last executing test programs: 6m50.012099755s ago: executing program 2 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000026000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={{0x0, 0xea60}}) 6m49.312025799s ago: executing program 2 (id=193): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m45.64401649s ago: executing program 2 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000240001030000000000001c00010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001540)=""/4075, 0xfeb}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000040)=""/45, 0x2d}], 0x3}, 0xacd2}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/204, 0xcc}, {0x0}, {&(0x7f0000000000)=""/59, 0x3b}], 0x3, &(0x7f0000000540)=""/238, 0xee}, 0x2}], 0x2, 0x10000, 0x0) 6m44.236020257s ago: executing program 2 (id=204): openat(0xffffffffffffff9c, 0x0, 0x129241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x8) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) 6m40.119878729s ago: executing program 2 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x40000001}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0xe, 0x7130, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 6m37.471941471s ago: executing program 2 (id=217): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x2ca, &(0x7f0000000ac0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000005240)={0x2020}, 0x2020) r6 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r6, &(0x7f0000003f40)={0xa, 0x4e20, 0x3, @private0, 0x5c6cd409}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 6m35.886345002s ago: executing program 32 (id=217): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x2ca, &(0x7f0000000ac0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000005240)={0x2020}, 0x2020) r6 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r6, &(0x7f0000003f40)={0xa, 0x4e20, 0x3, @private0, 0x5c6cd409}, 0x1c) fstat(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 5m57.989168834s ago: executing program 3 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) pipe(0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x81}}, {@mb_optimize_scan}, {@inlinecrypt}, {@nobh}]}, 0x3, 0x460, &(0x7f00000008c0)="$eJzs3MtvVNUfAPDvve2UX38FWxFf4KOKRuKjpYDKwoUaTVxgYqILXU7aQpAChtZESBOLC1wZY+LeuPRfcKUbY1yZuNW9ISGGjeBqzJ25t/NgZvpgpoPM55MMfM99zDnfuffMnHvPTAMYWtPZP0nE7oj4PSIma8XmDaZr/924vjp/8/rqfBKVyrt/JdXt/r6+Ol9sWuw30ViIJA60qXf54qUz5aWlxQt5eXbl7EezyxcvvXD6bPnU4qnFc0eOHz92dO7ll4682JM8JyLNo7c++OrtE1805d+SR49Md1v5dKXS4+oGa09DnIwOsCFsyUhEZIerVO3/kzES9YM3GW9+tl74dEANBPqmUqlUJjqvXqsAd7Ekmsu6PAyL4oO+uP5tdx38at9GH4N37bXaBVCW9438UVszun7HoNRyfdtL0xHx/to/32SP6M99CACAJj9k45/ns9HO6nw29qiPP9J4oGG7e/K5oamIuDci9kbEfXEu9kXE/RHVbR+MiIe2WH/rJMmt45/06rYS26Rs/PdKPrfVPP4rRn8xNZKX9lTzLyUnTy8tHs5fk0NR2pWV57rU8eMbv33ZaV3j+C97ZPUXY8G8HVdHdzXvs1BeKd9Ozo2uXY7YP9ou/2R9JiCJiIcjYn+7J0g3ruP0s9890mndxvl30YN5psq3Ec/Ujv9atORfSLrPT87+L5YWD88WZ8Wtfvn1yjud6r+t/HsgO/7/b3v+r+c/lTTO1y5vvY4rf3ze8ZpmO+f/WnmlPJa8V43H8mWflFdWLsxFjCUnao1uXH6kvm9RLrbP8j90sH3/3xv1V+JARGQn8aMR8VhEPJ63/YmIeDIiDnbJ/+fXn/qwddn4pvPvryz/hS0d/3owFq1L2gcjZ376vqnSqXqY53+z+/E/Vo0O5Us28/63mXZt72wGAACA/540InZHks6sx2k6M1P7Dv++iHTp/PLKcyfPf3xuofYbgakopcWdrsmG+6Fz+WV9rXw5ImpfLSjWH420et/465Hxanlm/vzSwqCThyE30aH/Z/4cGXTrgL7zey0YXvo/DK+u/b+0c+0Adt4t/b9rn9/V17YAO6vN5//4INoB7Lx2439/7weGQ0v/N+0HQ8T9fxhe+j8ML/0fhtLyeGz8I/muQfFM29z9rg2idEc0o29BpHdEMwR9Cgb7vgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAr/wYAAP//HtbacA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000140)) unshare(0x42000000) 5m55.052201475s ago: executing program 3 (id=374): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 5m54.836914908s ago: executing program 3 (id=377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="b9", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000380)=""/125, 0x7d, 0x1, 0x0, 0x0) 5m53.512105327s ago: executing program 3 (id=381): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) 5m52.664071727s ago: executing program 3 (id=389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001240)="911a995f86574c05757e9ef8b24c8005604ab304ca96ed3c743bd74e73de9368f18861a94ae6772a998c489b83a7d73d5ba9c2abe1cc4037e85c557122b962d722d61a0ae93ef1d7cf858a1422a68bf75119f0f9df682c6d58a3685beee7485d1bf40c9652fc8a69984407373a0c85562cc8a6892b7e954b799ddd1877cb79284fd090b2429f2f38975d56a7321ffe1b4a3d4379c7c72fd205cf51eccb7542d19c8ab880e4952766f3d1639cf3fabe53f0d7fd713e0a9125d36c36f5a3bf4b29a4a9bb2d4e290d196dd5b673eb7d625e3a1947011959a96799f1", 0xda}, {&(0x7f0000000ac0)="e1b7e5e5ed072893487722d93ae5148f8fbfc00174e292b01a523495a8337f6338cec42bbf7596ca60ffa58084f6d9c418f561939cb5de01640d1ce9f6001fe0d7d21893696f0005dcf400703ec4d4ac7ae4d924a6b2249014505e1bfd5d567ba018d018546cdf285604a2bad378d301160b251b871b8b32b585bfeb5a24e31bb087b76992423fed0f78139e910ed451faed57e8ce08d89d3c51f7ba14efbabc962991e0424cf0ca54a4b50aceedde99", 0xb0}, {&(0x7f0000000b80)="631940239aa1390eb7364996bb0e30043599876e2a57925280483a2dc5e4bc54d7dbe38536a3093e49a65400ebf8a799de89d35cbe9197f4b7feb08a137437475f871d34a7cd42ddfb51a0f35dcb67138d10fa18d7b67e1189eab53ef3f3098a48bf64f365f925b726b4d3d87f85aad8a6256da6a5be6eb1f397cf6831c319890dbeed59ad4caf9557c0ceb6fde01bbeb68483e81f05e5dc722b3901", 0x9c}, {&(0x7f0000000500)="a2477e284653dcd0189d73010fe052bd099b5dcac526ce27211077c2e21bc5d4cb62dacced3392a5473f052189cfe9e77b06d1d44802d377a75b966d2877b14851b36b68b682", 0x46}, {&(0x7f0000000d40)="d57bd5532d215a7d8559b31c6e4b90690ed12a7206e4b1d2648b837385e064ec5536e80a50f44efb9bacb87057be08bb8bd7824a70c183d949b26e002db16717d52fc4adaaa107f88c7cd609ae820b417142fdc96ea84e54ab13ff6cc878c15fb5ff18d934c71f689173930c07e35c5ad4bf042af3c59f92", 0x78}, {&(0x7f0000001000)="ff89db37d7839bbb4d4dac1780fb5050a66f3772dbd15eaad9a4a8e19948d4992142413bb5706cce7b74651cfd3cb40abb3ea1973e629190107c9ed61b351390378646d10db64cf9639536d92e05e4d95d4d7560d2eccb143bbfc32d1a6c1bc9866d7ec1a741be216297dfa95227591280f02c5d0a96b39cbc73682b2f0cdd9e3e60cb17c9efb2baaa02c8d56a40f553a712cd119b30379aec66005d25628df699241f863a31eba52505942c6446f18ab17669d264e0ea9db49aacdb3e470a796bc9d54f49b6e27c198fcf5443a45b4796590956", 0xd4}, {&(0x7f0000000380)="538a1b2deb90b7b8196656f8e1", 0xd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f00000006c0)="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", 0x1c2}, {&(0x7f0000001440)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a8", 0xee}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m52.251557222s ago: executing program 3 (id=393): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5m37.129521903s ago: executing program 33 (id=393): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m53.158182921s ago: executing program 4 (id=793): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local}) socket(0xa, 0x3, 0x3a) setreuid(0xffffffffffffffff, 0xee00) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 3m48.661513172s ago: executing program 4 (id=807): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x0, 0x1df, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x41, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 3m46.044735758s ago: executing program 4 (id=810): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3m45.641743683s ago: executing program 4 (id=811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000300), 0x1, 0x783, &(0x7f0000002200)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x44042, 0x0) unlink(&(0x7f0000000300)='./file1\x00') pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x9) syz_clone(0x802080, 0x0, 0x4d, 0x0, 0x0, 0x0) unlink(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m44.053833994s ago: executing program 4 (id=813): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$eJzs3AuYT1X3OPC99t6HMbl8m+S+116HbxpskyShJLkkSRKSe0LSJEmSxJBbEpKQ6yS5jAm5p4lxv19yT5q8kiQJCQn7/4zq7+331t976f17f++sz/Ocx17OWeus813P+J5znsd803VYjcY1qzYgIvHPUL8u4Oc/koQQMUKIgUKIPEKIQAhRLq5cXOb+HAqS/qmTsH+ThilXuwN2NfH8szaef9bG88/aeP5ZG88/a+P5Z208/6yN589YlpZa8Fresu7G7///l5P/SjJ//2cJ8Ec7eP7/bdQ/dDTPP2vj+WdtPP+sjeef9Vx+BAuuah/s6uOf/6yN589Ylvanvk+OvVakrj97td9p8/YPbIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2P8HZ/1lWgjx6/pq98UYY4wxxhhjjLE/j3//anfAGGOMMcYYY4yxfz8QUiihRSCyiewiRuQQseIakVPkErlFHhER14o4cZ3IK64X+UR+UUAUFIVEYVFEGIHCChKhKCqKiai4QRQXN4p4UUKUFKWEE6VFgrhJlBE3i7LiFlFO3CrKi9tEBVHx0jkz3SmqiLtEVXG3qCaqixqiprhH1BL3itriPlFH3C/qigdEPfGgqC8eEg1EQ9FIPCwai0dEE9FUNBPNRQvRUrS6Qn5ynt/Lf3FpdiFET9FLJIneoo94WfQV/UR/MUAMFK+IQeJVMVi8JoaIoWKYeF0MF2+IEeJNMVKMEqPFW2KMGCvGifFigpgoksXbYpJ4R0wW7z6SS0wV08R0kSJmiFTxnpgpZonZ4n0xR8wV80RyjgVioVgkevzyuX8kloilIl0sE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVfCy2ie1ih9gpdondYo/4ROwVn4p94jORAZ//g/lnfpsvuoEAARIkaNCQDbJBDMRALMRCTsgJuSE3RCACcRAHeSEv5IN8UAAKQBIUgiJQBBAQCAiKQlGIQhSKQ3GIh3goCSXBgYMESIAycMF7XxbKQTkoD+WhAlSEinA73A6VoTJUgSpQFapCNagGNaAG3AP3wL1QG2pDHagDdaEu1IN6UB/qQwNoAI2gETSGxtAEmkAzaAYtoAW0glbQGlpDG2gD7aAdtIf20AE6QCIkQkfoCJ2gE3SGztAFukBX6Ard4AV4AV6EF+EleAl6QTXZG/pAH+gLfaE/DIAB8AoMglfhVXgNhsBQGAavw+vwBoyA0zASRsFoGA2V5VgYB+OB5ERIhmTILibBZJgMU2AqTIXpkAIzIBVSYSbMglnwPsyBuTAX5sN8WAiLYBEshg8hDdJgCZyBdFgGy2EFrIRVsBLWwFpYA+thA6yHTbAJtsAW+Bg+hu2wHXbCTtgNu+ET+AQ+hU9hCGRABuyH/XAADsBBOAiH4BAchsNwBI7AUTgKx+AYHIcTcBJOwCk4BafhDJwVQpyDc3AezsNFuJj5wy8zaallNplNxsgYGStjZU6ZU+aWuWVERmScjJN5ZV6ZT+aTBWQBWUgWkkVkEYkSJclQFpVFZVRGZXFZXMbLeFlSlpROOpkgE2QZWUaWlWVlOXmrLC9vkxVkRdnW3S5vl5VlO1dF3iWryqqymqwua8iasqasJWvJ2rK2rCPryLqyrqwnH5T1ZW/oDw1l5mQay6HQRA6DZrK5bCFbyjfgUdlajoA2sq1sJx+Xo2AkdJCtXaJ8SnaU46CTfEaOh2dlFzkRusrnZTf5guwuX5Q9ZBvXU/aSU6C37COnQ1/ZT/aXA+RMqC4zJ1ZDviZfzD5UDpOvy4Xwhhwh35Qj5Sg5Wr4lx8ixcpwcLyfIiTJZvi0nyXfkZPmunCKnymlyukyRM2SqfE/OlLPkbPm+nCPnKiHnywVyoVwkP5CL5YcyTX4kl8ilMl0uk8vlCrlSrpKr5Rq5Vq6T6+UGuVFukpvlFrlVfiy3ye1yh9wpd8ndco/8RO6Vn8p98jOZIT+X++Vf5AH5hTwov5SH5FfysPxaHpHfyKPyW3lMfiePyxPypPxenpI/yNPyjDwrf5Tn5E/yvLwgL0ovhQIllVJaBSqbyq5iVA4Vq65ROVUulVvlURF1rYpT16m86nqVT+VXBXRBVUgVVkWUUaisIhWqoqqYiqobVHF1o4pXJVRJVUo5VVolqJtUGXWzKqtuUeXUraq8uk1VUBVVJS/UHaqyulNVUXepqupuVU1VVzVUTXWPqqXuVbXVfaqOul/VVQ+oeupBVV89pBqohqqRelg1Vo+oJqqpaqaaqxaqpWqlHlWt1WOqjWqr2qnHVXv1hOqgnlSJ6inVUT2tOqlnVGf1rOqinlNd1fOqm3pBdVcX1EXlVU/VSyWp3qqPeln1Vf1UfzVADVSvqEHqVTVYvaaGqKFqmHpdDVdvqBHqTTVSjVKj1VtqjBqrxqnxaoKaqJLV22qSekdNVu+qKWqqmqamqxQ1Q/X/pdLsvyP/nd/JH3zp7FvUVvWx2qa2qx1qp9qldqs9ao/aq/aqfWqfylAZar/arw6oA+qgOqgOqUPqsDqsjqgj6qg6qo6pY+q4OqF+VN+rU+oHdVqdUWfUj+qcOqfO//IZCA1aaqW1DnQ2nV3H6Bw6Vl+jc+pcOrfOoyP6Wh2nr9N59fU6n86vC+iCupAurItoo1FbTTrURXUxHdU36OL6Rh2vS+iSupR2urRO0Df9y/lX6q+VbqVb69a6jW6j2+l2ur1urzvoDjpRJ+qOuqPupDvpzrqz7qK76K66q+6mu+nuurvuoXvonrqnTtJJuo9+WffV/XR/PUAP1K/oQXqQHqwH6yF6iB6mh+nhergeoUfokXqkHq1H6zF6jB6nx+kJeoJO9nn0JD1JT9aT9RQ9RU8bmEen6BSdqlP1TD1Tz9az9Rw9R8/T8/QCvUAv0ov0Yr1Yp+k0vUQv0el6mV6mV+gVepVepdfoNXqdXqc36A16k96k0/VWvVVv09v0Dr1D79K79B69R+/Ve/U+vU9n6Ay9X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf1SX1Kn9Kn9Wl9Vp/V5/Q5fV6f1xf1xczbvkAGMtCBDrIF2YKYICaIDWKDnEHOIHeQO4gEkSAuiAvyBtcH+YL8QYGgYFAoKBwUCUyAgQ0oCIOiQbEgGtwQFA9uDOKDEkHJoFTggtJBQnBTUCa4OSgb3BKUC24Nyge3BRWCikGl4PbgjqBycGdQJbgrqBrcHVQLqgc1gprBPUGt4N6gdnBfUCe4P6gbPBDUCx4M6gcPBQ2ChkGj4OGgcfBI0CRoGjQLmgctgpZBqz+1vven8z/meppeJsn0Nn3My6av6Wf6mwFmoHnFDDKvmsHmNTPEDDXDzOtmuHnDjDBvmpFmlBlt3jJjzFgzzow3E8xEk2zeNpPMO2ayeddMMVPNtGC6STEzTKp5z8w0s8xs876ZY+aaeWa+WWAWGvj5llikmY/MErPUpJtlZrlZYVaaVWa1WWPWmnVmvdlgNppN5Qb9fKjZZrabHWan2WV2mz3mE7PXfGr2mc9Mhvnc7Dd/MQfMF+ag+dIcMl+Zw+Zrc8R8Y46ab80x8505bk6Yk+Z7c8r8YE6bM+as+dGcMz+Z8+aCuWh85s195tc7atSYDbNhDMZgLMZiTsyJuTE3RjCCcRiHeTEv5sN8WAALYCEshEWwCGYiJCyKRTGKUSyOxTEe47EklkSHDhMwActgGSyLZbEclsPyWB4rYAWshJXwDrwD78Q78S68C+/Gu7E6VseaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wEbYCBtjY2yCTbAZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2A27Y3fsgT2wJ/bEJEzCPtgH+2Jf7I/9cSAOxEE4CAfjYByCQ3AYDsPhOBxH4AgciaNwNL6FY3AsjsPxOAEnYjIm4ySchJNxMk7BKTgNp2EKpmAqpuJMnImzcTbOwTk4D+fhAlyAi3ARLsbFmIZpuASXYDqm43JcjitxJa7G1bgW1+J6XI8bcSNuxs24FbfiNtyGO3AH7sJduAf34F7ci/twH2ZgBu7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeBJP4ik8hafxNJ7Fs3gOf8LzeAEvoscYm8PG2mtsTpvL5rZ57P+MC9iCtpAtbItYY/PZ/L+J0Vobb0vYkraUdba0TbA3/U1cwVa0lezt9g5b2d5pq9gKNof467iWvdfWtvfZOvZ+W9Pe85u4rn3A1rOP2Pq2qW1gm9tGtqVtbB+xTWxT28w2ty1sS9vePmE72Cdton0qpqN9+q9jmxkvth/atXadXW832L32U3vW/miP2G/sOfuT7Wl72YH2FTvIvmoH29fsEDv0t7EQdrR9y46xY+04O95OsBP/Jp5mp9sUO8Om2vfsTDvrb+JF9gM7x6bZeXa+XWAXXooze0qzH9kldqlNt8vscrvCrrSr7Gq75v/2usJuspvtFrvHfmK32e12h91pd9ndl+LM69hnP7MZ9nN72H5tD9gv7EF71B6yX12KM6/vqP3WHrPf2eP2hD1pv7en7A/2tD1z6fozr/17e8FetN4KApKkSFNA2Sg7xVAOiqVrKCflotyUhyJ0LcXRdZSXrqd8lJ8KUEEqRIWpCBlCskQUUlEqRlG6gYrTjRRPJagklSJHpSmBbqIydDOVpVuoHN1K5emc974iVaLb6Q6qTHdSFbqLqtLdVI2qUw2qSfdQLbqXatN9VIfup7r0ANWjB6k+PUQNqCE1ooepMT1CTagpNaPm1IJaUit6lFrTY9SG2lI7epza0xPUgZ6kRHqKOtLT1Imeoc70LHWh56grPU/d6AXqTi9SD3qJelIvSqLe1Idepr7Uj/rTABpIr9AgepUG02s0hIbSMHqdhtMbNILepJE0ikbTWzSGxtI4Gk8TaCIl09s0id6hyfQuTaGpNI2mUwrNoFR6j2bSLJpN79McmkvzaD4toIW0iD6gxfQhpdFHtISWUjoto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK31M22g77aCdtIt20x76hPbSp7SPPqMM+pz201/oAH1BB+lLOkRf0WH6mo7QN3SUvqVj9B0dpxN0kr6nU/QDnaYzdJZ+pHP0E52nC3SRPIkQQhmqUIdBmC3MHsaEOcLY8JowZ5grzB3mCSPhtWFceF2YN7w+zBfmDwuEBcNCYeGwSGhCDG1IYRgWDYuF0fCGsHh4YxgflghLhqVCF5YOE8KbwjLhzWHZ8JawXHhrWD68LawQVgwrhbeHd4SVwzvDKuFdYdXw7rBaWD2sEdYM7wlrhfeGtcP7wjrh/WHZ8IGwXvhgWD98KGwQNgwbhQ+HjcNHwiZh07BZ2DxsEbYMW4WPhq3Dx8I2YduwXfh42D58IuwQPhkmhk+FHcOnL+8vEfz8bfo/9ieFvUP1y5ua+9SC6MLoougH0cXRD6Np0Y+iS6JLo+nRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S1R72tmFw4yH4SFdoHL5rK7GJfDxbprXE6Xy+V2eVzEXevi3HUur7ve5XP5XQFX0BVyhV0RZxw668iFrqgr5qLuBlfc3ejiXQlX0pVyzpV2Ca6la+VaudbuMdfGtXXt3OPucfeEe8I9GfNL466Te8Z1ds+6Lu4595x73nVzL7ju7kXXw73kerpeLskluT6uj+vr+rr+rr8b6Aa6QW6QG+wGuyFuiBvmhrnhbrgb4Ua4kW6kG+1GuzFujBvnxrkJboJLdslukpvkJrvJboqb4qa5aS7FpbhUl+pmuplutpvt5rg5bp6b5xa4BW6RW+QWu8UuzaW5JW6JS3fpbrlb7la6lW61W+3WurVuvVvvNrqNbrPb7La6rW6b2+Z2uB1ul9vl9rg9bq/b6/a5fS7DZbj9br874A64g+5Ld8h95Q67r90R94076r51x9x37rg74U46r065H9xpd8addT+6c+4nd95dcBedd8mRtyOTIu9EJkfejUyJTI1Mi0yPpERmRFIj70VmRmZFZkfej8yJzI3Mi8yPLIgsjCyKfBBZHPkwkhb5KLIksjSSHlkWWR5ZEVkZWRXxvvC20Bf1xXzU3+CL+xt9vC/hS/pS3vnSPsHf5Mv4m31Zf4sv52/15f1tvoKv6Cv5pr6Zb+5b+Ja+lX/Ut/aP+Ta+rW/nH/ft/RO+g3/SJ/qnfEf/tO/kn/Gd/bO+i3/Od/XPz/1lyr6Hf8n39L18ku/t+/iXfV/fz/f3A/xA/4of5F/1g/1rfogf6of51/1w/4Yf4d/0I/0oP9q/5cf4sX6cH+8n+Ik+2b/tJ/l3/GT/rp/ip/ppfrpP8TN8qn/Pz/Sz/Gz/vp/j5/p5fr5f4Bf6Rf4Dv9h/6NP8R36JX+rT/TK/3K/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/3Hfpvf7nf4nX6X3+33+E/8Xv+p3+c/8xn+c7/f/8Uf8F/4g/5Lf8h/5Q/7r/0R/40/6r/1x/x3/rg/4U/67/0p/4M/7c/4s/5Hf87/5M/7C/4i/581xhhjjLG/i7rC/t6/83fyly1THyFEru05/6bmxnw/r/vJvR0jQoinenVt+OvWsGFSUtIvx6YrERSbL4SIXM7PJi7Hy0Q78YRIFG1Fmd/tr5+sdOm+7/9VP3qrELFC5Pg1J/Px6Nf4cv2b/6B+0w/oD+sv+7n+fCHii13OySz8a3y5ftk/qL+7/R/Xv9R/ji+ShWjzVzmZn/av8eX6CeIx8bRI/M2RjDHGGGOMMcbYz/rJc92u8Px56fm8kP5t3q/xlZ7Pr6DKv9o/Y4wxxhhjjDHGruzZF7o/+WhiYtvO/82L7P/2U0wS/xlXeqUFCCH+A9r4sxbiP6ON/8rF1f6XiTHGGGOMMfZnu3zTf7U7YYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsq5//jeEyb/74Kt9jYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9n8CAAD//1U9VPM=") 3m41.72796552s ago: executing program 4 (id=818): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x4020, &(0x7f0000001f40)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@namecase}, {@errors_remount}, {@namecase}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 3m39.77855585s ago: executing program 34 (id=818): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x4020, &(0x7f0000001f40)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@namecase}, {@errors_remount}, {@namecase}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 2m51.52978482s ago: executing program 0 (id=939): r0 = socket(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000e40)=ANY=[], 0xfdef) ioctl$FIONCLEX(r4, 0x5450) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a80)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x181fbfb9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x4, 0x6, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd10a43cb}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x80}}, 0x20094) sendto$unix(r0, 0x0, 0x0, 0x24000800, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) 2m50.003958936s ago: executing program 0 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_socket_connect_nvme_tcp() 2m48.563916721s ago: executing program 0 (id=945): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz0\x00', {0x3, 0x4, 0xfff7, 0x4}, 0x1, [0x8, 0x9, 0x0, 0x5, 0xfffffffb, 0x6, 0x7, 0x8, 0x80, 0x1, 0x7, 0x85, 0x0, 0x4, 0x6, 0x2, 0xe8cd, 0x80, 0x80000001, 0x1, 0x5, 0xa, 0x5, 0xfffffff8, 0x8, 0x1ff, 0x0, 0x0, 0x9, 0x4, 0xa2f2, 0x7, 0x9, 0x400, 0x0, 0x5, 0x9, 0x9, 0xff, 0xfc6, 0x8, 0x5, 0x510, 0x5, 0x5, 0x8, 0x101, 0x80000001, 0x80000001, 0x6, 0x5, 0xffffffff, 0x2, 0x3, 0x7f, 0x9, 0x2, 0xfff, 0x1000, 0x4, 0x1, 0x4, 0x7, 0x3], [0x5, 0x8, 0xa85, 0x7, 0x80000001, 0x7bb0, 0x5, 0x8, 0x1, 0x80000000, 0x2, 0x60, 0xf, 0x0, 0x8d, 0x20, 0x46dbae4, 0x1, 0x1000, 0x7, 0x8, 0x1, 0x5, 0x9, 0x5, 0x10, 0x0, 0x0, 0x1e, 0x9, 0x2, 0xfff, 0x87f, 0x5, 0x5, 0x6, 0x8, 0xfffffff4, 0x5, 0x7, 0x8, 0x3, 0x5, 0x9, 0x7, 0xe, 0x9, 0x6, 0x8, 0x1ff, 0x200, 0x8000, 0x4, 0x377e3a9c, 0x8, 0x4, 0x4, 0x3, 0x3, 0xdd, 0x4, 0xffff, 0x0, 0x1], [0x0, 0x10, 0x7, 0x6, 0xf, 0xfffffffb, 0x1000000, 0x4, 0x59, 0x9, 0x1, 0x8d, 0x1, 0x9, 0x1, 0x8, 0x6, 0x2, 0x8, 0xffffffff, 0x5, 0x84, 0x608, 0x1, 0x10, 0x3, 0xf, 0x3, 0x1000, 0x101, 0xfffff800, 0xf249, 0x7, 0x6, 0x7, 0x5, 0x9, 0x0, 0xfffffffd, 0x3, 0x80000000, 0x2, 0x5, 0xffffff33, 0x4, 0x8, 0x345f, 0x0, 0x1, 0x0, 0x80000000, 0x2, 0x9, 0xb, 0x40, 0xdf4a, 0x1, 0x4fc1, 0x232a, 0x1, 0x0, 0xb920, 0x5], [0xda, 0x10000, 0x7fffffff, 0x9, 0x115, 0xda7, 0x1, 0x3, 0xfffffa34, 0x8, 0x2, 0x401, 0x2, 0x0, 0x1, 0x3, 0xa, 0x1, 0xe, 0x0, 0x5, 0x4, 0x7, 0x1, 0x401, 0xffff, 0x5, 0x4, 0x3, 0x35, 0x8, 0xa, 0x2, 0x800, 0xc7, 0x7fffffff, 0xd9, 0x2000000, 0x2, 0x401, 0x3, 0x401, 0x80, 0x3, 0x3, 0x3, 0x2, 0x9, 0x9, 0x9, 0x1, 0x2, 0x1, 0xe8b, 0x5, 0x1, 0x36, 0xa, 0x80, 0xe, 0x8, 0x0, 0x413f, 0x6]}, 0x45c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 2m45.500992391s ago: executing program 0 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x10, 0x0, 0x6) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000000)={r6}) 2m40.052997491s ago: executing program 0 (id=960): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @address_reply={0x12, 0x0, 0x0, 0xd}}}}}, 0x0) 2m35.819521538s ago: executing program 0 (id=969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x10, 0x0, 0x6) 2m19.763468565s ago: executing program 35 (id=969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x10, 0x0, 0x6) 1m57.022686339s ago: executing program 7 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) 1m55.83115535s ago: executing program 7 (id=1051): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040004) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1341696c75ae59ef60d6651e533427c321931342789e9ecca6cdcaed44b9203b", @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='neigh_update\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x2d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffdd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a0101000000000000000001000000"], 0xac}}, 0x0) close(r2) 1m53.562280808s ago: executing program 7 (id=1056): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x53, 0x401, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x80, 0x8000, 0x7, 0x2}}) 1m52.942622654s ago: executing program 7 (id=1059): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) 1m51.583847202s ago: executing program 7 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) 1m48.531815833s ago: executing program 7 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x7232f6d96a0831db) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 1m33.396503096s ago: executing program 36 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x7232f6d96a0831db) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 15.978060857s ago: executing program 8 (id=1248): ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0}) madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") 13.537703004s ago: executing program 5 (id=1251): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x2}, 0x1c) creat(0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 12.334125323s ago: executing program 5 (id=1252): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='6\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0x6, 0x64, @remote, @empty, 0xf5b627c0c45c4c55, 0x8000, 0x0, 0xcd9}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xd, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="18010000210001000000000000000000e0000002000000000000000000000000fe88000000000000000000000000000100"/58, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00c600221bab6dbf99001300ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000009c001100ac1414bb0000001000785000000000007f000001000000000000000000000000fc000000000000000010100000000000"], 0x118}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.222436158s ago: executing program 8 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, 0x0, 0x0}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) 10.894525429s ago: executing program 8 (id=1255): r0 = socket(0x11, 0x2, 0xfffffff2) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) 10.748034979s ago: executing program 5 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 10.582690452s ago: executing program 8 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.924563544s ago: executing program 1 (id=1259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 6.703929566s ago: executing program 5 (id=1260): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84342, 0x10d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180019000000020600950e00000000002200000800"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x5bbd, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x76a, &(0x7f0000000100), &(0x7f0000000340), 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), 0x0) io_uring_enter(r4, 0x1413, 0x6040000, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.49036444s ago: executing program 1 (id=1261): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$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") 6.339870369s ago: executing program 6 (id=1262): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x2}, 0x1c) creat(0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 6.228113783s ago: executing program 8 (id=1263): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x714}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000380)=ANY=[@ANYRES16=r1], 0x81, 0x2b2, &(0x7f0000000b40)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000005240)={0x2020}, 0x2020) 5.694476123s ago: executing program 1 (id=1264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x8000000, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tcp_congestion(r8, &(0x7f0000000180)='illinois\x00', 0x9) 4.526674952s ago: executing program 6 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, 0x0, 0x0}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) 3.16856188s ago: executing program 1 (id=1266): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xff], [0xffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xf, 0x2, 0x3, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) 3.168165605s ago: executing program 5 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) inotify_init() umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2.594184459s ago: executing program 6 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x16}}, {@blksize={'blksize', 0x3d, 0x1800}}]}}) 1.247784215s ago: executing program 1 (id=1269): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000041000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000000001000000090001"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pB \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, 0x0, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 963.928761ms ago: executing program 6 (id=1270): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 839.786798ms ago: executing program 5 (id=1271): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) 679.696405ms ago: executing program 6 (id=1272): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001dc0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d"], 0x1, 0x1534, &(0x7f0000002d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) 325.598508ms ago: executing program 6 (id=1273): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') lseek(r5, 0x8001, 0x0) 198.893808ms ago: executing program 8 (id=1274): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a0c1e5000000000000000000000002000000000000000f2c4eb0e6f2d364513d19edde79a6c095b411ff75121e5b81bdb75c81959d5f12037f04ce4809fb56424d8fd64663d0f4e945b4465168941b21c5616b996b4e62add341116bffd087cf6935af172671468ac9956329a42f7696a8e5c372630e18ed216160ab12fa0739cdfe2770e63f3510862b10d9e6977eef34eebdb761f9cdf4b0d2fdab9e612f79d53f97ffe96f704b70580b9e7f607a7c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x15, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x6, 0xa, 0x9, 0x10, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000001280)="e33264c3") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) socket$inet6(0xa, 0x0, 0x7) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 1 (id=1275): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001240)="911a995f86574c05757e9ef8b24c8005604ab304ca96ed3c743bd74e73de9368f18861a94ae6772a998c489b83a7d73d5ba9c2abe1cc4037e85c557122b962d722d61a0ae93ef1d7cf858a1422a68bf75119f0f9df682c6d58a3685beee7485d1bf40c9652fc8a69984407373a0c85562cc8a6892b7e954b799ddd1877cb79284fd090b2429f2f38975d56a7321ffe1b4a3d4379c7c72fd205cf51eccb7542d19c8ab880e4952766f3d1639cf3fabe53f0d7fd713e0a9125d36c36f5a3bf4b29a4a9bb2d4e290d196dd5b673eb7d625e3a1947011959a96799f1", 0xda}, {&(0x7f0000000ac0)="e1b7e5e5ed072893487722d93ae5148f8fbfc00174e292b01a523495a8337f6338cec42bbf7596ca60ffa58084f6d9c418f561939cb5de01640d1ce9f6001fe0d7d21893696f0005dcf400703ec4d4ac7ae4d924a6b2249014505e1bfd5d567ba018d018546cdf285604a2bad378d301160b251b871b8b32b585bfeb5a24e31bb087b76992423fed0f78139e910ed451faed57e8ce08d89d3c51f7ba14efbabc962991e0424cf0ca54a4b50aceedde99", 0xb0}, {&(0x7f0000000b80)="631940239aa1390eb7364996bb0e30043599876e2a57925280483a2dc5e4bc54d7dbe38536a3093e49a65400ebf8a799de89d35cbe9197f4b7feb08a137437475f871d34a7cd42ddfb51a0f35dcb67138d10fa18d7b67e1189eab53ef3f3098a48bf64f365f925b726b4d3d87f85aad8a6256da6a5be6eb1f397cf6831c319890dbeed59ad4caf9557c0ceb6fde01bbeb68483e81f05e5dc", 0x98}, {&(0x7f0000000500)="a2477e284653dcd0189d73010fe052bd099b5dcac526ce27211077c2e21bc5d4cb62dacced3392a5473f052189cfe9e77b06d1d44802d377a75b966d2877b14851b36b68b682", 0x46}, {&(0x7f0000000d40)="d57bd5532d215a7d8559b31c6e4b90690ed12a7206e4b1d2648b837385e064ec5536e80a50f44efb9bacb87057be08bb8bd7824a70c183d949b26e002db16717d52fc4adaaa107f88c7cd609ae820b417142fdc96ea84e54ab13ff6cc878c15fb5ff18d934c71f689173930c07e35c5ad4bf042af3c59f92ccd4fff951d7b1b378fd5b1069d8f47667", 0x89}, {&(0x7f0000001000)="ff89db37d7839bbb4d4dac1780fb5050a66f3772dbd15eaad9a4a8e19948d4992142413bb5706cce7b74651cfd3cb40abb3ea1973e629190107c9ed61b351390378646d10db64cf9639536d92e05e4d95d4d7560d2eccb143bbfc32d1a6c1bc9866d7ec1a741be216297dfa95227591280f02c5d0a96b39cbc73682b2f0cdd9e3e60cb17c9efb2baaa02c8d56a40f553a712cd119b30379aec66005d25628df699241f863a31eba52505942c6446f18ab17669d264e0ea9db49aacdb3e470a796bc9d54f49b6e27c198fcf5443a45b4796590956", 0xd4}, {&(0x7f0000000380)="538a1b2deb90b7b8196656f8e1", 0xd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f00000006c0)="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", 0x1c2}, {&(0x7f0000001440)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a8", 0xee}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): cutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 293.702165][ T30] audit: type=1326 audit(1746327737.003:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 293.725582][ T8515] loop1: detected capacity change from 0 to 512 [ 293.756345][ T8515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.794096][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.846129][ T30] audit: type=1326 audit(1746327737.003:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 293.996486][ T8515] EXT4-fs (loop1): 1 truncate cleaned up [ 294.024368][ T30] audit: type=1326 audit(1746327737.013:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 294.087408][ T8515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.357853][ T8528] loop7: detected capacity change from 0 to 256 [ 295.310632][ T8528] FAT-fs (loop7): Directory bread(block 64) failed [ 295.350333][ T8528] FAT-fs (loop7): Directory bread(block 65) failed [ 295.391109][ T8528] FAT-fs (loop7): Directory bread(block 66) failed [ 295.469898][ T8528] FAT-fs (loop7): Directory bread(block 67) failed [ 295.519359][ T8528] FAT-fs (loop7): Directory bread(block 68) failed [ 295.554184][ T8528] FAT-fs (loop7): Directory bread(block 69) failed [ 295.585201][ T8528] FAT-fs (loop7): Directory bread(block 70) failed [ 295.652200][ T8528] FAT-fs (loop7): Directory bread(block 71) failed [ 295.662064][ T8543] loop0: detected capacity change from 0 to 256 [ 295.687369][ T8528] FAT-fs (loop7): Directory bread(block 72) failed [ 295.755560][ T8528] FAT-fs (loop7): Directory bread(block 73) failed [ 296.296340][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.002426][ T8561] netlink: 92 bytes leftover after parsing attributes in process `syz.0.709'. [ 297.752285][ T8565] loop7: detected capacity change from 0 to 16 [ 297.791313][ T8565] erofs: Unknown parameter '@' [ 298.015929][ T8567] loop1: detected capacity change from 0 to 1024 [ 298.085511][ T8567] EXT4-fs: Ignoring removed nobh option [ 298.144935][ T8567] EXT4-fs: Ignoring removed bh option [ 298.378409][ T8567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.670824][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.896889][ T8616] netlink: 92 bytes leftover after parsing attributes in process `syz.4.724'. [ 301.380835][ T8637] loop4: detected capacity change from 0 to 512 [ 301.427993][ T8637] EXT4-fs (loop4): Test dummy encryption mode enabled [ 301.498430][ T8637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.570559][ T8637] EXT4-fs (loop4): 1 truncate cleaned up [ 301.578118][ T8637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.893204][ T8637] fscrypt (loop4): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 303.043329][ T8649] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 303.373857][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.579549][ T8669] loop4: detected capacity change from 0 to 256 [ 303.780644][ T8669] FAT-fs (loop4): Directory bread(block 64) failed [ 303.825334][ T8669] FAT-fs (loop4): Directory bread(block 65) failed [ 303.861388][ T8669] FAT-fs (loop4): Directory bread(block 66) failed [ 303.867962][ T8669] FAT-fs (loop4): Directory bread(block 67) failed [ 303.907883][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 303.907903][ T30] audit: type=1326 audit(1746327747.483:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 303.949944][ T8669] FAT-fs (loop4): Directory bread(block 68) failed [ 303.956489][ T8669] FAT-fs (loop4): Directory bread(block 69) failed [ 303.983839][ T8669] FAT-fs (loop4): Directory bread(block 70) failed [ 303.993881][ T30] audit: type=1326 audit(1746327747.483:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 304.049831][ T8669] FAT-fs (loop4): Directory bread(block 71) failed [ 304.056465][ T8669] FAT-fs (loop4): Directory bread(block 72) failed [ 304.113768][ T30] audit: type=1326 audit(1746327747.493:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 304.129991][ T8669] FAT-fs (loop4): Directory bread(block 73) failed [ 304.203544][ T30] audit: type=1326 audit(1746327747.493:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 305.111102][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 305.526356][ T8696] loop7: detected capacity change from 0 to 256 [ 305.556320][ T8700] netlink: 92 bytes leftover after parsing attributes in process `syz.4.738'. [ 305.722585][ T8707] No such timeout policy "syz1" [ 305.749854][ T30] audit: type=1804 audit(1746327749.323:167): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.740" name="/newroot/22/file0/bus" dev="overlay" ino=148 res=1 errno=0 [ 306.752515][ T8716] loop4: detected capacity change from 0 to 1024 [ 306.932523][ T8716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.123219][ T8759] loop1: detected capacity change from 0 to 256 [ 311.020420][ T8769] netlink: 92 bytes leftover after parsing attributes in process `syz.7.756'. [ 311.308235][ T8773] loop6: detected capacity change from 0 to 256 [ 311.561702][ T8773] FAT-fs (loop6): Directory bread(block 64) failed [ 311.649419][ T8773] FAT-fs (loop6): Directory bread(block 65) failed [ 311.925317][ T8773] FAT-fs (loop6): Directory bread(block 66) failed [ 312.664875][ T8773] FAT-fs (loop6): Directory bread(block 67) failed [ 312.750123][ T8773] FAT-fs (loop6): Directory bread(block 68) failed [ 312.756688][ T8773] FAT-fs (loop6): Directory bread(block 69) failed [ 312.763343][ T8773] FAT-fs (loop6): Directory bread(block 70) failed [ 312.770001][ T8773] FAT-fs (loop6): Directory bread(block 71) failed [ 312.776595][ T8773] FAT-fs (loop6): Directory bread(block 72) failed [ 312.830805][ T8773] FAT-fs (loop6): Directory bread(block 73) failed [ 316.230974][ T8825] netlink: 92 bytes leftover after parsing attributes in process `syz.7.770'. [ 316.241933][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.447444][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.514736][ T8835] loop0: detected capacity change from 0 to 1024 [ 316.564219][ T8835] EXT4-fs: Ignoring removed orlov option [ 316.610396][ T8835] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 316.687124][ T8835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.606046][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.650025][ T8856] loop4: detected capacity change from 0 to 1024 [ 317.727976][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.774619][ T30] audit: type=1800 audit(1746327761.353:168): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 318.323051][ T5887] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 319.519778][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 319.528308][ T5887] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.542139][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 319.554578][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.965972][ T5887] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.977239][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.990993][ T5887] usb 8-1: config 0 descriptor?? [ 320.000177][ T8860] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 320.012119][ T5887] hub 8-1:0.0: USB hub found [ 320.031920][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.234996][ T5887] hub 8-1:0.0: 2 ports detected [ 320.652905][ T8899] loop1: detected capacity change from 0 to 512 [ 320.875142][ T8899] EXT4-fs: Ignoring removed orlov option [ 321.322008][ T8899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.379305][ T8899] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.435079][ T8911] loop0: detected capacity change from 0 to 16 [ 321.447741][ T8911] erofs (device loop0): mounted with root inode @ nid 36. [ 321.630666][ T5884] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 321.780549][ T8920] loop6: detected capacity change from 0 to 512 [ 321.819770][ T8920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.863750][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 321.908155][ T8920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.926991][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 321.977530][ T8920] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.981518][ T5884] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 322.085331][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.124852][ T30] audit: type=1326 audit(1746327765.693:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.208560][ T5884] usb 2-1: config 0 descriptor?? [ 322.257281][ T8899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 322.311420][ T30] audit: type=1326 audit(1746327765.693:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.360507][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.403587][ T9] usb 8-1: USB disconnect, device number 2 [ 322.505752][ T30] audit: type=1326 audit(1746327765.703:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.529955][ T30] audit: type=1326 audit(1746327765.703:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.608868][ T30] audit: type=1326 audit(1746327765.703:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.734160][ T30] audit: type=1326 audit(1746327765.703:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.829953][ T30] audit: type=1326 audit(1746327765.703:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 322.858195][ T5884] cherry 0003:046A:0023.0003: unknown main item tag 0x0 [ 322.878977][ T8939] loop0: detected capacity change from 0 to 512 [ 322.886033][ T5884] cherry 0003:046A:0023.0003: unbalanced collection at end of report description [ 322.929769][ T8939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.950739][ T5884] cherry 0003:046A:0023.0003: probe with driver cherry failed with error -22 [ 322.969893][ T30] audit: type=1800 audit(1746327765.713:176): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.792" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 323.051200][ T30] audit: type=1326 audit(1746327766.283:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.083069][ T5884] usb 2-1: USB disconnect, device number 3 [ 323.106737][ T30] audit: type=1326 audit(1746327766.283:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.140849][ T8939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.179987][ T8939] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.242814][ T8943] syzkaller0: entered promiscuous mode [ 323.285127][ T8943] syzkaller0: entered allmulticast mode [ 323.358641][ T8939] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.795: corrupted xattr block 32: bad e_name length [ 323.466057][ T30] audit: type=1326 audit(1746327766.303:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.517171][ T8958] loop6: detected capacity change from 0 to 512 [ 323.534922][ T8958] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.798: casefold flag without casefold feature [ 323.548389][ T30] audit: type=1326 audit(1746327766.303:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.603896][ T8958] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.798: couldn't read orphan inode 15 (err -117) [ 323.711894][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.756265][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.789425][ T30] audit: type=1326 audit(1746327766.303:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.848511][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.881921][ T30] audit: type=1326 audit(1746327766.333:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 323.942287][ T30] audit: type=1326 audit(1746327766.333:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 324.079510][ T30] audit: type=1326 audit(1746327766.333:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96fd8e969 code=0x7ffc0000 [ 324.289963][ T8966] input: syz1 as /devices/virtual/input/input9 [ 325.293885][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.784651][ T8985] loop1: detected capacity change from 0 to 1024 [ 325.967629][ T8985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.198064][ T8997] loop4: detected capacity change from 0 to 16 [ 327.311055][ T8997] erofs (device loop4): mounted with root inode @ nid 36. [ 328.164252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 328.552637][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.115693][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 329.115714][ T30] audit: type=1107 audit(1746393537.679:226): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 329.144802][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 329.298240][ T9009] loop4: detected capacity change from 0 to 2048 [ 329.341086][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 329.372119][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.431978][ T9009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.436246][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 329.449691][ T9009] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.486048][ T9009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.811: bg 0: block 345: padding at end of block bitmap is not set [ 329.509399][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 329.514887][ T9009] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 329.769865][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 329.786544][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.807167][ T24] usb 7-1: config 0 descriptor?? [ 329.824971][ T9005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.482507][ T24] hub 7-1:0.0: USB hub found [ 330.493212][ T24] hub 7-1:0.0: 2 ports detected [ 330.570269][ T5841] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /146/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 330.660680][ T5841] EXT4-fs error (device loop4): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 330.696807][ T5841] EXT4-fs error (device loop4): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 331.643146][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.832654][ T8030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.574241][ T9036] loop7: detected capacity change from 0 to 512 [ 332.947494][ T9036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 332.960209][ T9036] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.285832][ T58] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 333.816474][ T8030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.994074][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 334.271867][ T8030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.428191][ T58] hub 7-1:0.0: set hub depth failed [ 334.437493][ T5887] usb 7-1: USB disconnect, device number 4 [ 334.720273][ T8030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.808678][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 334.997207][ T9061] loop1: detected capacity change from 0 to 1024 [ 338.024676][ T9061] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 338.429078][ T9081] loop0: detected capacity change from 0 to 512 [ 338.529957][ T9081] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 338.539002][ T9081] bio_check_eod: 1 callbacks suppressed [ 338.539017][ T9081] syz.0.824: attempt to access beyond end of device [ 338.539017][ T9081] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 338.593932][ T9081] EXT4-fs (loop0): couldn't read superblock of external journal [ 338.718588][ T9081] loop0: detected capacity change from 0 to 256 [ 338.750128][ T9081] vfat: Unknown parameter '' [ 339.340184][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.374149][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.389832][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.407119][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.425405][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.415741][ T9096] loop7: detected capacity change from 0 to 40427 [ 340.442834][ T9096] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 340.481886][ T9096] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 340.505957][ T9096] F2FS-fs (loop7): invalid crc value [ 340.553198][ T9106] loop0: detected capacity change from 0 to 256 [ 340.573075][ T8030] bond0 (unregistering): Released all slaves [ 340.578779][ T9106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 340.757513][ T9096] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 340.783100][ T9096] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 340.908192][ T9096] syz.7.828: attempt to access beyond end of device [ 340.908192][ T9096] loop7: rw=2049, sector=77824, nr_sectors = 184 limit=40427 [ 340.949008][ T9096] syz.7.828: attempt to access beyond end of device [ 340.949008][ T9096] loop7: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 340.990434][ T970] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 341.105457][ T7460] syz-executor: attempt to access beyond end of device [ 341.105457][ T7460] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 341.123591][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 341.123623][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 341.123638][ T7460] Call Trace: [ 341.123660][ T7460] [ 341.123670][ T7460] dump_stack_lvl+0x189/0x250 [ 341.123712][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.123749][ T7460] ? __pfx_queue_work_on+0x10/0x10 [ 341.123772][ T7460] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 341.123803][ T7460] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.123830][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.123869][ T7460] f2fs_handle_critical_error+0x37c/0x540 [ 341.123904][ T7460] f2fs_write_end_io+0x4e2/0x6d0 [ 341.123952][ T7460] __submit_merged_bio+0x27a/0x6a0 [ 341.123974][ T7460] ? up_write+0x1c4/0x420 [ 341.124006][ T7460] __submit_merged_write_cond+0x44c/0x530 [ 341.124055][ T7460] f2fs_sync_node_pages+0x1315/0x14a0 [ 341.124102][ T7460] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 341.124142][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.124169][ T7460] ? __lock_acquire+0xaac/0xd20 [ 341.124236][ T7460] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 341.124273][ T7460] ? up_write+0x1c4/0x420 [ 341.124300][ T7460] ? do_raw_spin_unlock+0x122/0x240 [ 341.124334][ T7460] f2fs_write_checkpoint+0xe5f/0x1de0 [ 341.124393][ T7460] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 341.124479][ T7460] ? kill_f2fs_super+0x298/0x6c0 [ 341.124517][ T7460] kill_f2fs_super+0x2c3/0x6c0 [ 341.124555][ T7460] ? __pfx_kill_f2fs_super+0x10/0x10 [ 341.124583][ T7460] ? radix_tree_delete_item+0x2b6/0x400 [ 341.124619][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.124654][ T7460] ? shrinker_free+0x2ce/0x3e0 [ 341.124683][ T7460] deactivate_locked_super+0xbc/0x130 [ 341.124725][ T7460] cleanup_mnt+0x425/0x4c0 [ 341.124761][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.124789][ T7460] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.124820][ T7460] task_work_run+0x1d4/0x260 [ 341.124856][ T7460] ? __pfx_task_work_run+0x10/0x10 [ 341.124888][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.124927][ T7460] resume_user_mode_work+0x5e/0x80 [ 341.124962][ T7460] syscall_exit_to_user_mode+0x9a/0x120 [ 341.124992][ T7460] do_syscall_64+0x103/0x210 [ 341.125022][ T7460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 341.125049][ T7460] ? exc_page_fault+0x91/0x110 [ 341.125079][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.125103][ T7460] RIP: 0033:0x7f0c3798fc97 [ 341.125124][ T7460] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 341.125146][ T7460] RSP: 002b:00007ffe984ad718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.125171][ T7460] RAX: 0000000000000000 RBX: 00007f0c37a1089d RCX: 00007f0c3798fc97 [ 341.125188][ T7460] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe984ad7d0 [ 341.125203][ T7460] RBP: 00007ffe984ad7d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.125219][ T7460] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe984ae860 [ 341.125235][ T7460] R13: 00007f0c37a1089d R14: 0000000000053407 R15: 00007ffe984ae8a0 [ 341.125274][ T7460] [ 341.125862][ T7460] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 341.460663][ T970] usb 7-1: Using ep0 maxpacket: 32 [ 341.469010][ T970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.482996][ T970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.493344][ T5135] Bluetooth: hci4: command tx timeout [ 341.511982][ T970] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 341.531226][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.575327][ T970] usb 7-1: config 0 descriptor?? [ 341.919020][ T9138] fuse: Bad value for 'fd' [ 342.650004][ T9143] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 343.026661][ T9144] loop0: detected capacity change from 0 to 1024 [ 343.124903][ T9144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.362577][ T970] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 343.387550][ T8030] hsr_slave_0: left promiscuous mode [ 343.398958][ T8030] hsr_slave_1: left promiscuous mode [ 343.595868][ T5833] Bluetooth: hci4: command tx timeout [ 343.793729][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 344.103197][ T970] usb 7-1: USB disconnect, device number 5 [ 344.105893][ T8030] veth1_macvtap: left promiscuous mode [ 344.152086][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.185730][ T8030] veth0_macvtap: left promiscuous mode [ 344.208409][ T8030] veth1_vlan: left promiscuous mode [ 344.219057][ T8030] veth0_vlan: left promiscuous mode [ 344.241857][ T30] audit: type=1326 audit(1746393552.819:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.307982][ T30] audit: type=1326 audit(1746393552.819:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.373385][ T30] audit: type=1326 audit(1746393552.819:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.396826][ T30] audit: type=1326 audit(1746393552.819:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa355985927 code=0x7ffc0000 [ 344.419295][ T30] audit: type=1326 audit(1746393552.819:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa35592ab39 code=0x7ffc0000 [ 344.454574][ T30] audit: type=1326 audit(1746393552.819:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.478025][ T30] audit: type=1326 audit(1746393552.819:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.500804][ T30] audit: type=1326 audit(1746393552.819:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.525284][ T30] audit: type=1326 audit(1746393552.819:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.557812][ T30] audit: type=1326 audit(1746393552.819:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35598e969 code=0x7ffc0000 [ 344.685360][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 345.640217][ T5135] Bluetooth: hci4: command tx timeout [ 346.127799][ T9141] netlink: 'syz.5.836': attribute type 12 has an invalid length. [ 346.510251][ T9099] chnl_net:caif_netlink_parms(): no params data found [ 347.094354][ T9196] netlink: 'syz.5.847': attribute type 13 has an invalid length. [ 347.171877][ T9196] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 347.723363][ T5135] Bluetooth: hci4: command tx timeout [ 347.750241][ T9196] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.758761][ T9196] gretap1: entered promiscuous mode [ 347.764081][ T9196] gretap1: entered allmulticast mode [ 348.269363][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.278727][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.287763][ T9099] bridge_slave_0: entered allmulticast mode [ 348.440345][ T5886] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 348.612145][ T5886] usb 7-1: config 1 interface 0 has no altsetting 0 [ 348.636609][ T5886] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.685908][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.718840][ T5886] usb 7-1: Product: syz [ 348.738285][ T5886] usb 7-1: Manufacturer: syz [ 348.777822][ T5886] usb 7-1: SerialNumber: syz [ 348.838973][ T9099] bridge_slave_0: entered promiscuous mode [ 348.881019][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.888255][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.905994][ T9099] bridge_slave_1: entered allmulticast mode [ 348.914046][ T9099] bridge_slave_1: entered promiscuous mode [ 349.142529][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.177107][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 349.206086][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.377570][ T9099] team0: Port device team_slave_0 added [ 349.413425][ T9099] team0: Port device team_slave_1 added [ 349.474634][ T5886] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 349.527148][ T9233] loop7: detected capacity change from 0 to 512 [ 349.569817][ T9233] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 349.615788][ T9233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 349.636978][ T9233] System zones: 1-12 [ 349.643432][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.651736][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.679403][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.692260][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.699210][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.725436][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.740527][ T9233] EXT4-fs (loop7): 1 truncate cleaned up [ 349.748272][ T9233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.870230][ C1] usblp0: nonzero write bulk status received: -71 [ 349.882838][ T5886] usb 7-1: USB disconnect, device number 6 [ 350.058160][ T9099] hsr_slave_0: entered promiscuous mode [ 350.131325][ T9099] hsr_slave_1: entered promiscuous mode [ 350.137647][ T9099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.145312][ T9099] Cannot create hsr debugfs directory [ 350.175723][ T9228] loop1: detected capacity change from 0 to 40427 [ 351.004798][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.136389][ T9228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.298252][ T9238] usblp0: removed [ 351.491423][ T5822] syz-executor: attempt to access beyond end of device [ 351.491423][ T5822] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 351.545591][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 351.545625][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 351.545640][ T5822] Call Trace: [ 351.545649][ T5822] [ 351.545660][ T5822] dump_stack_lvl+0x189/0x250 [ 351.545704][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.545741][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 351.545764][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.545790][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.545818][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.545855][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 351.545891][ T5822] f2fs_write_end_io+0x4e2/0x6d0 [ 351.545946][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 351.545978][ T5822] __submit_merged_write_cond+0x255/0x530 [ 351.546027][ T5822] f2fs_write_data_pages+0x2854/0x31f0 [ 351.546056][ T5822] ? unwind_next_frame+0x19ae/0x2390 [ 351.546123][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.546170][ T5822] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 351.546227][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546259][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546286][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.546334][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546361][ T5822] ? __lock_acquire+0xaac/0xd20 [ 351.546404][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546445][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546472][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.546502][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.546531][ T5822] do_writepages+0x3b1/0x7b0 [ 351.546585][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546613][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 351.546639][ T5822] ? __pfx_do_writepages+0x10/0x10 [ 351.546675][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546707][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546734][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.546768][ T5822] filemap_fdatawrite+0x191/0x230 [ 351.546801][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 351.546882][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.546920][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.546954][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 351.547002][ T5822] f2fs_write_checkpoint+0x94a/0x1de0 [ 351.547062][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 351.547148][ T5822] ? kill_f2fs_super+0x298/0x6c0 [ 351.547185][ T5822] kill_f2fs_super+0x2c3/0x6c0 [ 351.547224][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 351.547252][ T5822] ? radix_tree_delete_item+0x2b6/0x400 [ 351.547287][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.547314][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 351.547342][ T5822] deactivate_locked_super+0xbc/0x130 [ 351.547385][ T5822] cleanup_mnt+0x425/0x4c0 [ 351.547421][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.547448][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.547479][ T5822] task_work_run+0x1d4/0x260 [ 351.547515][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 351.547548][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.547587][ T5822] resume_user_mode_work+0x5e/0x80 [ 351.547622][ T5822] syscall_exit_to_user_mode+0x9a/0x120 [ 351.547652][ T5822] do_syscall_64+0x103/0x210 [ 351.547682][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.547709][ T5822] ? exc_page_fault+0x91/0x110 [ 351.547739][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.547762][ T5822] RIP: 0033:0x7f572178fc97 [ 351.547783][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 351.547803][ T5822] RSP: 002b:00007ffec242d058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 351.547829][ T5822] RAX: 0000000000000000 RBX: 00007f572181089d RCX: 00007f572178fc97 [ 351.547846][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec242d110 [ 351.547861][ T5822] RBP: 00007ffec242d110 R08: 0000000000000000 R09: 0000000000000000 [ 351.547877][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec242e1a0 [ 351.547893][ T5822] R13: 00007f572181089d R14: 0000000000055c4c R15: 00007ffec242e1e0 [ 351.547937][ T5822] [ 351.954035][ T5822] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 351.961559][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 351.961590][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 351.961606][ T5822] Call Trace: [ 351.961615][ T5822] [ 351.961625][ T5822] dump_stack_lvl+0x189/0x250 [ 351.961671][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.961708][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 351.961730][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.961757][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.961785][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.961823][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 351.961858][ T5822] f2fs_write_end_io+0x4e2/0x6d0 [ 351.961906][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 351.961945][ T5822] __submit_merged_write_cond+0x255/0x530 [ 351.961995][ T5822] f2fs_write_data_pages+0x2854/0x31f0 [ 351.962025][ T5822] ? unwind_next_frame+0x19ae/0x2390 [ 351.962092][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.962139][ T5822] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 351.962197][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962230][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962258][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.962305][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962333][ T5822] ? __lock_acquire+0xaac/0xd20 [ 351.962377][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962419][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962446][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.962476][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.962506][ T5822] do_writepages+0x3b1/0x7b0 [ 351.962556][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962584][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 351.962612][ T5822] ? __pfx_do_writepages+0x10/0x10 [ 351.962648][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962681][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962708][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.962742][ T5822] filemap_fdatawrite+0x191/0x230 [ 351.962776][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 351.962857][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.962891][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 351.962930][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 351.962979][ T5822] f2fs_write_checkpoint+0x94a/0x1de0 [ 351.963039][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 351.963126][ T5822] ? kill_f2fs_super+0x298/0x6c0 [ 351.963164][ T5822] kill_f2fs_super+0x2c3/0x6c0 [ 351.963202][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 351.963231][ T5822] ? radix_tree_delete_item+0x2b6/0x400 [ 351.963268][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.963295][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 351.963323][ T5822] deactivate_locked_super+0xbc/0x130 [ 351.963367][ T5822] cleanup_mnt+0x425/0x4c0 [ 351.963404][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.963431][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.963463][ T5822] task_work_run+0x1d4/0x260 [ 351.963499][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 351.963532][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.963572][ T5822] resume_user_mode_work+0x5e/0x80 [ 351.963608][ T5822] syscall_exit_to_user_mode+0x9a/0x120 [ 351.963638][ T5822] do_syscall_64+0x103/0x210 [ 351.963669][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.963696][ T5822] ? exc_page_fault+0x91/0x110 [ 351.963726][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.963750][ T5822] RIP: 0033:0x7f572178fc97 [ 351.963771][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 351.963791][ T5822] RSP: 002b:00007ffec242d058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 351.963817][ T5822] RAX: 0000000000000000 RBX: 00007f572181089d RCX: 00007f572178fc97 [ 351.963834][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec242d110 [ 351.963850][ T5822] RBP: 00007ffec242d110 R08: 0000000000000000 R09: 0000000000000000 [ 351.963865][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec242e1a0 [ 351.963882][ T5822] R13: 00007f572181089d R14: 0000000000055c4c R15: 00007ffec242e1e0 [ 351.963925][ T5822] [ 351.963935][ T5822] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 353.397611][ T9284] loop0: detected capacity change from 0 to 512 [ 353.405377][ T9284] EXT4-fs: Invalid want_extra_isize 129 [ 356.369440][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 357.346439][ T9099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 357.691859][ T9099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 357.734447][ T9099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 358.302590][ T9313] xt_CT: No such helper "netbios-ns" [ 358.366726][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 358.366747][ T30] audit: type=1326 audit(1746393566.939:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.455631][ T30] audit: type=1326 audit(1746393566.979:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.489401][ T30] audit: type=1326 audit(1746393566.999:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.583537][ T9099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 358.625246][ T30] audit: type=1326 audit(1746393566.999:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.740787][ T30] audit: type=1326 audit(1746393566.999:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.839792][ T30] audit: type=1326 audit(1746393567.009:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.909208][ T30] audit: type=1326 audit(1746393567.009:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 358.969488][ T30] audit: type=1326 audit(1746393567.009:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 359.022908][ T30] audit: type=1326 audit(1746393567.009:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 359.046639][ T30] audit: type=1326 audit(1746393567.179:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 361.009547][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.884'. [ 361.174730][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.221486][ T9099] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.264297][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.271816][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.306446][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.314084][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.485465][ T9099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.537767][ T9379] loop6: detected capacity change from 0 to 256 [ 367.161757][ T9379] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 368.392537][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.6.897'. [ 368.767773][ T9099] veth0_vlan: entered promiscuous mode [ 368.829593][ T9099] veth1_vlan: entered promiscuous mode [ 369.032108][ T9099] veth0_macvtap: entered promiscuous mode [ 369.844366][ T9099] veth1_macvtap: entered promiscuous mode [ 370.090073][ T9438] loop0: detected capacity change from 0 to 256 [ 370.119082][ T9438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 371.198144][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.238760][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.277127][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.298233][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.308373][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.329603][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.347593][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.358386][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.376024][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.250552][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.349883][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.414997][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.458924][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.497011][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.560765][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.599967][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.640919][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.685451][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.899915][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 373.069853][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 373.102645][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.127990][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 373.156387][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.195634][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 373.209087][ T9099] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.209192][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.238978][ T9099] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.241815][ T9] usb 2-1: config 0 descriptor?? [ 373.268223][ T9099] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.271185][ T9475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.284215][ T9099] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.304393][ T9] hub 2-1:0.0: USB hub found [ 373.513046][ T9] hub 2-1:0.0: 2 ports detected [ 373.559606][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.591875][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.838087][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.977844][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.640842][ T9502] netlink: 'syz.8.819': attribute type 1 has an invalid length. [ 376.337900][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = 2) [ 376.563227][ T9] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 376.771189][ T9510] veth3: entered promiscuous mode [ 376.885348][ T9522] netlink: 452 bytes leftover after parsing attributes in process `syz.5.922'. [ 377.082159][ T9525] loop6: detected capacity change from 0 to 512 [ 377.099012][ T9525] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 377.296954][ T9525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 377.352116][ T9525] System zones: 1-12 [ 377.890970][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.128097][ T9] hub 2-1:0.0: set hub depth failed [ 378.136065][ T5884] usb 2-1: USB disconnect, device number 4 [ 378.159531][ T9525] EXT4-fs (loop6): 1 truncate cleaned up [ 378.222299][ T9525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.620429][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.318324][ T9563] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 379.613792][ T3464] Bluetooth: hci5: Frame reassembly failed (-84) [ 380.135578][ T9533] loop8: detected capacity change from 0 to 40427 [ 380.634258][ T9573] loop0: detected capacity change from 0 to 512 [ 381.163775][ T9573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.176465][ T9573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 381.189110][ T9573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.934: bg 0: block 248: padding at end of block bitmap is not set [ 381.241316][ T9573] __quota_error: 3 callbacks suppressed [ 381.241360][ T9573] Quota error (device loop0): write_blk: dquota write failed [ 381.255051][ T9573] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 381.265255][ T9573] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.934: Failed to acquire dquot type 1 [ 381.338282][ T9573] EXT4-fs (loop0): 1 truncate cleaned up [ 381.372273][ T9573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.560241][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 381.580017][ T5135] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 383.016640][ T9587] netlink: 'syz.6.938': attribute type 1 has an invalid length. [ 383.136431][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.629251][ T9592] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 383.785046][ T9596] veth3: entered promiscuous mode [ 383.833243][ T9596] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 386.731703][ T9626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.525347][ T9662] loop8: detected capacity change from 0 to 40427 [ 389.641397][ T9662] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3fffff [ 389.668554][ T9662] F2FS-fs (loop8): invalid crc value [ 390.137051][ T9662] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 391.862085][ T9672] loop6: detected capacity change from 0 to 256 [ 392.538432][ T9670] loop0: detected capacity change from 0 to 40427 [ 392.633367][ T9099] syz-executor: attempt to access beyond end of device [ 392.633367][ T9099] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 392.659786][ T9670] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 392.680924][ T9670] F2FS-fs (loop0): invalid crc value [ 393.234837][ T9670] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 393.255408][ T9670] syz.0.954: attempt to access beyond end of device [ 393.255408][ T9670] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 393.282384][ T9672] vfat: Unknown parameter 'dont_measure' [ 393.470443][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 393.470479][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 393.470493][ T9099] Call Trace: [ 393.470503][ T9099] [ 393.470514][ T9099] dump_stack_lvl+0x189/0x250 [ 393.470559][ T9099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.470596][ T9099] ? __pfx_queue_work_on+0x10/0x10 [ 393.470619][ T9099] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 393.470645][ T9099] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.470672][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.470718][ T9099] f2fs_handle_critical_error+0x37c/0x540 [ 393.470753][ T9099] f2fs_write_end_io+0x4e2/0x6d0 [ 393.470801][ T9099] __submit_merged_bio+0x27a/0x6a0 [ 393.470833][ T9099] __submit_merged_write_cond+0x255/0x530 [ 393.470882][ T9099] f2fs_write_data_pages+0x2854/0x31f0 [ 393.470950][ T9099] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 393.471029][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471057][ T9099] ? check_noncircular+0xe0/0x160 [ 393.471079][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471106][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471133][ T9099] ? __bfs+0x154/0x2a0 [ 393.471189][ T9099] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 393.471224][ T9099] ? irqentry_exit+0x74/0x90 [ 393.471251][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471278][ T9099] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.471324][ T9099] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 393.471354][ T9099] do_writepages+0x3b1/0x7b0 [ 393.471405][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471433][ T9099] ? do_raw_spin_lock+0x121/0x290 [ 393.471460][ T9099] ? __pfx_do_writepages+0x10/0x10 [ 393.471496][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471528][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471555][ T9099] ? do_raw_spin_unlock+0x122/0x240 [ 393.471589][ T9099] filemap_fdatawrite+0x191/0x230 [ 393.471622][ T9099] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 393.471703][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.471762][ T9099] ? do_raw_spin_unlock+0x122/0x240 [ 393.471795][ T9099] f2fs_sync_dirty_inodes+0x31f/0x830 [ 393.471844][ T9099] f2fs_write_checkpoint+0x94a/0x1de0 [ 393.471903][ T9099] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 393.471988][ T9099] ? kill_f2fs_super+0x298/0x6c0 [ 393.472026][ T9099] kill_f2fs_super+0x2c3/0x6c0 [ 393.472064][ T9099] ? __pfx_kill_f2fs_super+0x10/0x10 [ 393.472092][ T9099] ? radix_tree_delete_item+0x2b6/0x400 [ 393.472127][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.472154][ T9099] ? shrinker_free+0x2ce/0x3e0 [ 393.472182][ T9099] deactivate_locked_super+0xbc/0x130 [ 393.472226][ T9099] cleanup_mnt+0x425/0x4c0 [ 393.472263][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.472290][ T9099] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.472321][ T9099] task_work_run+0x1d4/0x260 [ 393.472356][ T9099] ? __pfx_task_work_run+0x10/0x10 [ 393.472389][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.472428][ T9099] resume_user_mode_work+0x5e/0x80 [ 393.472463][ T9099] syscall_exit_to_user_mode+0x9a/0x120 [ 393.472492][ T9099] do_syscall_64+0x103/0x210 [ 393.472523][ T9099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.472550][ T9099] ? exc_page_fault+0x91/0x110 [ 393.472579][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.472603][ T9099] RIP: 0033:0x7f3ac178fc97 [ 393.472624][ T9099] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 393.472645][ T9099] RSP: 002b:00007fff5c9985f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 393.472670][ T9099] RAX: 0000000000000000 RBX: 00007f3ac181089d RCX: 00007f3ac178fc97 [ 393.472686][ T9099] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5c9986b0 [ 393.472702][ T9099] RBP: 00007fff5c9986b0 R08: 0000000000000000 R09: 0000000000000000 [ 393.472723][ T9099] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5c999740 [ 393.472739][ T9099] R13: 00007f3ac181089d R14: 000000000005f5f6 R15: 00007fff5c999780 [ 393.472777][ T9099] [ 393.472787][ T9099] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 395.294854][ T5831] syz-executor: attempt to access beyond end of device [ 395.294854][ T5831] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 395.366139][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 395.366174][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 395.366189][ T5831] Call Trace: [ 395.366198][ T5831] [ 395.366208][ T5831] dump_stack_lvl+0x189/0x250 [ 395.366253][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.366289][ T5831] ? __pfx_queue_work_on+0x10/0x10 [ 395.366312][ T5831] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 395.366339][ T5831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.366366][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.366404][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 395.366439][ T5831] f2fs_write_end_io+0x4e2/0x6d0 [ 395.366488][ T5831] __submit_merged_bio+0x27a/0x6a0 [ 395.366521][ T5831] __submit_merged_write_cond+0x255/0x530 [ 395.366571][ T5831] f2fs_write_data_pages+0x2854/0x31f0 [ 395.366641][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.366688][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.366715][ T5831] ? bpf_trace_run4+0x322/0x4a0 [ 395.366777][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.366804][ T5831] ? __lock_acquire+0xaac/0xd20 [ 395.366861][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.366888][ T5831] ? __lock_acquire+0xaac/0xd20 [ 395.366932][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.366977][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367004][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.367034][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.367063][ T5831] do_writepages+0x3b1/0x7b0 [ 395.367114][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367142][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 395.367168][ T5831] ? __pfx_do_writepages+0x10/0x10 [ 395.367204][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367237][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367264][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.367298][ T5831] filemap_fdatawrite+0x191/0x230 [ 395.367332][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 395.367415][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367449][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.367483][ T5831] f2fs_sync_dirty_inodes+0x31f/0x830 [ 395.367533][ T5831] f2fs_write_checkpoint+0x94a/0x1de0 [ 395.367592][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 395.367673][ T5831] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 395.367704][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367730][ T5831] ? kfree+0x193/0x440 [ 395.367759][ T5831] ? kill_f2fs_super+0x298/0x6c0 [ 395.367797][ T5831] kill_f2fs_super+0x2c3/0x6c0 [ 395.367835][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 395.367863][ T5831] ? radix_tree_delete_item+0x2b6/0x400 [ 395.367899][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.367926][ T5831] ? shrinker_free+0x2ce/0x3e0 [ 395.367954][ T5831] deactivate_locked_super+0xbc/0x130 [ 395.368001][ T5831] cleanup_mnt+0x425/0x4c0 [ 395.368038][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.368065][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.368096][ T5831] task_work_run+0x1d4/0x260 [ 395.368132][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 395.368165][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.368206][ T5831] resume_user_mode_work+0x5e/0x80 [ 395.368241][ T5831] syscall_exit_to_user_mode+0x9a/0x120 [ 395.368271][ T5831] do_syscall_64+0x103/0x210 [ 395.368302][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.368329][ T5831] ? exc_page_fault+0x91/0x110 [ 395.368359][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.368382][ T5831] RIP: 0033:0x7ff96fd8fc97 [ 395.368403][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 395.368423][ T5831] RSP: 002b:00007ffc9ac4b768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 395.368449][ T5831] RAX: 0000000000000000 RBX: 00007ff96fe1089d RCX: 00007ff96fd8fc97 [ 395.368465][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9ac4b820 [ 395.368481][ T5831] RBP: 00007ffc9ac4b820 R08: 0000000000000000 R09: 0000000000000000 [ 395.368496][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9ac4c8b0 [ 395.368513][ T5831] R13: 00007ff96fe1089d R14: 00000000000600b5 R15: 00007ffc9ac4c8f0 [ 395.368551][ T5831] [ 395.368560][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 395.934178][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 395.934212][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 395.934227][ T5831] Call Trace: [ 395.934237][ T5831] [ 395.934251][ T5831] dump_stack_lvl+0x189/0x250 [ 395.934297][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.934333][ T5831] ? __pfx_queue_work_on+0x10/0x10 [ 395.934357][ T5831] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 395.934384][ T5831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.934411][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934450][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 395.934486][ T5831] f2fs_write_end_io+0x4e2/0x6d0 [ 395.934535][ T5831] __submit_merged_bio+0x27a/0x6a0 [ 395.934568][ T5831] __submit_merged_write_cond+0x255/0x530 [ 395.934618][ T5831] f2fs_write_data_pages+0x2854/0x31f0 [ 395.934688][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.934735][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934762][ T5831] ? bpf_trace_run4+0x322/0x4a0 [ 395.934825][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934852][ T5831] ? __lock_acquire+0xaac/0xd20 [ 395.934909][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934936][ T5831] ? __lock_acquire+0xaac/0xd20 [ 395.934985][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935026][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935053][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.935084][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 395.935115][ T5831] do_writepages+0x3b1/0x7b0 [ 395.935167][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935194][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 395.935221][ T5831] ? __pfx_do_writepages+0x10/0x10 [ 395.935258][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935290][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935317][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.935351][ T5831] filemap_fdatawrite+0x191/0x230 [ 395.935385][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 395.935468][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935502][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 395.935536][ T5831] f2fs_sync_dirty_inodes+0x31f/0x830 [ 395.935586][ T5831] f2fs_write_checkpoint+0x94a/0x1de0 [ 395.935646][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 395.935727][ T5831] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 395.935757][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935784][ T5831] ? kfree+0x193/0x440 [ 395.935814][ T5831] ? kill_f2fs_super+0x298/0x6c0 [ 395.935852][ T5831] kill_f2fs_super+0x2c3/0x6c0 [ 395.935891][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 395.935920][ T5831] ? radix_tree_delete_item+0x2b6/0x400 [ 395.935956][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.935990][ T5831] ? shrinker_free+0x2ce/0x3e0 [ 395.936018][ T5831] deactivate_locked_super+0xbc/0x130 [ 395.936061][ T5831] cleanup_mnt+0x425/0x4c0 [ 395.936098][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936125][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.936156][ T5831] task_work_run+0x1d4/0x260 [ 395.936193][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 395.936225][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936266][ T5831] resume_user_mode_work+0x5e/0x80 [ 395.936301][ T5831] syscall_exit_to_user_mode+0x9a/0x120 [ 395.936332][ T5831] do_syscall_64+0x103/0x210 [ 395.936363][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936390][ T5831] ? exc_page_fault+0x91/0x110 [ 395.936420][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.936443][ T5831] RIP: 0033:0x7ff96fd8fc97 [ 395.936464][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 395.936485][ T5831] RSP: 002b:00007ffc9ac4b768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 395.936511][ T5831] RAX: 0000000000000000 RBX: 00007ff96fe1089d RCX: 00007ff96fd8fc97 [ 395.936528][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9ac4b820 [ 395.936543][ T5831] RBP: 00007ffc9ac4b820 R08: 0000000000000000 R09: 0000000000000000 [ 395.936559][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9ac4c8b0 [ 395.936575][ T5831] R13: 00007ff96fe1089d R14: 00000000000600b5 R15: 00007ffc9ac4c8f0 [ 395.936614][ T5831] [ 396.407817][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 397.134986][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 398.605454][ T9725] loop6: detected capacity change from 0 to 512 [ 398.817333][ T9725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.921642][ T9725] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.692589][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.030168][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 401.226626][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 401.284414][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 401.347782][ T5912] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 401.377572][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.397976][ T5912] usb 7-1: Product: syz [ 401.425740][ T5912] usb 7-1: Manufacturer: syz [ 401.451644][ T5912] usb 7-1: SerialNumber: syz [ 401.492408][ T5912] usb 7-1: config 0 descriptor?? [ 401.762793][ T5912] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.063295][ T5912] usb 7-1: USB disconnect, device number 7 [ 402.084920][ T9761] loop7: detected capacity change from 0 to 1024 [ 402.162534][ T9761] EXT4-fs: Ignoring removed orlov option [ 402.180297][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.300505][ T9761] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 402.442040][ T9761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.410917][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.8.979'. [ 403.947303][ T9796] loop8: detected capacity change from 0 to 256 [ 403.957490][ T9796] vfat: Unknown parameter 'nonumt`il' [ 404.533092][ T9809] veth1_macvtap: left promiscuous mode [ 405.587803][ T9816] process 'syz.1.987' launched './file1' with NULL argv: empty string added [ 407.206867][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.934868][ T9856] bridge0: entered promiscuous mode [ 409.950332][ T9856] bridge0: entered allmulticast mode [ 410.486898][ T9865] loop1: detected capacity change from 0 to 1024 [ 410.607743][ T9865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.737874][ T30] audit: type=1800 audit(1746393619.309:344): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 412.147556][ T9884] loop8: detected capacity change from 0 to 512 [ 412.197957][ T9884] EXT4-fs (loop8): Test dummy encryption mode enabled [ 412.368799][ T9884] EXT4-fs error (device loop8): __ext4_iget:5025: inode #11: block 1: comm syz.8.999: invalid block [ 412.386125][ T9884] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.999: couldn't read orphan inode 11 (err -117) [ 412.432927][ T9884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.010305][ T5884] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 413.580245][ T9869] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 415.117187][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.976001][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.113557][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.140761][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.148945][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.159140][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.169872][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.873590][ T9914] cgroup: noprefix used incorrectly [ 418.280163][ T5833] Bluetooth: hci5: command tx timeout [ 420.360230][ T5833] Bluetooth: hci5: command tx timeout [ 420.738206][ T9911] batadv_slave_1: entered promiscuous mode [ 420.750300][ T9911] batadv_slave_1: left promiscuous mode [ 421.432868][ T9946] loop7: detected capacity change from 0 to 256 [ 421.634066][ T9946] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1b75eb9a, utbl_chksum : 0xe619d30d) [ 422.540324][ T5833] Bluetooth: hci5: command tx timeout [ 422.768814][ T9958] loop6: detected capacity change from 0 to 256 [ 422.785896][ T1329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.827767][ T9958] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 423.841821][ T1329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.403049][ T1329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.588033][ T1329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.600000][ T5833] Bluetooth: hci5: command tx timeout [ 425.415399][ T9895] chnl_net:caif_netlink_parms(): no params data found [ 425.698757][ T1329] bridge_slave_1: left allmulticast mode [ 425.714730][ T1329] bridge_slave_1: left promiscuous mode [ 425.745261][ T1329] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.794726][ T1329] bridge_slave_0: left allmulticast mode [ 425.827886][ T1329] bridge_slave_0: left promiscuous mode [ 425.837702][ T1329] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.540247][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.571956][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.596159][ T1329] bond0 (unregistering): Released all slaves [ 428.478852][T10028] loop8: detected capacity change from 0 to 2048 [ 428.598260][T10028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.964471][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.990237][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.005639][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.031834][ T9895] bridge_slave_0: entered allmulticast mode [ 429.072322][ T9895] bridge_slave_0: entered promiscuous mode [ 429.134055][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.176190][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.204222][ T9895] bridge_slave_1: entered allmulticast mode [ 429.238613][ T9895] bridge_slave_1: entered promiscuous mode [ 429.293651][T10041] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1032'. [ 430.017674][ T9895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.275820][ T9895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.210884][T10064] loop1: detected capacity change from 0 to 512 [ 432.360948][ T1329] hsr_slave_0: left promiscuous mode [ 432.391993][T10064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.446039][T10064] EXT4-fs (loop1): orphan cleanup on readonly fs [ 432.463789][T10064] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 432.473889][T10064] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 432.483640][T10064] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1036: Failed to acquire dquot type 1 [ 432.538711][T10064] EXT4-fs (loop1): 1 truncate cleaned up [ 432.569921][T10064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.119378][ T1329] hsr_slave_1: left promiscuous mode [ 433.160611][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.230070][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.321012][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.379837][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.747050][ T1329] veth1_to_batadv: left promiscuous mode [ 434.781089][ T1329] veth1_macvtap: left promiscuous mode [ 434.786675][ T1329] veth0_macvtap: left promiscuous mode [ 434.807079][T10070] loop8: detected capacity change from 0 to 8192 [ 434.978120][ T1329] veth1_vlan: left promiscuous mode [ 434.983630][ T1329] veth0_vlan: left promiscuous mode [ 435.022688][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.804714][ T6052] Bluetooth: hci3: Frame reassembly failed (-84) [ 436.657639][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 436.677733][ T30] audit: type=1326 audit(1746393645.249:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.729632][ T30] audit: type=1326 audit(1746393645.249:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.760571][ T30] audit: type=1326 audit(1746393645.249:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.793440][ T30] audit: type=1326 audit(1746393645.249:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.829004][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 436.847060][ T30] audit: type=1326 audit(1746393645.249:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.877422][ T30] audit: type=1326 audit(1746393645.249:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.907610][ T30] audit: type=1326 audit(1746393645.259:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 436.934680][ T30] audit: type=1326 audit(1746393645.259:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 437.464792][ T9895] team0: Port device team_slave_0 added [ 437.680790][ T9895] team0: Port device team_slave_1 added [ 437.880029][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 438.047714][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.186271][T10117] loop1: detected capacity change from 0 to 512 [ 438.277452][T10117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 438.387534][T10117] EXT4-fs (loop1): 1 truncate cleaned up [ 438.413667][T10117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.007293][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.038614][ T9895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.141022][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.192165][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.349425][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.486892][ T9895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.058486][T10141] loop8: detected capacity change from 0 to 512 [ 440.149812][T10141] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 440.747858][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.176644][ T9895] hsr_slave_0: entered promiscuous mode [ 442.225202][ T9895] hsr_slave_1: entered promiscuous mode [ 442.633773][ T9895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.781601][ T9895] Cannot create hsr debugfs directory [ 443.137580][T10179] loop1: detected capacity change from 0 to 256 [ 443.183544][T10179] exfat: Deprecated parameter 'namecase' [ 443.288097][T10179] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 444.793990][T10204] loop6: detected capacity change from 0 to 512 [ 444.853387][ T9895] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 444.867062][T10204] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 444.897520][T10204] syz.6.1066: attempt to access beyond end of device [ 444.897520][T10204] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 444.915485][ T9895] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 444.960486][T10204] EXT4-fs (loop6): couldn't read superblock of external journal [ 445.462936][T10219] loop6: detected capacity change from 0 to 256 [ 445.479564][T10219] vfat: Unknown parameter '' [ 446.012079][ T9895] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 446.123874][ T9895] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 447.064149][ T9895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.247964][ T9895] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.392362][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.399536][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.442536][T10229] loop6: detected capacity change from 0 to 256 [ 447.472008][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.479203][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.536644][T10229] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 447.772990][T10236] loop1: detected capacity change from 0 to 512 [ 447.817162][T10236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.967997][T10236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 448.023636][T10236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1073: bg 0: block 248: padding at end of block bitmap is not set [ 448.053617][T10236] __quota_error: 15 callbacks suppressed [ 448.053665][T10236] Quota error (device loop1): write_blk: dquota write failed [ 448.067661][T10236] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 448.078830][T10236] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1073: Failed to acquire dquot type 1 [ 448.129051][T10236] EXT4-fs (loop1): 1 truncate cleaned up [ 448.155972][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.341146][T10240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.598663][T10258] loop8: detected capacity change from 0 to 512 [ 450.655895][T10258] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 450.706619][T10258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 450.749159][T10258] EXT4-fs (loop8): orphan cleanup on readonly fs [ 450.767826][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.826270][T10258] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.1078: attempt to clear invalid blocks 1024 len 1 [ 451.383519][T10258] EXT4-fs (loop8): Remounting filesystem read-only [ 451.637796][T10258] EXT4-fs (loop8): 1 truncate cleaned up [ 451.812027][T10258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 453.001880][T10270] EXT4-fs warning (device loop8): dx_probe:863: inode #2: comm syz.8.1078: dx entry: limit 0 != root limit 125 [ 453.014483][T10270] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.1078: Corrupt directory, running e2fsck is recommended [ 453.029836][T10270] EXT4-fs warning (device loop8): dx_probe:863: inode #2: comm syz.8.1078: dx entry: limit 0 != root limit 125 [ 453.041624][T10270] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.1078: Corrupt directory, running e2fsck is recommended [ 454.646210][T10280] loop6: detected capacity change from 0 to 512 [ 455.463223][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 455.928216][T10280] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 455.981239][T10280] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 456.030402][T10280] EXT4-fs (loop6): 1 truncate cleaned up [ 456.051594][T10280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.523413][ T9895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.213787][T10294] loop1: detected capacity change from 0 to 512 [ 457.262346][T10294] ext4: Bad value for 'barrier' [ 457.371775][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.138418][T10307] hub 2-0:1.0: USB hub found [ 458.149985][T10307] hub 2-0:1.0: 1 port detected [ 458.273727][T10307] loop6: detected capacity change from 0 to 512 [ 458.289774][T10307] EXT4-fs: Ignoring removed oldalloc option [ 458.627724][T10307] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1085: Parent and EA inode have the same ino 15 [ 458.661379][T10307] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1085: Parent and EA inode have the same ino 15 [ 458.696819][T10307] EXT4-fs (loop6): 1 orphan inode deleted [ 458.730689][T10307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.835249][ T9895] veth0_vlan: entered promiscuous mode [ 459.948470][ T9895] veth1_vlan: entered promiscuous mode [ 460.276772][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.314754][ T9895] veth0_macvtap: entered promiscuous mode [ 460.381028][ T9895] veth1_macvtap: entered promiscuous mode [ 461.188658][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.199384][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.227849][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.293258][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.355200][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.412904][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.422980][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.433909][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.449597][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.531811][T10333] loop1: detected capacity change from 0 to 512 [ 461.566226][T10333] EXT4-fs (loop1): Test dummy encryption mode enabled [ 461.680401][T10333] EXT4-fs error (device loop1): __ext4_iget:5025: inode #11: block 1: comm syz.1.1091: invalid block [ 461.717342][T10333] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1091: couldn't read orphan inode 11 (err -117) [ 461.750388][T10333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.885886][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 462.433353][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.443908][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.453812][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.489781][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.600207][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.708083][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.794206][ T9895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.875691][ T9895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.976575][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.292355][ T9895] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.390979][ T9895] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.470477][T10309] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 463.479795][ T9895] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.545651][ T9895] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.714693][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.075311][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.087100][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.095480][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.104194][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.112407][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.110321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 465.120115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 465.380104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 466.062800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 466.230287][ T5135] Bluetooth: hci3: command tx timeout [ 467.085696][T10372] loop6: detected capacity change from 0 to 256 [ 467.129129][T10372] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 467.736964][ T6052] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.939910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 468.907720][ T5135] Bluetooth: hci3: command tx timeout [ 468.965299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 468.984984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 469.580195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 470.018529][ T6052] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.106974][T10390] overlayfs: failed to clone upperpath [ 470.919800][ T5135] Bluetooth: hci3: command tx timeout [ 471.039410][ T6052] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.348421][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.966494][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.102325][T10396] syzkaller0: entered promiscuous mode [ 472.109979][T10396] syzkaller0: entered allmulticast mode [ 472.228721][ T6052] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.667191][T10422] loop8: detected capacity change from 0 to 256 [ 472.681869][T10422] exfat: Unknown parameter 'iochar' [ 473.001668][ T5135] Bluetooth: hci3: command tx timeout [ 477.061244][ T6052] bridge_slave_1: left allmulticast mode [ 477.066936][ T6052] bridge_slave_1: left promiscuous mode [ 477.114534][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.429785][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.438668][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.594434][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.695557][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.710626][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 478.122649][ T6052] bridge_slave_0: left allmulticast mode [ 478.128337][ T6052] bridge_slave_0: left promiscuous mode [ 478.160168][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.145021][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.194202][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.220737][ T6052] bond0 (unregistering): Released all slaves [ 479.640671][T10352] chnl_net:caif_netlink_parms(): no params data found [ 479.835852][T10480] overlayfs: failed to clone upperpath [ 479.941894][ T5833] Bluetooth: hci6: command tx timeout [ 480.615293][ T30] audit: type=1326 audit(1746393689.199:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.651709][ T30] audit: type=1326 audit(1746393689.199:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.675178][ T30] audit: type=1326 audit(1746393689.209:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.698952][ T30] audit: type=1326 audit(1746393689.219:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.738056][ T30] audit: type=1326 audit(1746393689.219:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.780571][ T30] audit: type=1326 audit(1746393689.219:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.839876][ T30] audit: type=1326 audit(1746393689.219:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.872423][ T30] audit: type=1326 audit(1746393689.219:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.901369][ T30] audit: type=1326 audit(1746393689.219:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 480.924900][T10108] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 480.955966][ T30] audit: type=1326 audit(1746393689.219:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694d98e969 code=0x7ffc0000 [ 481.101769][T10108] usb 9-1: Using ep0 maxpacket: 32 [ 481.118878][T10108] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.155787][T10108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 481.183782][T10108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.206450][T10108] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 481.242343][T10108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.456005][T10108] usb 9-1: config 0 descriptor?? [ 481.474986][T10487] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 481.492192][T10108] hub 9-1:0.0: USB hub found [ 481.644723][ T6052] hsr_slave_0: left promiscuous mode [ 481.663010][ T6052] hsr_slave_1: left promiscuous mode [ 481.684895][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.708242][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.720315][T10108] hub 9-1:0.0: 2 ports detected [ 481.904925][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.916901][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.024264][ T6052] veth1_macvtap: left promiscuous mode [ 482.047399][ T6052] veth0_macvtap: left promiscuous mode [ 482.080008][ T5833] Bluetooth: hci6: command tx timeout [ 483.336746][T10522] loop6: detected capacity change from 0 to 512 [ 483.357478][T10522] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.387481][T10522] EXT4-fs (loop6): 1 truncate cleaned up [ 483.412475][T10522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.455100][T10522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.640539][ T10] usb 9-1-port2: config error [ 484.125533][ T5833] Bluetooth: hci6: command tx timeout [ 484.411689][ T58] usb 9-1: USB disconnect, device number 3 [ 485.298166][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 485.658791][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 486.240263][ T5833] Bluetooth: hci6: command tx timeout [ 486.557576][T10553] serio: Serial port ptm0 [ 487.455813][T10559] loop8: detected capacity change from 0 to 512 [ 487.501736][T10559] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 487.511594][T10559] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 487.519666][T10559] System zones: 0-1, 15-15, 18-18, 34-34 [ 487.546487][T10559] EXT4-fs (loop8): orphan cleanup on readonly fs [ 487.556384][T10559] __quota_error: 13 callbacks suppressed [ 487.556400][T10559] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 487.619860][T10559] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 487.665992][T10559] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 487.768161][T10559] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1135: bad orphan inode 16 [ 487.835292][T10559] ext4_test_bit(bit=15, block=18) = 1 [ 487.853006][T10559] is_bad_inode(inode)=0 [ 487.857174][T10559] NEXT_ORPHAN(inode)=0 [ 487.894746][T10559] max_ino=32 [ 487.905759][T10559] i_nlink=2 [ 487.927834][T10559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.200609][T10574] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 489.870305][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.488003][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.495627][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.503697][T10352] bridge_slave_0: entered allmulticast mode [ 490.512169][T10352] bridge_slave_0: entered promiscuous mode [ 490.737902][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.759145][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.786975][T10352] bridge_slave_1: entered allmulticast mode [ 490.797561][T10352] bridge_slave_1: entered promiscuous mode [ 491.064481][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.239015][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.502904][T10352] team0: Port device team_slave_0 added [ 491.592862][T10352] team0: Port device team_slave_1 added [ 491.700820][T10602] loop8: detected capacity change from 0 to 512 [ 491.715602][T10602] EXT4-fs (loop8): Test dummy encryption mode enabled [ 491.905835][T10602] EXT4-fs error (device loop8): __ext4_iget:5025: inode #11: block 1: comm syz.8.1145: invalid block [ 491.924252][T10602] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1145: couldn't read orphan inode 11 (err -117) [ 491.952854][T10602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.622130][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 494.787797][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.829598][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.866664][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.930728][T10616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.938042][T10616] IPv6: NLM_F_CREATE should be set when creating new route [ 494.976089][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.037380][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.208584][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.449586][T10452] chnl_net:caif_netlink_parms(): no params data found [ 495.801767][T10604] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 496.280722][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.513284][T10652] loop6: detected capacity change from 0 to 512 [ 498.560631][T10652] EXT4-fs (loop6): Test dummy encryption mode enabled [ 498.606703][T10652] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 498.634671][T10652] EXT4-fs (loop6): 1 truncate cleaned up [ 498.649391][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.672608][T10652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.934345][T10352] hsr_slave_0: entered promiscuous mode [ 499.017534][T10352] hsr_slave_1: entered promiscuous mode [ 499.029319][T10652] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 499.043639][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.069520][T10352] Cannot create hsr debugfs directory [ 499.319672][T10659] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 500.131430][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.217555][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.493580][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.543087][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.551033][T10452] bridge_slave_0: entered allmulticast mode [ 500.559483][T10452] bridge_slave_0: entered promiscuous mode [ 500.781886][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.236298][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.351260][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1159'. [ 501.373641][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.392237][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.405763][T10452] bridge_slave_1: entered allmulticast mode [ 501.415364][T10452] bridge_slave_1: entered promiscuous mode [ 501.679056][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.892535][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.099384][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.398931][T10452] team0: Port device team_slave_0 added [ 502.611313][T10452] team0: Port device team_slave_1 added [ 504.442166][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.449149][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.590086][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.660957][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.679603][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.708144][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.742476][ T30] audit: type=1326 audit(1746393713.309:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 504.797702][ T13] bridge_slave_1: left allmulticast mode [ 504.804475][ T13] bridge_slave_1: left promiscuous mode [ 504.826006][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.838480][ T30] audit: type=1326 audit(1746393713.309:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 504.891554][ T30] audit: type=1326 audit(1746393713.309:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 505.021892][T10738] loop1: detected capacity change from 0 to 512 [ 505.029206][T10738] EXT4-fs: Ignoring removed oldalloc option [ 505.049126][T10738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.089373][ T13] bridge_slave_0: left allmulticast mode [ 505.125472][T10738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 505.138773][T10738] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 505.148900][T10738] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 505.158412][T10738] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1174: Failed to acquire dquot type 1 [ 505.183771][T10738] EXT4-fs (loop1): 1 truncate cleaned up [ 505.239948][T10738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.412264][ T13] bridge_slave_0: left promiscuous mode [ 505.831382][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.859883][ T30] audit: type=1326 audit(1746393713.309:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 506.049316][ T30] audit: type=1326 audit(1746393713.309:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 506.228129][ T30] audit: type=1326 audit(1746393713.309:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 506.292486][ T30] audit: type=1326 audit(1746393713.309:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 506.345054][ T30] audit: type=1326 audit(1746393713.309:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.8.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac178e969 code=0x7ffc0000 [ 509.678266][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.689531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.701043][ T13] bond0 (unregistering): Released all slaves [ 510.033296][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.764867][T10777] overlayfs: failed to clone upperpath [ 511.010684][T10779] hub 9-0:1.0: USB hub found [ 511.016097][T10779] hub 9-0:1.0: 1 port detected [ 512.932295][T10790] loop1: detected capacity change from 0 to 512 [ 513.950372][T10790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.963695][T10790] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.514074][T10452] hsr_slave_0: entered promiscuous mode [ 514.524384][T10452] hsr_slave_1: entered promiscuous mode [ 514.530748][T10452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.539004][T10452] Cannot create hsr debugfs directory [ 514.721732][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.931235][T10804] loop8: detected capacity change from 0 to 512 [ 514.954847][T10804] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 514.995067][T10804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 515.035129][T10804] System zones: 1-12 [ 515.041236][T10804] EXT4-fs (loop8): 1 truncate cleaned up [ 515.057676][T10804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.354725][ T13] hsr_slave_0: left promiscuous mode [ 515.363394][ T13] hsr_slave_1: left promiscuous mode [ 515.369487][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.377081][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.389963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.409847][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.724391][ T13] veth1_macvtap: left promiscuous mode [ 516.054072][ T13] veth0_macvtap: left promiscuous mode [ 516.076501][ T13] veth1_vlan: left promiscuous mode [ 516.102105][ T13] veth0_vlan: left promiscuous mode [ 516.207635][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.273439][T10822] loop8: detected capacity change from 0 to 512 [ 517.392527][T10822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.434949][T10822] EXT4-fs (loop8): orphan cleanup on readonly fs [ 517.447971][T10822] Quota error (device loop8): do_check_range: Getting block 196613 out of range 1-5 [ 517.457583][T10822] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 517.467136][T10822] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.1199: Failed to acquire dquot type 1 [ 517.485633][T10822] EXT4-fs (loop8): 1 truncate cleaned up [ 518.017247][ T30] audit: type=1326 audit(1746393726.579:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 518.299314][ T30] audit: type=1326 audit(1746393726.619:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 518.467972][T10822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.659324][ T30] audit: type=1326 audit(1746393726.789:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.043996][ T30] audit: type=1326 audit(1746393726.819:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.188286][ T30] audit: type=1326 audit(1746393726.829:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.305936][ T30] audit: type=1326 audit(1746393726.839:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.427228][ T30] audit: type=1326 audit(1746393726.909:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.591294][ T30] audit: type=1326 audit(1746393726.919:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572178e969 code=0x7ffc0000 [ 519.859591][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.624934][ T13] team0 (unregistering): Port device team_slave_1 removed [ 520.664858][ T13] team0 (unregistering): Port device team_slave_0 removed [ 521.118694][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1196'. [ 521.769030][T10851] overlayfs: failed to clone upperpath [ 522.604990][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 522.605013][ T30] audit: type=1326 audit(1746393731.179:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.5.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d98e969 code=0x7fc00000 [ 523.960495][T10874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.969140][T10874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.990722][T10874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.074896][T10874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.089136][T10874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.658235][T10893] loop6: detected capacity change from 0 to 1024 [ 524.894319][T10893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.582804][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.611729][T10452] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 525.636551][T10452] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 525.720952][T10452] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 525.825643][T10452] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 525.843517][T10919] loop6: detected capacity change from 0 to 256 [ 526.199811][T10874] Bluetooth: hci5: command tx timeout [ 526.473435][T10873] chnl_net:caif_netlink_parms(): no params data found [ 528.173725][T10934] netlink: 'syz.6.1224': attribute type 16 has an invalid length. [ 528.228944][T10934] netlink: 'syz.6.1224': attribute type 17 has an invalid length. [ 528.282272][T10874] Bluetooth: hci5: command tx timeout [ 528.396063][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.487665][T10934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.520063][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.537592][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.566170][T10873] bridge_slave_0: entered allmulticast mode [ 528.610722][T10873] bridge_slave_0: entered promiscuous mode [ 528.651684][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.679194][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.797777][T10873] bridge_slave_1: entered allmulticast mode [ 528.822553][T10873] bridge_slave_1: entered promiscuous mode [ 528.863732][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.005392][T10953] loop8: detected capacity change from 0 to 256 [ 529.146443][T10953] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 530.018842][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.035497][T10956] loop1: detected capacity change from 0 to 2048 [ 530.086614][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.093812][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.137724][T10956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.152398][T10956] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.155613][ T6650] bridge_slave_1: left allmulticast mode [ 530.214753][ T6650] bridge_slave_1: left promiscuous mode [ 530.233906][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.275906][ T6650] bridge_slave_0: left allmulticast mode [ 530.275933][ T6650] bridge_slave_0: left promiscuous mode [ 530.276116][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.399867][T10874] Bluetooth: hci5: command tx timeout [ 530.591537][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.617963][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.291718][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.317244][ T6650] bond0 (unregistering): Released all slaves [ 531.375089][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.567586][T10452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.589309][T10452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.715992][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.723198][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.439915][T10874] Bluetooth: hci5: command tx timeout [ 534.212521][ T6650] hsr_slave_0: left promiscuous mode [ 534.256392][ T6650] hsr_slave_1: left promiscuous mode [ 534.269660][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.316281][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.327695][T11007] loop6: detected capacity change from 0 to 1024 [ 534.349340][T11007] EXT4-fs: Ignoring removed orlov option [ 534.437612][T11007] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 534.529338][T11007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.336916][ T6615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.439094][T11026] loop6: detected capacity change from 0 to 128 [ 536.503795][T11026] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.623235][T11026] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 537.519776][T11034] xt_CT: No such helper "netbios-ns" [ 538.935989][T11042] loop8: detected capacity change from 0 to 512 [ 539.051187][T11042] EXT4-fs (loop8): Test dummy encryption mode enabled [ 539.105635][T11042] EXT4-fs error (device loop8): __ext4_iget:5025: inode #11: block 1: comm syz.8.1248: invalid block [ 539.124204][T11042] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1248: couldn't read orphan inode 11 (err -117) [ 539.161444][T11042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.372479][T11044] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 541.363027][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 542.360978][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 542.415401][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.454050][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.467077][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.481349][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.526220][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.534822][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.814859][T10873] team0: Port device team_slave_0 added [ 543.642362][T10873] team0: Port device team_slave_1 added [ 543.955648][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.978577][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.059093][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.144112][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.194827][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.322744][T11076] loop8: detected capacity change from 0 to 512 [ 544.343509][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.565109][T11076] EXT4-fs (loop8): 1 orphan inode deleted [ 544.583948][T11076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.612202][ T5833] Bluetooth: hci3: command tx timeout [ 544.635762][T11076] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.719080][ T63] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 544.772954][ T63] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 546.259920][T11084] xt_CT: No such helper "netbios-ns" [ 546.700138][ T5833] Bluetooth: hci3: command tx timeout [ 548.377131][ T6615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.421898][ T9099] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.572690][T11093] loop1: detected capacity change from 0 to 256 [ 548.626976][T11093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 548.867285][ T5833] Bluetooth: hci3: command tx timeout [ 550.023598][T10873] hsr_slave_0: entered promiscuous mode [ 550.102536][T11103] loop8: detected capacity change from 0 to 512 [ 550.115625][T10873] hsr_slave_1: entered promiscuous mode [ 550.143844][T10873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.198914][T10873] Cannot create hsr debugfs directory [ 550.208187][T11103] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 550.278952][T11103] syz.8.1263: attempt to access beyond end of device [ 550.278952][T11103] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 550.295089][T11103] EXT4-fs (loop8): couldn't read superblock of external journal [ 551.977429][T11112] loop8: detected capacity change from 0 to 256 [ 551.984805][T11112] vfat: Unknown parameter '' [ 552.011949][T10874] Bluetooth: hci3: command tx timeout [ 552.583663][T11116] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 554.039327][T11131] loop6: detected capacity change from 0 to 256 [ 554.108157][T11131] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 554.659609][ T52] ================================================================== [ 554.667716][ T52] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x35d/0x590 [ 554.675566][ T52] Read of size 8 at addr ffffffff99d14828 by task kworker/u8:3/52 [ 554.683361][ T52] [ 554.685674][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 554.685699][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 554.685713][ T52] Workqueue: netns cleanup_net [ 554.685740][ T52] Call Trace: [ 554.685748][ T52] [ 554.685756][ T52] dump_stack_lvl+0x189/0x250 [ 554.685787][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.685812][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.685836][ T52] ? __kasan_check_byte+0x12/0x40 [ 554.685862][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.685890][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.685920][ T52] ? rcu_is_watching+0x15/0xb0 [ 554.685952][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.685976][ T52] ? lock_release+0x4b/0x3e0 [ 554.686008][ T52] ? __virt_addr_valid+0x18c/0x540 [ 554.686034][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686058][ T52] ? __virt_addr_valid+0x469/0x540 [ 554.686087][ T52] print_report+0xb4/0x290 [ 554.686113][ T52] ? fib6_clean_node+0x35d/0x590 [ 554.686135][ T52] kasan_report+0x118/0x150 [ 554.686163][ T52] ? fib6_clean_node+0x35d/0x590 [ 554.686190][ T52] fib6_clean_node+0x35d/0x590 [ 554.686214][ T52] ? __pfx_fib6_clean_node+0x10/0x10 [ 554.686241][ T52] ? __local_bh_enable_ip+0x12d/0x1c0 [ 554.686273][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686300][ T52] fib6_walk_continue+0x67b/0x910 [ 554.686330][ T52] fib6_walk+0x149/0x290 [ 554.686353][ T52] __fib6_clean_all+0x234/0x380 [ 554.686373][ T52] ? __fib6_clean_all+0x9b/0x380 [ 554.686395][ T52] ? __pfx_fib6_ifdown+0x10/0x10 [ 554.686419][ T52] ? __pfx___fib6_clean_all+0x10/0x10 [ 554.686442][ T52] ? __pfx_fib6_clean_node+0x10/0x10 [ 554.686465][ T52] ? __pfx_fib6_ifdown+0x10/0x10 [ 554.686488][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686512][ T52] ? __lock_acquire+0xaac/0xd20 [ 554.686546][ T52] rt6_disable_ip+0x120/0x720 [ 554.686574][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686597][ T52] ? rcu_is_watching+0x15/0xb0 [ 554.686628][ T52] ? __pfx_rt6_disable_ip+0x10/0x10 [ 554.686653][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686680][ T52] addrconf_ifdown+0x15d/0x1880 [ 554.686714][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686738][ T52] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 554.686766][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 554.686791][ T52] ? tls_dev_event+0x717/0xec0 [ 554.686820][ T52] ? __pfx_addrconf_ifdown+0x10/0x10 [ 554.686861][ T52] addrconf_notify+0x1bc/0x1010 [ 554.686888][ T52] notifier_call_chain+0x1b6/0x3e0 [ 554.686918][ T52] dev_close_many+0x29c/0x410 [ 554.686939][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.686966][ T52] ? __pfx_dev_close_many+0x10/0x10 [ 554.686992][ T52] unregister_netdevice_many_notify+0x619/0x2330 [ 554.687028][ T52] ? __mutex_trylock_common+0x153/0x260 [ 554.687052][ T52] ? netdev_run_todo+0xe1d/0xea0 [ 554.687080][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 554.687113][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687137][ T52] ? rcu_is_watching+0x15/0xb0 [ 554.687168][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687192][ T52] ? trace_contention_end+0x39/0x120 [ 554.687212][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687235][ T52] ? __mutex_lock+0x330/0xe80 [ 554.687260][ T52] ? rtnl_net_dev_lock+0x36/0x2f0 [ 554.687283][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687309][ T52] ? nsim_destroy+0xdb/0x670 [ 554.687340][ T52] unregister_netdevice_queue+0x33c/0x380 [ 554.687371][ T52] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 554.687403][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687431][ T52] nsim_destroy+0x1f6/0x670 [ 554.687461][ T52] __nsim_dev_port_del+0x14d/0x1b0 [ 554.687495][ T52] nsim_dev_reload_destroy+0x288/0x490 [ 554.687531][ T52] nsim_dev_reload_down+0x8a/0xc0 [ 554.687563][ T52] devlink_reload+0x1b6/0x8d0 [ 554.687592][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687618][ T52] ? xa_get_mark+0x67/0x7b0 [ 554.687648][ T52] ? __pfx_devlink_reload+0x10/0x10 [ 554.687675][ T52] ? xa_get_mark+0x70f/0x7b0 [ 554.687709][ T52] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 554.687737][ T52] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 554.687766][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687791][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687815][ T52] ? class_remove_file_ns+0x121/0x160 [ 554.687848][ T52] cleanup_net+0x594/0xbd0 [ 554.687873][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 554.687897][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.687928][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.687948][ T52] ? process_scheduled_works+0x9ec/0x17a0 [ 554.687980][ T52] ? process_scheduled_works+0x9ec/0x17a0 [ 554.688014][ T52] process_scheduled_works+0xade/0x17a0 [ 554.688062][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.688100][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.688128][ T52] worker_thread+0x8a0/0xda0 [ 554.688162][ T52] kthread+0x711/0x8a0 [ 554.688188][ T52] ? __pfx_worker_thread+0x10/0x10 [ 554.688207][ T52] ? __pfx_kthread+0x10/0x10 [ 554.688230][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.688255][ T52] ? __pfx_kthread+0x10/0x10 [ 554.688278][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.688298][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.688321][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.688345][ T52] ? __pfx_kthread+0x10/0x10 [ 554.688368][ T52] ret_from_fork+0x4e/0x80 [ 554.688388][ T52] ? __pfx_kthread+0x10/0x10 [ 554.688412][ T52] ret_from_fork_asm+0x1a/0x30 [ 554.688440][ T52] [ 554.688448][ T52] [ 555.231753][ T52] The buggy address belongs to the variable: [ 555.237725][ T52] binder_devices+0x8/0x20 [ 555.242198][ T52] [ 555.244509][ T52] The buggy address belongs to the physical page: [ 555.250905][ T52] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19d14 [ 555.259659][ T52] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 555.267552][ T52] raw: 00fff00000002000 ffffea0000674508 ffffea0000674508 0000000000000000 [ 555.276152][ T52] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 555.284724][ T52] page dumped because: kasan: bad access detected [ 555.291207][ T52] page_owner info is not present (never set?) [ 555.297255][ T52] [ 555.299587][ T52] Memory state around the buggy address: [ 555.305204][ T52] ffffffff99d14700: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 555.313255][ T52] ffffffff99d14780: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 555.321304][ T52] >ffffffff99d14800: f9 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 00 00 00 00 [ 555.329347][ T52] ^ [ 555.334701][ T52] ffffffff99d14880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.342749][ T52] ffffffff99d14900: 00 00 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 [ 555.350803][ T52] ================================================================== [ 555.358958][ T52] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 555.366166][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 555.378149][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 555.388199][ T52] Workqueue: netns cleanup_net [ 555.392972][ T52] Call Trace: [ 555.396241][ T52] [ 555.399166][ T52] dump_stack_lvl+0x99/0x250 [ 555.403764][ T52] ? __asan_memcpy+0x40/0x70 [ 555.408350][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.413551][ T52] ? __pfx__printk+0x10/0x10 [ 555.418146][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.423784][ T52] panic+0x2db/0x790 [ 555.427682][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.433315][ T52] ? __pfx_panic+0x10/0x10 [ 555.437734][ T52] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 555.443622][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.449250][ T52] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.455137][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 555.461898][ T52] ? print_memory_metadata+0x314/0x400 [ 555.467358][ T52] ? fib6_clean_node+0x35d/0x590 [ 555.472291][ T52] check_panic_on_warn+0x89/0xb0 [ 555.477230][ T52] ? fib6_clean_node+0x35d/0x590 [ 555.482166][ T52] end_report+0x78/0x160 [ 555.486424][ T52] kasan_report+0x129/0x150 [ 555.490927][ T52] ? fib6_clean_node+0x35d/0x590 [ 555.495866][ T52] fib6_clean_node+0x35d/0x590 [ 555.500631][ T52] ? __pfx_fib6_clean_node+0x10/0x10 [ 555.505916][ T52] ? __local_bh_enable_ip+0x12d/0x1c0 [ 555.511312][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.516944][ T52] fib6_walk_continue+0x67b/0x910 [ 555.521971][ T52] fib6_walk+0x149/0x290 [ 555.526208][ T52] __fib6_clean_all+0x234/0x380 [ 555.531054][ T52] ? __fib6_clean_all+0x9b/0x380 [ 555.535987][ T52] ? __pfx_fib6_ifdown+0x10/0x10 [ 555.540921][ T52] ? __pfx___fib6_clean_all+0x10/0x10 [ 555.546291][ T52] ? __pfx_fib6_clean_node+0x10/0x10 [ 555.551570][ T52] ? __pfx_fib6_ifdown+0x10/0x10 [ 555.556501][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.562132][ T52] ? __lock_acquire+0xaac/0xd20 [ 555.567009][ T52] rt6_disable_ip+0x120/0x720 [ 555.571694][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.577324][ T52] ? rcu_is_watching+0x15/0xb0 [ 555.582098][ T52] ? __pfx_rt6_disable_ip+0x10/0x10 [ 555.587303][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.592960][ T52] addrconf_ifdown+0x15d/0x1880 [ 555.597823][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.603455][ T52] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 555.609096][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 555.614126][ T52] ? tls_dev_event+0x717/0xec0 [ 555.618898][ T52] ? __pfx_addrconf_ifdown+0x10/0x10 [ 555.624203][ T52] addrconf_notify+0x1bc/0x1010 [ 555.629062][ T52] notifier_call_chain+0x1b6/0x3e0 [ 555.634179][ T52] dev_close_many+0x29c/0x410 [ 555.638848][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.644482][ T52] ? __pfx_dev_close_many+0x10/0x10 [ 555.649679][ T52] unregister_netdevice_many_notify+0x619/0x2330 [ 555.656021][ T52] ? __mutex_trylock_common+0x153/0x260 [ 555.661743][ T52] ? netdev_run_todo+0xe1d/0xea0 [ 555.666686][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 555.673459][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.679090][ T52] ? rcu_is_watching+0x15/0xb0 [ 555.683860][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.689492][ T52] ? trace_contention_end+0x39/0x120 [ 555.694775][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.700841][ T52] ? __mutex_lock+0x330/0xe80 [ 555.705516][ T52] ? rtnl_net_dev_lock+0x36/0x2f0 [ 555.710557][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.716187][ T52] ? nsim_destroy+0xdb/0x670 [ 555.720779][ T52] unregister_netdevice_queue+0x33c/0x380 [ 555.726504][ T52] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 555.732749][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.738384][ T52] nsim_destroy+0x1f6/0x670 [ 555.742894][ T52] __nsim_dev_port_del+0x14d/0x1b0 [ 555.748014][ T52] nsim_dev_reload_destroy+0x288/0x490 [ 555.753510][ T52] nsim_dev_reload_down+0x8a/0xc0 [ 555.758542][ T52] devlink_reload+0x1b6/0x8d0 [ 555.763222][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.768859][ T52] ? xa_get_mark+0x67/0x7b0 [ 555.773389][ T52] ? __pfx_devlink_reload+0x10/0x10 [ 555.778618][ T52] ? xa_get_mark+0x70f/0x7b0 [ 555.783217][ T52] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 555.788678][ T52] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 555.794662][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.800301][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.805943][ T52] ? class_remove_file_ns+0x121/0x160 [ 555.811321][ T52] cleanup_net+0x594/0xbd0 [ 555.815736][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 555.820671][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.826304][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.831500][ T52] ? process_scheduled_works+0x9ec/0x17a0 [ 555.837227][ T52] ? process_scheduled_works+0x9ec/0x17a0 [ 555.842952][ T52] process_scheduled_works+0xade/0x17a0 [ 555.848519][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.854507][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.860141][ T52] worker_thread+0x8a0/0xda0 [ 555.864744][ T52] kthread+0x711/0x8a0 [ 555.868821][ T52] ? __pfx_worker_thread+0x10/0x10 [ 555.873927][ T52] ? __pfx_kthread+0x10/0x10 [ 555.878513][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.884149][ T52] ? __pfx_kthread+0x10/0x10 [ 555.888742][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.893935][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.899650][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.904850][ T52] ? __pfx_kthread+0x10/0x10 [ 555.909436][ T52] ret_from_fork+0x4e/0x80 [ 555.913850][ T52] ? __pfx_kthread+0x10/0x10 [ 555.918437][ T52] ret_from_fork_asm+0x1a/0x30 [ 555.923204][ T52] [ 555.926404][ T52] Kernel Offset: disabled [ 555.930723][ T52] Rebooting in 86400 seconds..