1db/0x5e0 [ 433.836498][ T9831] ? __pfx_fput_close_sync+0x10/0x10 [ 433.836533][ T9831] __x64_sys_sendto+0xde/0x100 [ 433.836560][ T9831] do_syscall_64+0xf6/0x210 [ 433.836585][ T9831] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 433.836610][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.836631][ T9831] RIP: 0033:0x7f2cf51907fc [ 433.836649][ T9831] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 433.836667][ T9831] RSP: 002b:00007ffe66e38710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.836690][ T9831] RAX: ffffffffffffffda RBX: 00007f2cf5ee4620 RCX: 00007f2cf51907fc [ 433.836706][ T9831] RDX: 0000000000000020 RSI: 00007f2cf5ee4670 RDI: 0000000000000003 [ 433.836720][ T9831] RBP: 0000000000000000 R08: 00007ffe66e38764 R09: 000000000000000c [ 433.836734][ T9831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 433.836747][ T9831] R13: 0000000000000000 R14: 00007f2cf5ee4670 R15: 0000000000000000 [ 433.836770][ T9831] [ 433.836777][ T9831] [ 434.550463][ T9831] The buggy address belongs to the variable: [ 434.556428][ T9831] binder_devices+0x8/0x20 [ 434.560855][ T9831] [ 434.563166][ T9831] The buggy address belongs to the physical page: [ 434.569562][ T9831] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19d14 [ 434.578311][ T9831] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 434.586203][ T9831] raw: 00fff00000002000 ffffea0000674508 ffffea0000674508 0000000000000000 [ 434.594803][ T9831] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 434.603387][ T9831] page dumped because: kasan: bad access detected [ 434.609787][ T9831] page_owner info is not present (never set?) [ 434.615841][ T9831] [ 434.618155][ T9831] Memory state around the buggy address: [ 434.623779][ T9831] ffffffff99d14700: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 434.631835][ T9831] ffffffff99d14780: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 434.639889][ T9831] >ffffffff99d14800: f9 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 00 00 00 00 [ 434.647943][ T9831] ^ [ 434.653303][ T9831] ffffffff99d14880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.661371][ T9831] ffffffff99d14900: 00 00 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 [ 434.669422][ T9831] ================================================================== [ 434.677605][ T9831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.684813][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 434.696966][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 434.707017][ T9831] Call Trace: [ 434.710291][ T9831] [ 434.713214][ T9831] dump_stack_lvl+0x99/0x250 [ 434.717810][ T9831] ? __asan_memcpy+0x40/0x70 [ 434.722398][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.727601][ T9831] ? __pfx__printk+0x10/0x10 [ 434.732190][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.737823][ T9831] panic+0x2db/0x790 [ 434.741725][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.747366][ T9831] ? __pfx_panic+0x10/0x10 [ 434.751794][ T9831] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 434.757684][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.763323][ T9831] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.769263][ T9831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.775587][ T9831] ? print_memory_metadata+0x314/0x400 [ 434.781052][ T9831] ? fib6_clean_node+0x35d/0x590 [ 434.785987][ T9831] check_panic_on_warn+0x89/0xb0 [ 434.790934][ T9831] ? fib6_clean_node+0x35d/0x590 [ 434.795871][ T9831] end_report+0x78/0x160 [ 434.800115][ T9831] kasan_report+0x129/0x150 [ 434.804621][ T9831] ? fib6_add+0x2fd5/0x4360 [ 434.809119][ T9831] ? fib6_clean_node+0x35d/0x590 [ 434.814057][ T9831] fib6_clean_node+0x35d/0x590 [ 434.818822][ T9831] ? __pfx_fib6_clean_node+0x10/0x10 [ 434.824108][ T9831] ? __local_bh_enable_ip+0x12d/0x1c0 [ 434.829486][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.835120][ T9831] fib6_walk_continue+0x67b/0x910 [ 434.840268][ T9831] fib6_walk+0x149/0x290 [ 434.844507][ T9831] __fib6_clean_all+0x234/0x380 [ 434.849363][ T9831] ? __fib6_clean_all+0x9b/0x380 [ 434.854296][ T9831] ? __pfx_fib6_ifup+0x10/0x10 [ 434.859074][ T9831] ? __pfx___fib6_clean_all+0x10/0x10 [ 434.864446][ T9831] ? __pfx_fib6_clean_node+0x10/0x10 [ 434.869727][ T9831] ? __pfx_fib6_ifup+0x10/0x10 [ 434.874499][ T9831] rt6_sync_up+0x128/0x160 [ 434.878914][ T9831] ? __pfx_rt6_sync_up+0x10/0x10 [ 434.883848][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889481][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.895109][ T9831] ? do_raw_read_unlock+0x3d/0x80 [ 434.900133][ T9831] addrconf_notify+0xb1c/0x1010 [ 434.904987][ T9831] notifier_call_chain+0x1b6/0x3e0 [ 434.910098][ T9831] __dev_notify_flags+0x18d/0x2e0 [ 434.915123][ T9831] ? __pfx___dev_notify_flags+0x10/0x10 [ 434.920667][ T9831] ? __dev_change_flags+0x4cc/0x6d0 [ 434.925866][ T9831] ? __pfx___dev_change_flags+0x10/0x10 [ 434.931414][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.937047][ T9831] netif_change_flags+0xe8/0x1a0 [ 434.941989][ T9831] do_setlink+0xcb9/0x40d0 [ 434.946410][ T9831] ? __pfx_do_setlink+0x10/0x10 [ 434.951256][ T9831] ? do_raw_spin_lock+0x121/0x290 [ 434.956287][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.961943][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.967142][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.972778][ T9831] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.978669][ T9831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.984991][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.990625][ T9831] ? rcu_is_watching+0x15/0xb0 [ 434.995397][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.001026][ T9831] ? __mutex_lock+0xa6d/0xe80 [ 435.005703][ T9831] ? __mutex_lock+0x51b/0xe80 [ 435.010379][ T9831] ? rtnl_newlink+0x8db/0x1c70 [ 435.015140][ T9831] ? __pfx___mutex_lock+0x10/0x10 [ 435.020160][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.025794][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.031424][ T9831] ? ns_capable+0x8a/0xf0 [ 435.035750][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.041384][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.047018][ T9831] rtnl_newlink+0x160b/0x1c70 [ 435.051693][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.057330][ T9831] ? __pfx_rtnl_newlink+0x10/0x10 [ 435.062367][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.067999][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.072860][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.078492][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.083357][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.088985][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.093840][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.099471][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.105099][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.109961][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.115590][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 435.120793][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.126423][ T9831] ? is_bpf_text_address+0x292/0x2b0 [ 435.131710][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 435.136915][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.142544][ T9831] ? aa_get_newest_label+0xf7/0x5d0 [ 435.147740][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.153380][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.158241][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.163877][ T9831] ? __pfx_rtnl_newlink+0x10/0x10 [ 435.168896][ T9831] rtnetlink_rcv_msg+0x7cf/0xb70 [ 435.173831][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.179464][ T9831] ? kasan_save_track+0x4f/0x80 [ 435.184313][ T9831] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 435.189426][ T9831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.194882][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.200513][ T9831] ? __lock_acquire+0xaac/0xd20 [ 435.205377][ T9831] netlink_rcv_skb+0x21c/0x490 [ 435.210139][ T9831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.215596][ T9831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.220875][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.226517][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.232148][ T9831] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.237342][ T9831] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.242543][ T9831] netlink_unicast+0x75b/0x8d0 [ 435.247319][ T9831] netlink_sendmsg+0x805/0xb30 [ 435.252098][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.257379][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.263010][ T9831] ? aa_sock_msg_perm+0x94/0x160 [ 435.267942][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.273573][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.279204][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.284527][ T9831] __sock_sendmsg+0x21c/0x270 [ 435.289213][ T9831] __sys_sendto+0x3bd/0x520 [ 435.293717][ T9831] ? __pfx___sys_sendto+0x10/0x10 [ 435.298746][ T9831] ? fput_close_sync+0x119/0x200 [ 435.303697][ T9831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.309325][ T9831] ? dnotify_flush+0x1db/0x5e0 [ 435.314101][ T9831] ? __pfx_fput_close_sync+0x10/0x10 [ 435.319395][ T9831] __x64_sys_sendto+0xde/0x100 [ 435.324161][ T9831] do_syscall_64+0xf6/0x210 [ 435.328664][ T9831] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 435.334295][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.340186][ T9831] RIP: 0033:0x7f2cf51907fc [ 435.344597][ T9831] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 435.364206][ T9831] RSP: 002b:00007ffe66e38710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 435.372626][ T9831] RAX: ffffffffffffffda RBX: 00007f2cf5ee4620 RCX: 00007f2cf51907fc [ 435.380601][ T9831] RDX: 0000000000000020 RSI: 00007f2cf5ee4670 RDI: 0000000000000003 [ 435.388566][ T9831] RBP: 0000000000000000 R08: 00007ffe66e38764 R09: 000000000000000c [ 435.396532][ T9831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 435.404505][ T9831] R13: 0000000000000000 R14: 00007f2cf5ee4670 R15: 0000000000000000 [ 435.412491][ T9831] [ 435.415842][ T9831] Kernel Offset: disabled [ 435.420175][ T9831] Rebooting in 86400 seconds..