last executing test programs: 1m3.53556203s ago: executing program 2 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) 1m3.356655072s ago: executing program 2 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000180)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0xffffffffffffffff, 0x7dd, 0x5, 0x40000000000, 0xfffffffffffffff7, 0x200, 0xba9f, 0x5, 0x6000, 0x0, r10, r11, 0x18d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa89342, &(0x7f0000000640)={[{@barrier}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@lazytime}]}, 0x4, 0x44a, &(0x7f0000000d00)="$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") 1m1.499667846s ago: executing program 2 (id=320): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x3, @raw_data="6c522476cb710d604e18c6833994fbbb45ec055951febcb4667dcd01b0c025b7cf5d22670a3d30471ed4a174185a76ad86f49c1946cad58c51d9b7c79e31d777cc67ff74d8ce88a478f9c674fd4588b245b96c1fbba1c15eef6265f24843b7eab1566437573bd7977f002771face6a0804d27b04f1e6711f699ecd1ca76ff5d98bf63bf6c76b1e83a36867082fdbc0fc101cf06f95f0f484a9df091f79c4e138bb0707b5f9193f3b7f48bef4c6b58a21548434613b5e6ac51e308a957dbf8630f56d7833ef7f8c98"}) setreuid(0x0, 0xee00) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000001c0)={0x6, 0x8000, 0x8, 0x7}) 1m1.338187248s ago: executing program 2 (id=322): syz_mount_image$jfs(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x2, 0x5e17, &(0x7f000000be40)="$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") mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/39) 57.885412572s ago: executing program 2 (id=338): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900000000000000180000002000000000000000000000009500000000000000d40a0000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 56.396865541s ago: executing program 2 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}, 0x1, 0x1000000000000000}, 0x0) 56.123604914s ago: executing program 32 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}, 0x1, 0x1000000000000000}, 0x0) 6.565468806s ago: executing program 3 (id=609): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000200000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 6.445155867s ago: executing program 3 (id=610): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0xb, 0x4, 0xa1009f4b28958a50, 0x1d23, {}, {0x3, 0xc, 0x4, 0x2, 0x26, 0x5, "933c6934"}, 0x9, 0x2, {0x0}, 0xb36d}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r2 = syz_open_pts(0xffffffffffffffff, 0x200) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x1241, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f0000000540)=[{0x0}], 0x1, 0xffffffff, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000089a000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e7465720004000280080003400000010714"], 0xc8}}, 0x20050800) r6 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r6, 0xc0104307, &(0x7f0000000080)=0x43) userfaultfd(0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_DESC={0x5c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x47, 0x6, "fa4390a390a54fa8ecea966c19d255a0bb05188a4bc1f21d8c6f34cc02d16d02d516154007b926228281bd5835ad603382f55e686023b61140690e66201ea5d002eb32"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFT_MSG_DELOBJ={0x30c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfff3}, [@NFTA_OBJ_USERDATA={0x89, 0x8, "c745603a561d27047f17c4e07717ef357dbfd386e7d91d39500ec41f494aaa1ae3d510672f74737f0a7fa313b0f71ddeda28c53052c31dbd32a708aa8c302eab81750929485983616d404086308f07000000000000007091b5384d3d824482b5b16226543ce067b060221b4dc307df05ce305e37df822622e83950d23a6e51ad99015b0989"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x4f, 0x8, "41cec1f737b29e6026f408090504e83e24ab910d29afdaffcdef8f1ba61ffb2fdb0f6b1e6bc3263dc67c3eb15d3e0f15879db13897ecbe40fe972d730d28517c4e1f9071ae6a4f1807ae89"}, @NFTA_OBJ_USERDATA={0xa2, 0x8, "4520e7c83f78daf6cd45112375dd492a25558012214acd940b6781b4c4d768d353b7fbf861def05ee6296c9cf40378b95c7c6e945a257b48ee4eba61cde73cee18fc341916339ad13d4945ff30c10947c109f9d82449e01933fe124d74d7f5b626e5ca377a07e34c3ce696af16316d4db0e6cc3e56bed8fc95c856fba82b77f688f5cb1a721a5852c34f9a180d4ca024acc17a08dcb2ca33150b6c03a2c5"}, @NFTA_OBJ_USERDATA={0xf1, 0x8, "54a705ff12d86cb05102f29b43354780dfd7b9a016f6506f1b9fc99d502facc4bf5a6a85ac99aa54912b0e41fe27fc057bbad2071967681219bc4a4337213c302812dd927fb917653198095a0a6d454cf1c3f3f595d431df63bdb82df791cc0f1f1bf3e052c0b9d1acc0b5114c593fcfe97d1cdfff13e41ed25fbf038473e443cfbf5fe82b913a89c96edbe152cb8a6c48ee7abbba1553d982703986995a5c8eeaeed624d5dd659d2eb3fd7f99e5cbc117bf0c891e982c16b8c9e5ed08d9c90c5a9748429eed6b82e260d6bf52da23eb9b3a530632f55c775c92a8a4ce0dd1be6e83b874acb88c7868fffede62"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x69, 0x8, "5c07532021f9125c55dee30c294adecb8b5662ea7798ee9e5d52922f4184ed265b2c3af5c696b5c11f5dea2f4e4d4cd091b57204c1c062fc0c98ecc92e4e5bb6b8804b2165d85d279608960ff96c364278f369c65e44246a79e5180fd066b0678da292c205"}]}, @NFT_MSG_NEWRULE={0x2fc, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0x7b, 0x7, 0x1, 0x0, "56a9f8f65751c23bfc333e9cd80c38861f0f14fae2cade6e489a21094cfe10456aa15011672013783f89cb6bdf1beec9e366cf28a101aa3503aa749699780b70535d96a6ecf81d666224449c0d8d529a420e095fe2ee3a6d1afa13d9eea2b0c352b242ebb5b48ebb4a3b01dcfa207c73ceea60ef15ee24"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x224, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x198, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x188, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0xaf, 0x3, "3a2304984fea3701aef96fdf259fee3129d144260200aa79c234e7de7dca5cd0d2e81ac12b81bd8c7a8e5ed4b0c2fac2c98ce0cff93c0213c98f8979cbcc29250a565bfd4476a5310dc1b8ed8c657f61e1681fe673ae525ecad339d6ce42fedc7cb1c696075946b783ef57b5db91c6a86cd0299c887f6ff152e610db47e494acb426b2d6b1e0de3d40f811dc3b5a0d23e340eb1726ea1606a0da3bb727ca60dc8082aa420415500d8dda25"}, @NFTA_TARGET_INFO={0xb7, 0x3, "470218da20d9f28cd8463261decda45f77c3a47cbd4288b5ba33ebdde23cde1ef7032e8563bf3b9edf063eb83d4df066bdb2b58ac5dc71f5f61e02a8397568a713e0941fab5dbf480846aa72d33d0f013ad15dd4909f746cfc208c63fde5ed61f3a450b9b5c29528450105ee1e0b2473a1c4aeec6044cfe43c19ffed4e300d37608aac84308bcf921dfd5846725077e3fb0a9035a36c3049deb286602275211b61a81e3840aae4cee5cdf073ab75945bc333fe"}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELRULE={0x534, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x44c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_INNER_TYPE={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xda}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x310, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x300, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0x21c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2186d25185328606b25a82d8bdd249a9b5b71a0fddfda723d547e64aa550bea514"}, @NFTA_DATA_VALUE={0xfb, 0x1, "e8a0019528f356bc1f77fb8dc7004d8223c1a758d5f7ac6f098f3617ebe3c47154540ce9c2f4c82c4141e0f0c1a31d56ec23ab9ab69ca4b209cb536e02713663c5cabc1c93ba7e40a484c15f258d445c673b6dcb29c8e60a2a3d623a254d93736792fb6477fdadb86a1290aac664a76efff4b90247caa7671da84ea4e8f8d800c8ff78e240b4b77525578cab89b82434df259131d5a28e5ec09935c220045ac714a635423b0f2f3e58b5a2b34d6982d75b1ba20ca7c04fe1cdccdc4411f9b4d5da1a5bb33b4688b13848a1a7ecd43b924c150e28f9f326c95920a51ee627e8f74b4ffb08e3d754b6af78a79e7685eb5d2570c216023096"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xba, 0x1, "a59fbebc81cedec202ac51a743be509585ed38e7287ca70f0685c4d111d2941b61f28ea078cd6fcdea2d901472adaf4e2862c609dea91024d76524e70724598ae1c3299589a401b4ab37edb1c3f561166dc7c067224db9d6d7acb2617b1a3e1306239987b1197fec833753997114bdc2a9c4ad6140379e1bcee545e334471a0d0ebc2f83c5621ae2cd5ca37917d6a2f59895b738cce62ead47274a427bb3d4e510d9e6649d4f2f27d8fb263bfa1529cca85562c4e14c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_FROM_DATA={0xc8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "98"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x61, 0x1, "8af184d76cde4586baa1d020fdfdd85305122b2a2cb89c2470e36a5548038a485437d6d8a7e3ee4f0eb970cc75171c63b26d02e098a16176efc55bb2927e8ea853a6774a08c96ea3dfbcad1fd5f7f25e1a79a214d922afb978618c5023"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xa9, 0x7, 0x1, 0x0, "6b9edf42b4129b86503f2a4ed69642cf1b47c24ee39e44864017c2b52a2de59c657b9ed97e2e58f164bc2c42136f7c04e8d12798c54d5e97dcad2acdd6a4f1c613f8b183afbc3e8b3a0db3a1015f1d4b07c6d063828411c844dc2666da8576562a374d87bc962ac013948843384acf80b6c716586a2f74216fb888dcc954a4b81176f8025c8fb8f192b622f5e57de3bc65da595647092b38b69029a828c45485a4cd530a36"}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd04}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040810) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x100001, &(0x7f0000000080)=ANY=[@ANYBLOB="626172726965722c6e6f646973636172642c6e6f646973636172642c6e6f626172726965722c1f17cc4efc236711a5dfda398707ab626172726967524a65722c6e6f64697363"], 0x0, 0xf70, &(0x7f00000007c0)="$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") 5.986386884s ago: executing program 3 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x92, 0x1004}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x68, 0x0, &(0x7f0000000180)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000500)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0xffffffffffffffff, 0x7dd, 0x5, 0x40000000000, 0xfffffffffffffff7, 0x200, 0xba9f, 0x5, 0x6000, 0x0, r11, r12, 0x18d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa89342, &(0x7f0000000640)={[{@barrier}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@lazytime}]}, 0x4, 0x44a, &(0x7f0000000d00)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 4.125356687s ago: executing program 3 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.705376733s ago: executing program 3 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.589773914s ago: executing program 3 (id=637): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000050003"], 0x48) 1.258221144s ago: executing program 5 (id=678): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b70200000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1.165453295s ago: executing program 1 (id=679): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.114145426s ago: executing program 1 (id=681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.049467446s ago: executing program 5 (id=682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000500), 0x0}, 0x20) 1.049275717s ago: executing program 4 (id=683): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0xb, 0x12) 994.319677ms ago: executing program 5 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0xb, 0x12) 971.163787ms ago: executing program 4 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 884.736109ms ago: executing program 1 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 821.442159ms ago: executing program 0 (id=687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 821.254149ms ago: executing program 5 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 779.06413ms ago: executing program 4 (id=689): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 681.779111ms ago: executing program 1 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 613.406372ms ago: executing program 5 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='qdisc_create\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 613.171732ms ago: executing program 0 (id=692): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000020006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 609.516372ms ago: executing program 4 (id=693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 473.564673ms ago: executing program 0 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="8520"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 333.426365ms ago: executing program 1 (id=695): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 333.251705ms ago: executing program 0 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 269.454966ms ago: executing program 1 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 229.113727ms ago: executing program 0 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 137.396828ms ago: executing program 5 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) 137.131908ms ago: executing program 4 (id=700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 23.779769ms ago: executing program 0 (id=701): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x100, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 4 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): n't find valid F2FS filesystem in 1th superblock [ 69.587421][ T4298] F2FS-fs (loop2): invalid crc value [ 69.600921][ T4301] loop4: detected capacity change from 0 to 512 [ 69.612107][ T4300] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 69.623524][ T4298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.670929][ T4300] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 69.683289][ T4298] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.691208][ T4298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 69.704948][ T4300] tipc: Enabled bearer , priority 10 [ 69.740125][ T4301] ======================================================= [ 69.740125][ T4301] WARNING: The mand mount option has been deprecated and [ 69.740125][ T4301] and is ignored by this kernel. Remove the mand [ 69.740125][ T4301] option from the mount to silence this warning. [ 69.740125][ T4301] ======================================================= [ 70.050015][ T4295] loop0: detected capacity change from 0 to 32768 [ 70.125987][ T4173] XFS (loop3): Unmounting Filesystem [ 70.171875][ T4295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4295) [ 70.298036][ T4295] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 70.371725][ T4295] BTRFS info (device loop0): enabling disk space caching [ 70.427127][ T26] audit: type=1800 audit(1745833942.854:4): pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 70.515570][ T4295] BTRFS info (device loop0): doing ref verification [ 70.522353][ T4295] BTRFS info (device loop0): use zlib compression, level 3 [ 70.559778][ T26] audit: type=1800 audit(1745833942.884:5): pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 70.617695][ T4295] BTRFS info (device loop0): force clearing of disk cache [ 70.625004][ T4295] BTRFS info (device loop0): setting nodatacow, compression disabled [ 70.633117][ T4295] BTRFS info (device loop0): doing ref verification [ 70.644264][ T4295] BTRFS info (device loop0): disk space caching is enabled [ 70.660401][ T4295] BTRFS info (device loop0): has skinny extents [ 70.704569][ T4226] tipc: Node number set to 1 [ 72.435618][ T4322] sched: RT throttling activated [ 72.440921][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.452985][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.869751][ T4295] BTRFS error (device loop0): open_ctree failed: -12 [ 72.899794][ T4348] loop1: detected capacity change from 0 to 764 [ 73.044355][ T4348] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.806936][ T4350] loop4: detected capacity change from 0 to 40427 [ 75.834995][ T4313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.104650][ T4313] usb 4-1: Using ep0 maxpacket: 16 [ 76.247332][ T4313] usb 4-1: config 4 has an invalid interface number: 98 but max is 0 [ 76.467378][ T4364] tipc: Started in network mode [ 76.472310][ T4364] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 76.473253][ T4313] usb 4-1: config 4 has no interface number 0 [ 76.489521][ T4313] usb 4-1: config 4 interface 98 has no altsetting 0 [ 76.503660][ T4364] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 76.523276][ T4364] tipc: Enabled bearer , priority 10 [ 76.551020][ T4367] loop0: detected capacity change from 0 to 512 [ 76.996833][ T4375] loop1: detected capacity change from 0 to 512 [ 77.224469][ T4374] tipc: Started in network mode [ 77.229404][ T4374] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 77.239768][ T4313] usb 4-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17 [ 77.264177][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.290552][ T4313] usb 4-1: Product: syz [ 77.302363][ T4313] usb 4-1: Manufacturer: syz [ 77.307458][ T4313] usb 4-1: SerialNumber: syz [ 77.315260][ T4374] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.334965][ T4377] loop2: detected capacity change from 0 to 164 [ 77.343720][ T4374] tipc: Enabled bearer , priority 10 [ 77.398161][ T4313] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 77.457295][ T4377] Unable to read rock-ridge attributes [ 77.489120][ T4377] Unable to read rock-ridge attributes [ 77.511261][ T4381] loop1: detected capacity change from 0 to 128 [ 77.517867][ T4226] tipc: Node number set to 1 [ 77.590693][ T4377] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 77.645351][ T4359] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.706725][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.570989][ T4359] netlink: 35 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.584244][ T4313] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 78.608316][ T4222] tipc: Node number set to 1 [ 78.624460][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 78.632507][ T4313] gspca_pac7302: probe of 4-1:4.98 failed with error -110 [ 78.656073][ T4359] netlink: 'syz.3.10': attribute type 3 has an invalid length. [ 78.674398][ T4359] netlink: 'syz.3.10': attribute type 2 has an invalid length. [ 79.184772][ T4359] loop3: detected capacity change from 0 to 256 [ 79.491779][ T4359] FAT-fs (loop3): Directory bread(block 64) failed [ 79.574266][ T4359] FAT-fs (loop3): Directory bread(block 65) failed [ 79.682816][ T4359] FAT-fs (loop3): Directory bread(block 66) failed [ 79.764215][ T4359] FAT-fs (loop3): Directory bread(block 67) failed [ 79.770875][ T4359] FAT-fs (loop3): Directory bread(block 68) failed [ 79.840718][ T4377] Unable to read rock-ridge attributes [ 79.915786][ T4359] FAT-fs (loop3): Directory bread(block 69) failed [ 79.943308][ T4377] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 80.004013][ T4359] FAT-fs (loop3): Directory bread(block 70) failed [ 80.074407][ T4359] FAT-fs (loop3): Directory bread(block 71) failed [ 80.100486][ T4359] FAT-fs (loop3): Directory bread(block 72) failed [ 80.138050][ T4359] FAT-fs (loop3): Directory bread(block 73) failed [ 80.143282][ T4398] loop0: detected capacity change from 0 to 131072 [ 81.049617][ T4398] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 81.058598][ T4398] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.080778][ T4398] F2FS-fs (loop0): invalid crc value [ 81.095849][ T4226] usb 4-1: USB disconnect, device number 2 [ 81.162201][ T4398] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.341285][ T4398] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.349393][ T4398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 81.496341][ T4411] loop3: detected capacity change from 0 to 764 [ 81.940173][ T4411] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.080602][ T4406] loop4: detected capacity change from 0 to 131072 [ 82.097385][ T1111] cfg80211: failed to load regulatory.db [ 82.128365][ T4406] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 82.136585][ T4406] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 82.147362][ T4406] F2FS-fs (loop4): invalid crc value [ 82.255019][ T26] audit: type=1800 audit(1745833954.654:6): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 82.325597][ T4406] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.374245][ T4406] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 82.381453][ T4406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 83.274710][ T26] audit: type=1800 audit(1745833954.654:7): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 83.624232][ T26] audit: type=1800 audit(1745833954.844:8): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 83.695931][ T26] audit: type=1800 audit(1745833954.854:9): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 83.814320][ T4435] netlink: 'syz.1.35': attribute type 3 has an invalid length. [ 83.848750][ T4438] loop3: detected capacity change from 0 to 256 [ 83.876950][ T4436] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 83.981127][ T4438] FAT-fs (loop3): Directory bread(block 64) failed [ 84.010766][ T4438] FAT-fs (loop3): Directory bread(block 65) failed [ 84.060494][ T4438] FAT-fs (loop3): Directory bread(block 66) failed [ 84.104738][ T4438] FAT-fs (loop3): Directory bread(block 67) failed [ 84.132883][ T4438] FAT-fs (loop3): Directory bread(block 68) failed [ 84.148873][ T4436] loop2: detected capacity change from 0 to 4096 [ 84.177750][ T4438] FAT-fs (loop3): Directory bread(block 69) failed [ 84.265870][ T4438] FAT-fs (loop3): Directory bread(block 70) failed [ 84.274497][ T4438] FAT-fs (loop3): Directory bread(block 71) failed [ 84.281137][ T4438] FAT-fs (loop3): Directory bread(block 72) failed [ 84.504620][ T4438] FAT-fs (loop3): Directory bread(block 73) failed [ 86.654646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.663704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.672669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 86.681682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 86.690607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 86.699749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 86.708754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.717856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.726847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.735939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.092526][ T4454] loop2: detected capacity change from 0 to 131072 [ 87.185296][ T4454] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 87.193427][ T4454] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.209121][ T4454] F2FS-fs (loop2): invalid crc value [ 87.280860][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 87.318213][ T4454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.366950][ T4454] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.366981][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 87.374121][ T4454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.407311][ T26] audit: type=1800 audit(1745833959.834:10): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 87.479984][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 87.493137][ T26] audit: type=1800 audit(1745833959.894:11): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 87.600015][ T4467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.786442][ T4474] tipc: Enabling of bearer rejected, already enabled [ 87.855912][ T4471] loop0: detected capacity change from 0 to 512 [ 87.860268][ T4456] loop3: detected capacity change from 0 to 40427 [ 88.250714][ T4483] loop0: detected capacity change from 0 to 4096 [ 88.391709][ T4489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.54'. [ 88.421852][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.487731][ T4491] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 88.523873][ T4491] netlink: 'syz.0.55': attribute type 2 has an invalid length. [ 88.716975][ T4499] netlink: 'syz.0.58': attribute type 21 has an invalid length. [ 88.728044][ T4499] netlink: 156 bytes leftover after parsing attributes in process `syz.0.58'. [ 89.694049][ T4500] loop3: detected capacity change from 0 to 131072 [ 89.718112][ T4503] loop4: detected capacity change from 0 to 131072 [ 89.749564][ T4500] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 89.758543][ T4500] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.781085][ T4503] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 89.782329][ T4500] F2FS-fs (loop3): invalid crc value [ 89.789253][ T4503] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 89.791698][ T4503] F2FS-fs (loop4): invalid crc value [ 89.873099][ T4500] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.925439][ T4500] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.932679][ T4500] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 89.978767][ T4503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.031390][ T4503] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.038674][ T4503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 90.046946][ T26] audit: type=1800 audit(1745833962.454:12): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 90.077164][ T26] audit: type=1800 audit(1745833962.454:13): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 90.144168][ T4517] tipc: Enabling of bearer rejected, already enabled [ 90.222213][ T4514] loop0: detected capacity change from 0 to 512 [ 90.577044][ T4521] loop0: detected capacity change from 0 to 64 [ 90.616926][ T4494] loop2: detected capacity change from 0 to 32768 [ 90.700986][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 90.770349][ T4494] XFS (loop2): Mounting V5 Filesystem [ 90.844641][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 90.879776][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 90.904471][ T4535] netlink: 'syz.1.68': attribute type 3 has an invalid length. [ 90.967042][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 90.988430][ T4494] XFS (loop2): Ending clean mount [ 91.010848][ T4494] XFS (loop2): Quotacheck needed: Please wait. [ 91.026885][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.095965][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 91.157849][ T4494] XFS (loop2): Quotacheck: Done. [ 91.172044][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.202950][ T4494] XFS (loop2): User initiated shutdown received. [ 91.215739][ T4521] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 91.220134][ T4494] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 91.234426][ T4521] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 91.344475][ T4494] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 91.383578][ T4544] loop3: detected capacity change from 0 to 512 [ 91.482220][ T4548] loop0: detected capacity change from 0 to 512 [ 91.513705][ T4175] XFS (loop2): Unmounting Filesystem [ 91.514420][ T4544] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.553223][ T4544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.733215][ T4544] EXT4-fs (loop3): 1 truncate cleaned up [ 91.759207][ T4548] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noquota,,errors=continue. Quota mode: writeback. [ 91.771924][ T4544] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,grpquota,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 91.805353][ T4548] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.946905][ T4548] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:338: inode #15: comm syz.0.71: verity file corrupted; can't find descriptor [ 92.049142][ T4548] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 92.469186][ T4568] tipc: Enabling of bearer rejected, already enabled [ 92.542494][ T4568] loop1: detected capacity change from 0 to 512 [ 92.676241][ T4561] loop4: detected capacity change from 0 to 131072 [ 92.695038][ T4573] loop2: detected capacity change from 0 to 512 [ 92.717699][ T4561] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 92.726429][ T4561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.738761][ T4561] F2FS-fs (loop4): invalid crc value [ 92.831671][ T4561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.906942][ T4561] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.914036][ T4561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 92.936427][ T26] audit: type=1800 audit(1745833965.364:14): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.74" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 92.982966][ T4573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.015337][ T26] audit: type=1800 audit(1745833965.384:15): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.74" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 93.022176][ T4573] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.048920][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 93.064361][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 93.096008][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 93.104370][ T4590] loop0: detected capacity change from 0 to 512 [ 93.255050][ T4590] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 93.321585][ T4590] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.340370][ T4595] netlink: 216 bytes leftover after parsing attributes in process `syz.1.82'. [ 93.350293][ T4595] netlink: 'syz.1.82': attribute type 9 has an invalid length. [ 93.358154][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 93.570757][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 93.600888][ T4603] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 93.621007][ T4603] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 93.759946][ T4221] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.774897][ T4609] input: syz0 as /devices/virtual/input/input5 [ 93.997052][ T4613] loop3: detected capacity change from 0 to 128 [ 94.020507][ T4614] loop2: detected capacity change from 0 to 47 [ 94.093936][ T4615] loop1: detected capacity change from 0 to 16 [ 94.197542][ T4615] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.691675][ T4614] capability: warning: `syz.2.88' uses deprecated v2 capabilities in a way that may be insecure [ 94.814701][ T4221] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.856777][ T4221] usb 1-1: not running at top speed; connect to a high speed hub [ 94.954722][ T4221] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 94.962907][ T4221] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 94.989369][ T4619] Zero length message leads to an empty skb [ 95.003409][ T4221] usb 1-1: config 17 has no interface number 0 [ 95.014253][ T4221] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.079294][ T4622] netlink: 'syz.2.91': attribute type 3 has an invalid length. [ 95.097364][ T4221] usb 1-1: config 17 interface 8 has no altsetting 0 [ 95.294757][ T4221] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 95.310713][ T4221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.321901][ T4634] loop1: detected capacity change from 0 to 64 [ 95.365379][ T4221] usb 1-1: Product: syz [ 95.369591][ T4221] usb 1-1: Manufacturer: syz [ 95.391010][ T4221] usb 1-1: SerialNumber: syz [ 95.490693][ T4634] minix_free_block (loop1:21): bit already cleared [ 95.520966][ T4646] loop4: detected capacity change from 0 to 256 [ 95.616127][ T4646] FAT-fs (loop4): Directory bread(block 64) failed [ 95.640054][ T4646] FAT-fs (loop4): Directory bread(block 65) failed [ 95.649197][ T4644] loop3: detected capacity change from 0 to 4096 [ 95.655848][ T4646] FAT-fs (loop4): Directory bread(block 66) failed [ 95.662743][ T4646] FAT-fs (loop4): Directory bread(block 67) failed [ 95.670002][ T4646] FAT-fs (loop4): Directory bread(block 68) failed [ 95.678463][ T4646] FAT-fs (loop4): Directory bread(block 69) failed [ 95.690570][ T4646] FAT-fs (loop4): Directory bread(block 70) failed [ 95.700349][ T4646] FAT-fs (loop4): Directory bread(block 71) failed [ 95.718555][ T4646] FAT-fs (loop4): Directory bread(block 72) failed [ 95.726719][ T4646] FAT-fs (loop4): Directory bread(block 73) failed [ 95.759808][ T4221] usb 1-1: selecting invalid altsetting 0 [ 95.870984][ T4221] usb 1-1: USB disconnect, device number 2 [ 95.889425][ T4646] attempt to access beyond end of device [ 95.889425][ T4646] loop4: rw=524288, want=1164, limit=256 [ 95.942448][ T4646] attempt to access beyond end of device [ 95.942448][ T4646] loop4: rw=0, want=1164, limit=256 [ 95.992894][ T26] audit: type=1800 audit(1745833968.414:16): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.101" name="file0" dev="loop4" ino=1048591 res=0 errno=0 [ 96.038741][ T4646] attempt to access beyond end of device [ 96.038741][ T4646] loop4: rw=0, want=1164, limit=256 [ 96.075863][ T4646] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.082976][ T4646] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.129533][ T26] audit: type=1800 audit(1745833968.554:17): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file2" dev="loop4" ino=1048592 res=0 errno=0 [ 96.165390][ T4646] syz.4.101 (4646) used greatest stack depth: 20624 bytes left [ 96.277393][ T4191] udevd[4191]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.303970][ T4658] loop3: detected capacity change from 0 to 256 [ 96.342025][ T4657] tipc: Enabling of bearer rejected, already enabled [ 96.388160][ T4657] loop1: detected capacity change from 0 to 512 [ 96.397249][ T4662] netlink: 216 bytes leftover after parsing attributes in process `syz.0.107'. [ 96.418285][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.107'. [ 96.432172][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 96.516296][ T4658] FAT-fs (loop3): Directory bread(block 64) failed [ 96.522894][ T4658] FAT-fs (loop3): Directory bread(block 65) failed [ 96.535146][ T4658] FAT-fs (loop3): Directory bread(block 66) failed [ 96.542657][ T4658] FAT-fs (loop3): Directory bread(block 67) failed [ 96.573079][ T4658] FAT-fs (loop3): Directory bread(block 68) failed [ 96.596384][ T4658] FAT-fs (loop3): Directory bread(block 69) failed [ 96.603035][ T4658] FAT-fs (loop3): Directory bread(block 70) failed [ 96.641121][ T4658] FAT-fs (loop3): Directory bread(block 71) failed [ 96.649184][ T4658] FAT-fs (loop3): Directory bread(block 72) failed [ 96.657185][ T4658] FAT-fs (loop3): Directory bread(block 73) failed [ 96.688837][ T4672] device bond2 entered promiscuous mode [ 96.695406][ T4658] FAULT_INJECTION: forcing a failure. [ 96.695406][ T4658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.754579][ T4658] CPU: 0 PID: 4658 Comm: syz.3.106 Not tainted 5.15.180-syzkaller #0 [ 96.762699][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.772823][ T4658] Call Trace: [ 96.776164][ T4658] [ 96.779106][ T4658] dump_stack_lvl+0x168/0x230 [ 96.783815][ T4658] ? show_regs_print_info+0x20/0x20 [ 96.788342][ T4221] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.789032][ T4658] ? load_image+0x3b0/0x3b0 [ 96.789064][ T4658] ? __lock_acquire+0x7c60/0x7c60 [ 96.797743][ T4679] loop1: detected capacity change from 0 to 1024 [ 96.801036][ T4658] should_fail+0x38c/0x4c0 [ 96.801073][ T4658] strncpy_from_user+0x32/0x360 [ 96.821665][ T4658] getname_flags+0xef/0x500 [ 96.826201][ T4658] do_sys_openat2+0xcf/0x4a0 [ 96.830817][ T4658] ? __lock_acquire+0x7c60/0x7c60 [ 96.835882][ T4658] ? do_sys_open+0xe0/0xe0 [ 96.840324][ T4658] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.846411][ T4658] ? lock_chain_count+0x20/0x20 [ 96.851284][ T4658] ? vtime_user_exit+0x2dc/0x400 [ 96.856244][ T4658] __x64_sys_openat+0x135/0x160 [ 96.861123][ T4658] do_syscall_64+0x4c/0xa0 [ 96.865595][ T4658] ? clear_bhb_loop+0x15/0x70 [ 96.870288][ T4658] ? clear_bhb_loop+0x15/0x70 [ 96.873873][ T4221] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.874983][ T4658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.875027][ T4658] RIP: 0033:0x7f31016e3969 [ 96.894859][ T4658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.914489][ T4658] RSP: 002b:00007f30ff54b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.922937][ T4658] RAX: ffffffffffffffda RBX: 00007f310190afa0 RCX: 00007f31016e3969 [ 96.930942][ T4658] RDX: 0000000000187842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 96.939075][ T4658] RBP: 00007f30ff54b090 R08: 0000000000000000 R09: 0000000000000000 [ 96.947072][ T4658] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 96.955046][ T4658] R13: 0000000000000000 R14: 00007f310190afa0 R15: 00007fff15271668 [ 96.963037][ T4658] [ 97.023220][ T4679] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext2 [ 97.088429][ T4684] loop0: detected capacity change from 0 to 4096 [ 97.209101][ T4688] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 97.216065][ T4688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.267405][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 97.283640][ T4699] loop3: detected capacity change from 0 to 128 [ 97.297689][ T4688] vhci_hcd vhci_hcd.0: Device attached [ 97.403768][ T4708] tipc: Enabling of bearer rejected, already enabled [ 97.427029][ T4708] loop1: detected capacity change from 0 to 512 [ 97.495169][ T4312] vhci_hcd: vhci_device speed not set [ 97.511290][ T4717] capability: warning: `syz.3.126' uses 32-bit capabilities (legacy support in use) [ 97.533602][ T4717] program syz.3.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.564355][ T4312] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 97.636967][ T4717] loop3: detected capacity change from 0 to 2048 [ 97.661912][ T4719] netlink: 'syz.1.127': attribute type 3 has an invalid length. [ 97.872061][ T4694] vhci_hcd: connection reset by peer [ 97.899047][ T155] vhci_hcd: stop threads [ 97.904075][ T155] vhci_hcd: release socket [ 97.946382][ T155] vhci_hcd: disconnect device [ 98.119389][ T4727] loop3: detected capacity change from 0 to 4096 [ 98.179385][ T4736] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.515839][ T4734] loop0: detected capacity change from 0 to 8192 [ 98.586360][ T4744] tipc: Started in network mode [ 98.592304][ T4744] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 98.599243][ T4734] loop0: p1 < > p3[EZD] p4 [ 98.629535][ T4744] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 98.636565][ T4734] loop0: p3 start 3238002688 is beyond EOD, truncated [ 98.657316][ T4744] tipc: Enabled bearer , priority 10 [ 98.671531][ T4734] loop0: p4 start 65535 is beyond EOD, truncated [ 98.694946][ T4748] loop3: detected capacity change from 0 to 512 [ 98.707344][ T4721] loop2: detected capacity change from 0 to 32768 [ 98.860733][ T4723] loop1: detected capacity change from 0 to 32768 [ 98.875923][ T4721] XFS (loop2): Mounting V5 Filesystem [ 98.888782][ T4759] netlink: 216 bytes leftover after parsing attributes in process `syz.3.140'. [ 98.907569][ T4759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.140'. [ 98.930598][ T4759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.140'. [ 99.065732][ T4721] XFS (loop2): Ending clean mount [ 99.137149][ T4723] JBD2: Ignoring recovery information on journal [ 99.203622][ T4770] loop3: detected capacity change from 0 to 512 [ 99.214781][ T4222] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.245188][ T4723] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.260250][ T4770] EXT4-fs (loop3): Unrecognized mount option """ or missing value [ 99.302311][ T4175] XFS (loop2): Unmounting Filesystem [ 99.436089][ T4222] usb 5-1: device descriptor read/64, error -71 [ 99.501006][ T4176] ocfs2: Unmounting device (7,1) on (node local) [ 100.286349][ T4317] tipc: Node number set to 1 [ 100.424342][ T4222] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.535410][ T4794] loop1: detected capacity change from 0 to 128 [ 100.597207][ T4226] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 100.622793][ T4796] tipc: Enabling of bearer rejected, already enabled [ 100.640311][ T4796] loop3: detected capacity change from 0 to 512 [ 100.646915][ T4222] usb 5-1: device descriptor read/64, error -71 [ 100.723039][ T4802] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 100.774457][ T4222] usb usb5-port1: attempt power cycle [ 100.932545][ T26] audit: type=1326 audit(1745833973.354:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.1.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93bd76c969 code=0x0 [ 100.966325][ T4817] loop3: detected capacity change from 0 to 512 [ 100.994481][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.012197][ T4226] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 101.022787][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.040662][ T4817] EXT4-fs (loop3): Unrecognized mount option """ or missing value [ 101.063002][ T4226] usb 1-1: config 0 descriptor?? [ 101.084569][ T4785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.305887][ T4222] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.414727][ T4222] usb 5-1: device descriptor read/8, error -71 [ 101.675742][ T4785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.147'. [ 101.744441][ T4222] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.964359][ T4222] usb 5-1: device descriptor read/8, error -71 [ 102.013971][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 102.055290][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 102.064105][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 102.078617][ T4831] loop8: detected capacity change from 0 to 8 [ 102.092146][ T4226] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review [ 102.105524][ T4222] usb usb5-port1: unable to enumerate USB device [ 102.113797][ T4831] Dev loop8: unable to read RDB block 8 [ 102.137967][ T4226] bigben 0003:146B:0902.0002: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 102.160196][ T4831] loop8: unable to read partition table [ 102.180426][ T4226] bigben 0003:146B:0902.0002: not enough fields in HID_OUTPUT_REPORT 0 [ 102.190038][ T4831] loop8: partition table beyond EOD, truncated [ 102.196566][ T4226] bigben 0003:146B:0902.0002: no output report found [ 102.203818][ T4831] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 102.227731][ T4819] loop2: detected capacity change from 0 to 32768 [ 102.240758][ T4833] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 102.271461][ T4833] netlink: 'syz.3.164': attribute type 2 has an invalid length. [ 102.289199][ T4819] xfs: Unknown parameter 'fscontext' [ 102.301451][ T4785] udc-core: couldn't find an available UDC or it's busy [ 102.323266][ T4785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.397974][ T4318] usb 1-1: USB disconnect, device number 3 [ 102.553780][ T4842] netlink: 216 bytes leftover after parsing attributes in process `syz.3.168'. [ 102.591319][ T4842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.168'. [ 102.608294][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 102.734376][ T4312] vhci_hcd: vhci_device speed not set [ 102.824261][ T4844] loop4: detected capacity change from 0 to 512 [ 102.873084][ T4848] loop3: detected capacity change from 0 to 512 [ 103.240740][ T4836] loop1: detected capacity change from 0 to 32768 [ 103.364245][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 103.452903][ T4848] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.493612][ T4836] [ 103.493612][ T4836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.493612][ T4836] [ 103.713667][ T4835] read_mapping_page failed! [ 103.736929][ T4835] ERROR: (device loop1): txCommit: [ 103.736929][ T4835] [ 103.791782][ T4862] loop4: detected capacity change from 0 to 512 [ 103.847987][ T4836] read_mapping_page failed! [ 103.852864][ T4836] ERROR: (device loop1): txCommit: [ 103.852864][ T4836] [ 103.922458][ T4860] loop2: detected capacity change from 0 to 4096 [ 103.944370][ T4226] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.964185][ T4862] EXT4-fs (loop4): Unrecognized mount option """ or missing value [ 104.474631][ T4226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.524659][ T4226] usb 3-1: not running at top speed; connect to a high speed hub [ 104.715097][ T4226] usb 3-1: config 9 has an invalid interface number: 196 but max is 2 [ 104.723570][ T4226] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 104.732329][ T4226] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 104.752750][ T4226] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 104.901645][ T4856] loop0: detected capacity change from 0 to 32768 [ 104.909084][ T4869] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 104.924207][ T4226] usb 3-1: config 9 has no interface number 0 [ 104.932393][ T4226] usb 3-1: config 9 interface 196 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 104.987509][ T4860] loop2: detected capacity change from 0 to 4096 [ 105.004915][ T4226] usb 3-1: config 9 interface 196 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 105.042321][ T4856] (syz.0.172,4856,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 105.050520][ T4226] usb 3-1: config 9 interface 196 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 105.061389][ T4226] usb 3-1: config 9 interface 196 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 105.072306][ T4226] usb 3-1: config 9 interface 196 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 105.089457][ T4226] usb 3-1: config 9 interface 196 has no altsetting 0 [ 105.109294][ T4835] jfs_create: dtSearch returned -17 [ 105.116617][ T4856] (syz.0.172,4856,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 18 [ 105.128041][ T4856] (syz.0.172,4856,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 105.139303][ T4856] (syz.0.172,4856,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 105.139341][ T4856] (syz.0.172,4856,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 105.164445][ T4856] (syz.0.172,4856,0):ocfs2_initialize_super:2278 ERROR: status = -22 [ 105.180999][ T4856] (syz.0.172,4856,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 105.312070][ T4860] loop2: detected capacity change from 0 to 4096 [ 105.414549][ T4226] usb 3-1: Dual-Role OTG device on HNP port [ 105.434381][ T4226] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=5f.7a [ 106.185972][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.214261][ T4226] usb 3-1: Product: syz [ 106.218472][ T4226] usb 3-1: Manufacturer: syz [ 106.223080][ T4226] usb 3-1: SerialNumber: syz [ 106.258312][ T4176] [ 106.258312][ T4176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.258312][ T4176] [ 106.291583][ T4176] [ 106.291583][ T4176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.291583][ T4176] [ 106.364585][ T4881] loop4: detected capacity change from 0 to 512 [ 106.391635][ T4860] loop2: detected capacity change from 0 to 4096 [ 106.495422][ T4884] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 106.524006][ T4881] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.178: bg 0: block 127: padding at end of block bitmap is not set [ 106.547857][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 106.557749][ T4881] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 106.584864][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 106.591511][ T4881] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.178: invalid indirect mapped block 1 (level 1) [ 106.633145][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 106.633594][ T4860] loop2: detected capacity change from 0 to 4096 [ 106.654894][ T4881] EXT4-fs (loop4): 1 truncate cleaned up [ 106.664874][ T4884] loop3: detected capacity change from 0 to 2048 [ 106.671491][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,sysvgroups,. Quota mode: none. [ 106.712521][ T4884] NILFS (loop3): unrecognized mount option "000000000000000000050x0000000000000005u:7S7X%9 o2.6'C0x[̜yη|4GʆP?~|( 4" [ 106.712521][ T4884] DaH>n 4UK<hM{u<ϻYPp]C<唧WK(f" [ 106.766074][ T4888] tipc: Enabling of bearer rejected, already enabled [ 106.766581][ T4226] pcwd_usb: The device isn't a Human Interface Device [ 106.782270][ T4888] loop0: detected capacity change from 0 to 512 [ 106.806873][ T4226] usb 3-1: USB disconnect, device number 2 [ 107.031945][ T4900] loop0: detected capacity change from 0 to 512 [ 107.034417][ T1111] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 107.063881][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 107.084525][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 107.102073][ T4900] EXT4-fs (loop0): Unrecognized mount option """ or missing value [ 107.127793][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 107.303832][ T4909] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 107.360843][ T4909] netlink: 'syz.3.190': attribute type 2 has an invalid length. [ 107.662120][ T4911] loop8: detected capacity change from 0 to 8 [ 107.864173][ T4911] Dev loop8: unable to read RDB block 8 [ 108.097021][ T4911] loop8: unable to read partition table [ 108.140590][ T4911] loop8: partition table beyond EOD, truncated [ 108.171504][ T4911] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 108.508312][ T4927] tipc: Enabling of bearer rejected, already enabled [ 108.534560][ T1111] usb 5-1: config 1 has an invalid interface number: 228 but max is 2 [ 108.548722][ T4930] netlink: 216 bytes leftover after parsing attributes in process `syz.2.198'. [ 108.550495][ T4927] loop1: detected capacity change from 0 to 512 [ 108.567294][ T4931] loop0: detected capacity change from 0 to 512 [ 108.573783][ T1111] usb 5-1: config 1 has an invalid interface number: 176 but max is 2 [ 108.582408][ T1111] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 108.592387][ T4930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 108.594582][ T1111] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.631217][ T1111] usb 5-1: config 1 has no interface number 0 [ 108.659503][ T1111] usb 5-1: config 1 has no interface number 1 [ 108.682989][ T1111] usb 5-1: config 1 interface 176 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 108.723348][ T1111] usb 5-1: config 1 interface 176 has no altsetting 0 [ 108.914451][ T1111] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9309, bcdDevice=13.04 [ 108.923548][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.970387][ T1111] usb 5-1: Product: 騍礛瑹⡁輯렼鬥佢쬀糅飙뒗ꕿ덃⊩讅辵Ώᄰ솏扒즦豥榜偶늝轳寏︬㉈籍䨚⷟䘉⮝眅戂鞪浗筽譽珕儇㗪滞넬ᖔᐃ⡚崩⭦쑿趰荞౧Śᵜ輸啲⃺袃 [ 109.033184][ T1111] usb 5-1: Manufacturer: Я [ 109.045323][ T1111] usb 5-1: SerialNumber: ೫鉒迀ﰔ甒鿍⎵伸憻ڔ㼠ﳲ瑞竔씟킦꿌౽쨄酀欃ꠈǣ汒◿舸뾍긲哒ꝕ⇱渨ၒẃ뇊ݮ뎣睛뉖ᦞ⚨䪲ꌰ㓐﫠岙쭐碅孜宝挔;뢆ີ껩㇒㬽㊐鸜깈姏ꛪⸯ攰溮ꂫ⺶጖蘋柱풎腁긣늉횧ꮠ䍐 [ 109.157913][ T4946] loop1: detected capacity change from 0 to 512 [ 109.447346][ T4946] EXT4-fs (loop1): Unrecognized mount option """ or missing value [ 109.877585][ T1111] ftdi_sio 5-1:1.228: FTDI USB Serial Device converter detected [ 109.908292][ T1111] usb 5-1: Detected FT2232C [ 109.927938][ T1111] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 109.958541][ T4931] loop0: detected capacity change from 0 to 32768 [ 109.991404][ T1111] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 110.002429][ T1111] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.005459][ T4931] (syz.0.197,4931,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value [ 110.034405][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.053732][ T4931] (syz.0.197,4931,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 110.266151][ T1111] ftdi_sio 5-1:1.176: FTDI USB Serial Device converter detected [ 110.298608][ T1111] usb 5-1: Detected FT2232C [ 110.544461][ T1111] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 110.602438][ T1111] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 110.646513][ T1111] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 110.731573][ T1111] usb 5-1: USB disconnect, device number 6 [ 110.800874][ T1111] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.818062][ T4959] loop2: detected capacity change from 0 to 4096 [ 110.867252][ T1111] ftdi_sio 5-1:1.228: device disconnected [ 110.909542][ T4959] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (512) is smaller than the sector size (2048). This is not supported. Sorry. [ 110.946547][ T1111] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 110.946768][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 110.967636][ T4959] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 110.984662][ T1111] ftdi_sio 5-1:1.176: device disconnected [ 110.991229][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 111.015545][ T4318] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 111.030121][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 111.045628][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.075178][ T4318] usb 4-1: config 0 descriptor?? [ 111.156776][ T4968] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 111.183142][ T4966] loop0: detected capacity change from 0 to 2048 [ 111.201408][ T4964] loop2: detected capacity change from 0 to 4096 [ 111.226103][ T4970] tipc: Enabling of bearer rejected, already enabled [ 111.238818][ T4970] loop1: detected capacity change from 0 to 512 [ 111.252386][ T4964] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (512) is smaller than the sector size (2048). This is not supported. Sorry. [ 111.268443][ T4964] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 111.325917][ T4971] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.354517][ T1111] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.370783][ T4318] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 111.680540][ T4938] loop3: detected capacity change from 0 to 4096 [ 111.687033][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 112.459908][ T4978] loop2: detected capacity change from 0 to 256 [ 112.484487][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.497931][ T4976] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.505748][ T4978] exfat: Unknown parameter '0x00000000ffffffff' [ 112.512504][ T4976] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.522698][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.544077][ T4982] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 112.554524][ T1111] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 112.563591][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.583769][ T4982] netlink: 'syz.1.217': attribute type 2 has an invalid length. [ 112.607688][ T1111] usb 5-1: config 0 descriptor?? [ 112.629876][ T4938] fscrypt: Error allocating hmac(sha512): -2 [ 112.644468][ T4938] EXT4-fs (loop3): Error processing option "test_dummy_encryption" [-2] [ 112.824553][ T4318] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.837706][ T4318] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 112.853561][ T4318] asix: probe of 4-1:0.0 failed with error -71 [ 112.882923][ T4318] usb 4-1: USB disconnect, device number 3 [ 112.973337][ T4993] loop1: detected capacity change from 0 to 512 [ 113.054441][ T4993] EXT4-fs (loop1): Unrecognized mount option """ or missing value [ 113.304591][ T1111] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 114.025512][ T1111] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 114.098768][ T4999] netlink: 216 bytes leftover after parsing attributes in process `syz.1.223'. [ 114.117466][ T4217] usb 5-1: USB disconnect, device number 7 [ 114.137851][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 114.379341][ T5007] tipc: Enabling of bearer rejected, already enabled [ 114.413659][ T5007] loop1: detected capacity change from 0 to 512 [ 114.420465][ T4312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.501159][ T4995] loop3: detected capacity change from 0 to 32768 [ 114.689829][ T4995] XFS (loop3): Mounting V5 Filesystem [ 114.702337][ T5030] loop0: detected capacity change from 0 to 512 [ 114.717788][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.735090][ T5033] netlink: 'syz.1.235': attribute type 3 has an invalid length. [ 114.765165][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.774265][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.790373][ T4995] XFS (loop3): Ending clean mount [ 114.800628][ T4995] XFS (loop3): Quotacheck needed: Please wait. [ 114.839217][ T5030] EXT4-fs (loop0): Unrecognized mount option """ or missing value [ 114.896012][ T4995] XFS (loop3): Quotacheck: Done. [ 114.954412][ T4312] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 115.059757][ T5045] Context (ID=0x0) not attached to queue pair (handle=0x0:0xfffffff9) [ 115.137804][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.148292][ T4312] usb 3-1: config 0 descriptor?? [ 115.212421][ T4995] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 115.810558][ T4173] XFS (loop3): Unmounting Filesystem [ 115.905197][ T5058] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 115.944283][ T5058] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 115.968475][ T4226] usb 3-1: USB disconnect, device number 3 [ 115.974215][ T4317] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 116.176516][ T5069] loop0: detected capacity change from 0 to 1024 [ 116.204947][ T5071] loop8: detected capacity change from 0 to 8 [ 116.231583][ T5071] Dev loop8: unable to read RDB block 8 [ 116.248258][ T5071] loop8: unable to read partition table [ 116.255680][ T5071] loop8: partition table beyond EOD, truncated [ 116.262583][ T5071] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 116.353578][ T5069] process 'syz.0.247' launched './file1' with NULL argv: empty string added [ 116.416885][ T5073] tipc: Enabling of bearer rejected, already enabled [ 116.429174][ T26] audit: type=1326 audit(1745833988.854:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.1.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93bd76c969 code=0x7ffe0000 [ 116.451493][ T5073] loop3: detected capacity change from 0 to 512 [ 116.454519][ T4317] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 116.477073][ T4317] usb 5-1: config 0 has no interface number 0 [ 116.640537][ T5081] netlink: 216 bytes leftover after parsing attributes in process `syz.3.251'. [ 116.667922][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 116.704429][ T4317] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 116.723747][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.733878][ T4317] usb 5-1: Product: syz [ 116.761577][ T4317] usb 5-1: Manufacturer: syz [ 116.781226][ T4317] usb 5-1: SerialNumber: syz [ 116.803971][ T4317] usb 5-1: config 0 descriptor?? [ 116.856080][ T4317] yurex 5-1:0.50: Could not find endpoints [ 116.856449][ T4217] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.061111][ T4222] usb 5-1: USB disconnect, device number 8 [ 117.100640][ T4217] usb 3-1: device descriptor read/64, error -71 [ 117.325081][ T5069] mkiss: ax0: crc mode is auto. [ 117.384251][ T4217] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.574259][ T4217] usb 3-1: device descriptor read/64, error -71 [ 117.699133][ T5086] loop4: detected capacity change from 0 to 512 [ 117.709122][ T4217] usb usb3-port1: attempt power cycle [ 117.773338][ T5086] EXT4-fs (loop4): Unrecognized mount option """ or missing value [ 118.284310][ T4217] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.415519][ T4217] usb 3-1: device descriptor read/8, error -71 [ 118.619459][ T5083] loop3: detected capacity change from 0 to 40427 [ 118.754442][ T4217] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.772405][ T5083] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(1) blocks(1024) [ 118.820088][ T5083] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 118.874528][ T4217] usb 3-1: device descriptor read/8, error -71 [ 118.882371][ T5083] F2FS-fs (loop3): invalid crc value [ 118.909496][ T5083] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.998352][ T4217] usb usb3-port1: unable to enumerate USB device [ 119.006789][ T5083] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 119.013982][ T5083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.059087][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 119.143526][ T5096] loop4: detected capacity change from 0 to 512 [ 119.272774][ T5096] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 119.346438][ T5096] EXT4-fs (loop4): 1 truncate cleaned up [ 119.353175][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: none. [ 119.708992][ T5110] loop2: detected capacity change from 0 to 512 [ 119.722973][ T5112] loop0: detected capacity change from 0 to 512 [ 119.789798][ T5110] EXT4-fs (loop2): Unrecognized mount option """ or missing value [ 119.933581][ T5113] loop4: detected capacity change from 0 to 4096 [ 119.978517][ T5112] EXT4-fs (loop0): Ignoring removed orlov option [ 120.032139][ T5112] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.055059][ T5112] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 120.078658][ T5113] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 120.094769][ T5112] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.264: Corrupt directory, running e2fsck is recommended [ 120.747377][ T5112] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 120.794515][ T5112] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.264: corrupted in-inode xattr [ 120.814758][ T5112] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.264: couldn't read orphan inode 15 (err -117) [ 120.844639][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000010000,,,errors=continue. Quota mode: writeback. [ 120.906720][ T5123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 120.962149][ T5108] ntfs3: loop4: failed to convert "c46c" to iso8859-5 [ 121.166375][ T5126] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 122.191674][ T5136] loop1: detected capacity change from 0 to 512 [ 122.202169][ T5133] tipc: Enabling of bearer rejected, already enabled [ 122.256692][ T5135] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 122.293666][ T5135] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 122.371399][ T5142] netlink: 156 bytes leftover after parsing attributes in process `syz.4.271'. [ 122.409148][ T5143] loop3: detected capacity change from 0 to 512 [ 122.410677][ T5146] loop8: detected capacity change from 0 to 8 [ 122.456978][ T5148] loop0: detected capacity change from 0 to 128 [ 122.483970][ T5146] Dev loop8: unable to read RDB block 8 [ 122.492765][ T5146] loop8: unable to read partition table [ 122.499113][ T5146] loop8: partition table beyond EOD, truncated [ 122.514259][ T5143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.526945][ T5146] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 122.530654][ T5150] loop1: detected capacity change from 0 to 256 [ 122.548315][ T5148] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 122.569560][ T5143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.574187][ T5148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.579553][ T5143] EXT4-fs (loop3): 1 truncate cleaned up [ 122.607725][ T5147] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 87) [ 122.636025][ T5150] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.643796][ T5147] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 87) [ 122.653659][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.690428][ T5150] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 122.713280][ T5147] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 328 not allocated in directory (ino 87) [ 122.776397][ T5150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.801425][ T5147] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 87) has entry at pos 328 with incorrect tag 6161 [ 122.818953][ T5154] loop2: detected capacity change from 0 to 512 [ 122.894535][ T5154] EXT4-fs (loop2): Unrecognized mount option """ or missing value [ 123.984640][ T5170] can: request_module (can-proto-0) failed. [ 124.029345][ T5170] loop0: detected capacity change from 0 to 1024 [ 124.069691][ T5174] tipc: Enabling of bearer rejected, already enabled [ 124.083385][ T5174] loop4: detected capacity change from 0 to 512 [ 124.113357][ T5170] hfsplus: small dir entry [ 124.124242][ T4226] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 124.307116][ T5182] loop2: detected capacity change from 0 to 4096 [ 124.314304][ T5184] netlink: 'syz.4.288': attribute type 3 has an invalid length. [ 124.319298][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 124.333512][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.353815][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 124.365357][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 124.512804][ T4226] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.533378][ T5194] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 124.533396][ T4226] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 124.561170][ T5196] loop0: detected capacity change from 0 to 512 [ 124.565865][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.574236][ T5194] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 124.587817][ T4226] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 124.603246][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.614283][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 124.623169][ T4226] usb 4-1: config 0 descriptor?? [ 124.624809][ T5198] loop2: detected capacity change from 0 to 256 [ 124.644560][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.645045][ T5196] EXT4-fs (loop0): Unrecognized mount option """ or missing value [ 124.705041][ T5198] exfat: Deprecated parameter 'utf8' [ 124.711632][ T5198] exfat: Deprecated parameter 'namecase' [ 124.726081][ T5198] exfat: Deprecated parameter 'utf8' [ 124.758336][ T4317] usb 2-1: config index 0 descriptor too short (expected 51474, got 18) [ 124.774253][ T4317] usb 2-1: config 212 has too many interfaces: 90, using maximum allowed: 32 [ 124.800219][ T5198] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 124.808246][ T4317] usb 2-1: config 212 has an invalid descriptor of length 9, skipping remainder of the config [ 124.843635][ T4317] usb 2-1: config 212 has 0 interfaces, different from the descriptor's value: 90 [ 124.985823][ T5198] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 125.044595][ T4317] usb 2-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17 [ 125.065030][ T4226] usbhid 4-1:0.0: can't add hid device: -71 [ 125.071517][ T4226] usbhid: probe of 4-1:0.0 failed with error -71 [ 125.209542][ T4226] usb 4-1: USB disconnect, device number 4 [ 125.714785][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.723387][ T4317] usb 2-1: Product: syz [ 125.728015][ T4317] usb 2-1: Manufacturer: syz [ 125.732643][ T4317] usb 2-1: SerialNumber: syz [ 125.843381][ T5200] loop4: detected capacity change from 0 to 40427 [ 125.853315][ T5211] tipc: Enabling of bearer rejected, already enabled [ 125.876074][ T5211] loop0: detected capacity change from 0 to 512 [ 125.924209][ T5200] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 125.931990][ T5200] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.964882][ T5200] F2FS-fs (loop4): invalid crc value [ 125.976483][ T5213] loop3: detected capacity change from 0 to 4096 [ 125.990394][ T5200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.028575][ T5213] ntfs3: loop3: try to read out of volume at offset 0x5c00 [ 126.043598][ T5213] ntfs3: loop3: Failed to load $Volume. [ 126.132860][ T4317] usb 2-1: USB disconnect, device number 2 [ 126.161072][ T5200] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 126.174899][ T5200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.261456][ T5228] loop0: detected capacity change from 0 to 512 [ 126.280084][ T5224] loop2: detected capacity change from 0 to 4096 [ 126.325380][ T5228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 126.333640][ T5228] System zones: 1-12 [ 126.342071][ T5228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.305: inode #1: comm syz.0.305: iget: illegal inode # [ 126.359599][ T5228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.305: error while reading EA inode 1 err=-117 [ 126.374178][ T5228] EXT4-fs (loop0): 1 orphan inode deleted [ 126.380109][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 126.386797][ T5200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'. [ 126.435744][ T5237] loop3: detected capacity change from 0 to 512 [ 126.497526][ T5237] EXT4-fs (loop3): Unrecognized mount option """ or missing value [ 126.623895][ T5243] netlink: 'syz.2.310': attribute type 3 has an invalid length. [ 126.851163][ T4222] kernel write not supported for file /audio (pid: 4222 comm: kworker/1:4) [ 126.875219][ T5246] tipc: Started in network mode [ 126.880307][ T5246] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.063427][ T5246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 127.393113][ T5250] loop2: detected capacity change from 0 to 512 [ 127.468303][ T5246] tipc: Enabled bearer , priority 10 [ 128.563540][ T5268] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 128.583551][ T5268] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 128.594266][ T4317] tipc: Node number set to 1 [ 128.805026][ T4312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.814570][ T5270] loop1: detected capacity change from 0 to 4096 [ 128.879578][ T5278] loop8: detected capacity change from 0 to 8 [ 128.890296][ T5278] Dev loop8: unable to read RDB block 8 [ 128.899873][ T5278] loop8: unable to read partition table [ 128.910552][ T5278] loop8: partition table beyond EOD, truncated [ 128.920675][ T5278] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 129.053564][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 129.102090][ T5282] loop0: detected capacity change from 0 to 512 [ 129.147103][ T5282] EXT4-fs (loop0): Unrecognized mount option """ or missing value [ 129.174536][ T4312] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 129.194647][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.297679][ T4312] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.323746][ T4312] pvrusb2: ********** [ 129.348542][ T4312] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.370504][ T5289] loop1: detected capacity change from 0 to 1024 [ 129.392028][ T4312] pvrusb2: Important functionality might not be entirely working. [ 129.403245][ T4312] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 131.033644][ T4312] pvrusb2: ********** [ 131.086743][ T2424] pvrusb2: Invalid write control endpoint [ 131.115825][ T5298] tipc: Enabling of bearer rejected, already enabled [ 131.179834][ T5298] loop0: detected capacity change from 0 to 512 [ 131.227046][ T2424] pvrusb2: Invalid write control endpoint [ 131.233776][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 131.263314][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 131.289408][ T26] audit: type=1326 audit(1745834003.714:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31016e3969 code=0x7ffe0000 [ 131.332354][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 131.384032][ T2424] pvrusb2: Device being rendered inoperable [ 131.396093][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 131.404581][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 131.413154][ T5289] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.416661][ T2424] pvrusb2: Attached sub-driver cx25840 [ 131.429734][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.440514][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 131.472682][ T5289] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.560578][ T5289] tmpfs: Unknown parameter 'zol' [ 131.606024][ T26] audit: type=1800 audit(1745834004.034:21): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.633355][ T5309] loop4: detected capacity change from 0 to 256 [ 131.697471][ T5276] loop2: detected capacity change from 0 to 32768 [ 131.756200][ T5309] FAT-fs (loop4): Unrecognized mount option "shortname=utf8=1" or missing value [ 131.817614][ T5312] loop0: detected capacity change from 0 to 512 [ 131.898832][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 131.989912][ T5315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 132.002654][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.017990][ T5315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 132.033615][ T5312] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.216675][ T4175] non-latin1 character 0xffff found in JFS file name [ 132.242117][ T5326] loop4: detected capacity change from 0 to 1024 [ 132.245047][ T4175] mount with iocharset=utf8 to access [ 132.412472][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 132.507631][ T4226] infiniband syz1: ib_query_port failed (-19) [ 132.609867][ T5331] loop0: detected capacity change from 0 to 4096 [ 132.705376][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711729][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.769564][ T4222] usb 4-1: USB disconnect, device number 5 [ 133.055985][ T5337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.634848][ T5331] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 133.662306][ T5343] netlink: 216 bytes leftover after parsing attributes in process `syz.1.344'. [ 133.718977][ T5343] netlink: 'syz.1.344': attribute type 9 has an invalid length. [ 133.754472][ T5343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 133.763818][ T5344] loop4: detected capacity change from 0 to 512 [ 134.091438][ T5354] loop1: detected capacity change from 0 to 128 [ 134.144282][ T5352] sp0: Synchronizing with TNC [ 134.321684][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 134.366535][ T5363] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 134.424216][ T5363] netlink: 'syz.3.353': attribute type 2 has an invalid length. [ 134.528509][ T5368] loop4: detected capacity change from 0 to 1024 [ 134.630496][ T5348] loop0: detected capacity change from 0 to 40427 [ 134.748383][ T5348] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.755176][ T5368] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.414236][ T5348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.560983][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 135.606446][ T5388] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 135.663581][ T5388] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.806816][ T5388] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.880098][ T5372] loop3: detected capacity change from 0 to 256 [ 136.019265][ T5372] FAT-fs (loop3): Directory bread(block 64) failed [ 136.067786][ T5372] FAT-fs (loop3): Directory bread(block 65) failed [ 136.086733][ T5372] FAT-fs (loop3): Directory bread(block 66) failed [ 136.093416][ T5372] FAT-fs (loop3): Directory bread(block 67) failed [ 136.106101][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.119926][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.127629][ T5372] FAT-fs (loop3): Directory bread(block 68) failed [ 136.135876][ T5365] device bridge_slave_0 entered promiscuous mode [ 136.142387][ T5372] FAT-fs (loop3): Directory bread(block 69) failed [ 136.162080][ T5399] tipc: Enabling of bearer rejected, already enabled [ 136.176825][ T5372] FAT-fs (loop3): Directory bread(block 70) failed [ 136.199375][ T5400] loop1: detected capacity change from 0 to 512 [ 136.206110][ T5372] FAT-fs (loop3): Directory bread(block 71) failed [ 136.212772][ T5372] FAT-fs (loop3): Directory bread(block 72) failed [ 136.229267][ T5372] FAT-fs (loop3): Directory bread(block 73) failed [ 136.239761][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.258178][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.269740][ T5365] device bridge_slave_1 entered promiscuous mode [ 136.378953][ T5372] attempt to access beyond end of device [ 136.378953][ T5372] loop3: rw=2049, want=1480, limit=256 [ 136.399074][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.445304][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.448948][ T5402] FAULT_INJECTION: forcing a failure. [ 136.448948][ T5402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.471751][ T5402] CPU: 0 PID: 5402 Comm: syz.1.360 Not tainted 5.15.180-syzkaller #0 [ 136.479863][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.489944][ T5402] Call Trace: [ 136.493241][ T5402] [ 136.496186][ T5402] dump_stack_lvl+0x168/0x230 [ 136.500893][ T5402] ? show_regs_print_info+0x20/0x20 [ 136.506115][ T5402] ? load_image+0x3b0/0x3b0 [ 136.510665][ T5402] ? __lock_acquire+0x7c60/0x7c60 [ 136.515713][ T5402] should_fail+0x38c/0x4c0 [ 136.520151][ T5402] _copy_from_user+0x2e/0x170 [ 136.524848][ T5402] __copy_msghdr_from_user+0xaf/0x5e0 [ 136.530248][ T5402] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 136.535600][ T5402] ___sys_sendmsg+0x156/0x260 [ 136.540315][ T5402] ? __sys_sendmsg+0x250/0x250 [ 136.544021][ T4222] Bluetooth: hci2: command 0x0409 tx timeout [ 136.545087][ T5402] ? proc_fail_nth_write+0x17a/0x1f0 [ 136.545126][ T5402] ? vfs_write+0x84d/0xd00 [ 136.560812][ T5402] ? __context_tracking_exit+0x4c/0x80 [ 136.566298][ T5402] ? __fdget+0x150/0x210 [ 136.570578][ T5402] __se_sys_sendmsg+0x190/0x250 [ 136.575458][ T5402] ? __x64_sys_sendmsg+0x80/0x80 [ 136.580445][ T5402] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.586463][ T5402] ? lockdep_hardirqs_on+0x94/0x140 [ 136.591695][ T5402] do_syscall_64+0x4c/0xa0 [ 136.596128][ T5402] ? clear_bhb_loop+0x15/0x70 [ 136.600818][ T5402] ? clear_bhb_loop+0x15/0x70 [ 136.605512][ T5402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.611431][ T5402] RIP: 0033:0x7f93bd76c969 [ 136.615865][ T5402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.635491][ T5402] RSP: 002b:00007f93bb5d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.643934][ T5402] RAX: ffffffffffffffda RBX: 00007f93bd993fa0 RCX: 00007f93bd76c969 [ 136.651928][ T5402] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 136.659921][ T5402] RBP: 00007f93bb5d4090 R08: 0000000000000000 R09: 0000000000000000 [ 136.667911][ T5402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.675899][ T5402] R13: 0000000000000000 R14: 00007f93bd993fa0 R15: 00007ffd17111168 [ 136.683907][ T5402] [ 136.684263][ T26] audit: type=1800 audit(1745834008.954:22): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.356" name="vfat" dev="loop3" ino=1048601 res=0 errno=0 [ 136.752269][ T5365] team0: Port device team_slave_0 added [ 136.781893][ T5365] team0: Port device team_slave_1 added [ 136.850117][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.864932][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.931138][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.954886][ T4425] attempt to access beyond end of device [ 136.954886][ T4425] loop3: rw=1, want=1344, limit=256 [ 136.962773][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.976490][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.042418][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.469759][ T5365] device hsr_slave_0 entered promiscuous mode [ 137.489541][ T5365] device hsr_slave_1 entered promiscuous mode [ 137.545355][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.566692][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 137.578270][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 137.579463][ T5365] Cannot create hsr debugfs directory [ 137.598811][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 138.797386][ T5426] tipc: Enabling of bearer rejected, already enabled [ 138.858186][ T5426] loop3: detected capacity change from 0 to 512 [ 139.048305][ T5365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.095889][ T5365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.135602][ T5365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.161465][ T5415] loop1: detected capacity change from 0 to 4096 [ 139.206371][ T5365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.362028][ T5431] loop4: detected capacity change from 0 to 4096 [ 139.434327][ T5424] loop0: detected capacity change from 0 to 131072 [ 139.441028][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 139.457640][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.473115][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.479111][ T5424] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 139.488547][ T5424] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.498012][ T5415] ntfs3: Unknown parameter 'iocarset' [ 139.518004][ T5424] F2FS-fs (loop0): invalid crc value [ 139.520364][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.551971][ T5433] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.571990][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.592160][ T26] audit: type=1800 audit(1745834012.014:23): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.371" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 139.616078][ T5430] attempt to access beyond end of device [ 139.616078][ T5430] loop4: rw=524288, want=2097328, limit=4096 [ 139.628201][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.628820][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.629262][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.652050][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.664843][ T5424] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.724663][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.735717][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.747295][ T5424] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 139.754958][ T5424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 139.773542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.845230][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.852339][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.903327][ T5431] syz.4.371 (5431) used greatest stack depth: 20552 bytes left [ 139.923322][ T5415] loop1: detected capacity change from 0 to 4096 [ 139.950132][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.979744][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.994256][ T5415] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 140.004810][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 140.034818][ T5438] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 140.077426][ T5438] netlink: 'syz.3.372': attribute type 2 has an invalid length. [ 140.119452][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 140.481058][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.506915][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.515739][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.525157][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.533737][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.542515][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.553007][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.566607][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.580103][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.601974][ T5453] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 140.633464][ T5455] loop4: detected capacity change from 0 to 4096 [ 140.666814][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.678020][ T4318] Bluetooth: hci2: command 0x040f tx timeout [ 141.764413][ T5472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 141.785188][ T5469] tipc: Enabling of bearer rejected, already enabled [ 141.820154][ T5469] loop3: detected capacity change from 0 to 512 [ 141.863039][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 141.880128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.888638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.921154][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.014439][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 142.023367][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 142.044512][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 142.414890][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.426862][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.505251][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.524749][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.545873][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.567709][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.613062][ T5365] device veth0_vlan entered promiscuous mode [ 142.647483][ T5365] device veth1_vlan entered promiscuous mode [ 142.727397][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.749094][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.772844][ T5365] device veth0_macvtap entered promiscuous mode [ 142.788587][ T5365] device veth1_macvtap entered promiscuous mode [ 142.858256][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.926780][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.964160][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.014198][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.053044][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.073881][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.079341][ T5499] overlayfs: failed to set xattr on upper [ 143.109824][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.135648][ T5499] overlayfs: ...falling back to index=off,metacopy=off. [ 143.144426][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.164313][ T5499] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 143.174421][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.184973][ T5472] loop1: detected capacity change from 0 to 40427 [ 143.212935][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.225177][ T5485] loop4: detected capacity change from 0 to 32768 [ 143.253728][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.281517][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.300388][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.314490][ T5472] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.341638][ T5472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.347981][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.356706][ T5485] loop4: detected capacity change from 0 to 1024 [ 143.382725][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.384441][ T5472] F2FS-fs (loop1): invalid crc value [ 143.424905][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.464235][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.483228][ T5472] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.504307][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.546783][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.574019][ T5472] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.586257][ T5472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.596790][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.634331][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.654260][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.674247][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.696776][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.708088][ T4317] Bluetooth: hci2: command 0x0419 tx timeout [ 143.726791][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.748078][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.768275][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.787277][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.868403][ T5365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.890537][ T5365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.919828][ T5365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.964422][ T5365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.118562][ T5509] loop8: detected capacity change from 0 to 8 [ 144.177452][ T5509] Dev loop8: unable to read RDB block 8 [ 144.194292][ T5509] loop8: unable to read partition table [ 144.202826][ T5509] loop8: partition table beyond EOD, truncated [ 144.224618][ T5509] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 144.292130][ T5508] loop4: detected capacity change from 0 to 4096 [ 144.322184][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.352754][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.398813][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.516576][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.544795][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.594576][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.756570][ T5514] loop4: detected capacity change from 0 to 512 [ 145.884940][ T5522] loop5: detected capacity change from 0 to 131072 [ 145.922543][ T5513] loop0: detected capacity change from 0 to 4096 [ 145.964278][ T5522] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 145.972469][ T5522] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 145.982012][ T5530] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 145.993852][ T5513] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 146.005845][ T5528] loop4: detected capacity change from 0 to 512 [ 146.011674][ T5522] F2FS-fs (loop5): invalid crc value [ 146.019563][ T5513] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 146.033649][ T5530] netlink: 'syz.1.398': attribute type 2 has an invalid length. [ 146.044812][ T5522] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.084530][ T5513] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 146.111755][ T5513] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 146.141452][ T5522] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 146.148653][ T5522] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 146.158558][ T5522] FAULT_INJECTION: forcing a failure. [ 146.158558][ T5522] name failslab, interval 1, probability 0, space 0, times 1 [ 146.171239][ T5522] CPU: 0 PID: 5522 Comm: syz.5.347 Not tainted 5.15.180-syzkaller #0 [ 146.173638][ T5513] ntfs: (device loop0): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 146.179322][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.179354][ T5522] Call Trace: [ 146.179363][ T5522] [ 146.179372][ T5522] dump_stack_lvl+0x168/0x230 [ 146.179406][ T5522] ? show_regs_print_info+0x20/0x20 [ 146.179430][ T5522] ? load_image+0x3b0/0x3b0 [ 146.179457][ T5522] ? __might_sleep+0xf0/0xf0 [ 146.179478][ T5522] ? __lock_acquire+0x7c60/0x7c60 [ 146.179500][ T5522] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 146.179529][ T5522] should_fail+0x38c/0x4c0 [ 146.179561][ T5522] should_failslab+0x5/0x20 [ 146.179582][ T5522] slab_pre_alloc_hook+0x51/0xc0 [ 146.179608][ T5522] __kmalloc+0x6b/0x330 [ 146.179626][ T5522] ? tomoyo_encode+0x27e/0x540 [ 146.179652][ T5522] tomoyo_encode+0x27e/0x540 [ 146.179679][ T5522] tomoyo_realpath_from_path+0x5cd/0x610 [ 146.179714][ T5522] tomoyo_path_number_perm+0x1d5/0x5d0 [ 146.179751][ T5522] ? verify_lock_unused+0x140/0x140 [ 146.179779][ T5522] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 146.179805][ T5522] ? ksys_write+0x1c7/0x250 [ 146.179877][ T5522] security_file_ioctl+0x6c/0xa0 [ 146.179906][ T5522] __se_sys_ioctl+0x48/0x170 [ 146.179931][ T5522] do_syscall_64+0x4c/0xa0 [ 146.179951][ T5522] ? clear_bhb_loop+0x15/0x70 [ 146.179970][ T5522] ? clear_bhb_loop+0x15/0x70 [ 146.179992][ T5522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.180019][ T5522] RIP: 0033:0x7fc1a2cae969 [ 146.180038][ T5522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.180057][ T5522] RSP: 002b:00007fc1a0b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.180082][ T5522] RAX: ffffffffffffffda RBX: 00007fc1a2ed5fa0 RCX: 00007fc1a2cae969 [ 146.180098][ T5522] RDX: 0000200000000200 RSI: 00000000401c5820 RDI: 0000000000000005 [ 146.211255][ T5513] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 146.215605][ T5522] RBP: 00007fc1a0b16090 R08: 0000000000000000 R09: 0000000000000000 [ 146.215625][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.215638][ T5522] R13: 0000000000000000 R14: 00007fc1a2ed5fa0 R15: 00007ffdf7d2b6a8 [ 146.215668][ T5522] [ 146.402681][ T5522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.832565][ T5548] loop1: detected capacity change from 0 to 4096 [ 146.840899][ T5553] loop4: detected capacity change from 0 to 256 [ 146.954893][ T5553] FAT-fs (loop4): Directory bread(block 64) failed [ 146.963973][ T5553] FAT-fs (loop4): Directory bread(block 65) failed [ 146.980207][ T5553] FAT-fs (loop4): Directory bread(block 66) failed [ 147.012446][ T5553] FAT-fs (loop4): Directory bread(block 67) failed [ 147.042983][ T5553] FAT-fs (loop4): Directory bread(block 68) failed [ 147.076317][ T5553] FAT-fs (loop4): Directory bread(block 69) failed [ 147.102326][ T5553] FAT-fs (loop4): Directory bread(block 70) failed [ 147.133166][ T5553] FAT-fs (loop4): Directory bread(block 71) failed [ 147.174299][ T5553] FAT-fs (loop4): Directory bread(block 72) failed [ 147.194334][ T5553] FAT-fs (loop4): Directory bread(block 73) failed [ 148.085172][ T5559] tipc: Enabling of bearer rejected, already enabled [ 148.129991][ T5559] loop3: detected capacity change from 0 to 512 [ 148.259114][ T5561] QAT: Device 4 not found [ 148.497561][ T5571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 148.538022][ T5573] loop8: detected capacity change from 0 to 8 [ 148.544492][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 148.557560][ T5573] Dev loop8: unable to read RDB block 8 [ 148.563178][ T5573] loop8: unable to read partition table [ 148.582707][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 148.614687][ T5573] loop8: partition table beyond EOD, truncated [ 148.654513][ T5573] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 148.718483][ T5575] loop0: detected capacity change from 0 to 2048 [ 148.795499][ T5575] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3424, location=3424 [ 148.887145][ T5575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.160341][ T5581] loop3: detected capacity change from 0 to 4096 [ 149.657454][ T5579] loop5: detected capacity change from 0 to 131072 [ 149.956204][ T5595] netlink: 216 bytes leftover after parsing attributes in process `syz.1.423'. [ 149.965649][ T5595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'. [ 149.975145][ T5579] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 149.983459][ T5579] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 149.994555][ T5579] F2FS-fs (loop5): invalid crc value [ 150.000796][ T5595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'. [ 150.035913][ T5579] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.089679][ T5599] tipc: Enabling of bearer rejected, already enabled [ 150.137824][ T5599] loop0: detected capacity change from 0 to 512 [ 150.149000][ T5579] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 150.156983][ T5579] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 150.748379][ T5615] loop3: detected capacity change from 0 to 4096 [ 150.924601][ T5615] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 150.991684][ T5615] ntfs: (device loop3): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 151.051478][ T5615] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 151.977430][ T5615] loop3: detected capacity change from 0 to 1024 [ 151.984975][ T5629] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 151.992648][ T5629] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 152.065828][ T5615] hfsplus: unable to parse mount options [ 152.087175][ T5627] loop1: detected capacity change from 0 to 4096 [ 152.148072][ T5631] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.436'. [ 152.228358][ T5634] vivid-000: disconnect [ 152.258813][ T5634] loop0: detected capacity change from 0 to 764 [ 152.409887][ T5634] rock: directory entry would overflow storage [ 152.416261][ T5634] rock: sig=0x4654, size=5, remaining=4 [ 152.448339][ T5634] vivid-000: reconnect [ 152.825835][ T5637] tipc: Enabling of bearer rejected, already enabled [ 152.841296][ T5637] loop3: detected capacity change from 0 to 512 [ 152.950815][ T5645] netlink: 216 bytes leftover after parsing attributes in process `syz.1.441'. [ 152.990395][ T5646] loop0: detected capacity change from 0 to 512 [ 153.007221][ T5645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.441'. [ 153.028562][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.441'. [ 153.177701][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.440: corrupted inode contents [ 153.293294][ T5646] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.440: mark_inode_dirty error [ 153.369508][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.440: corrupted inode contents [ 153.458409][ T5646] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.440: mark_inode_dirty error [ 153.590558][ T5646] Quota error (device loop0): write_blk: dquota write failed [ 153.624190][ T4226] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.698857][ T5666] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 153.730200][ T5646] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 153.765469][ T5666] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 153.868082][ T5646] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.440: Failed to acquire dquot type 0 [ 154.025918][ T4226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.132572][ T4226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.205147][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.440: corrupted inode contents [ 154.275910][ T4226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.325409][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.325517][ T5646] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.440: mark_inode_dirty error [ 154.364601][ T5663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.459231][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.440: corrupted inode contents [ 154.669774][ T5646] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.440: mark_inode_dirty error [ 154.777497][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.440: corrupted inode contents [ 154.954498][ T5646] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 154.986187][ T5646] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.440: corrupted inode contents [ 155.008611][ T5646] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.440: mark_inode_dirty error [ 155.077105][ T5646] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 155.095140][ T5679] loop4: detected capacity change from 0 to 16 [ 155.114068][ T5680] loop3: detected capacity change from 0 to 4096 [ 155.116985][ T5646] EXT4-fs (loop0): 1 truncate cleaned up [ 155.120936][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 155.134243][ T5646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.146957][ T5679] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 155.162779][ T5679] cramfs: wrong endianness [ 155.174383][ T5646] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.193540][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 155.216623][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 155.283553][ T5646] fuse: Unknown parameter 'groum_id' [ 155.477706][ T5687] tipc: Enabling of bearer rejected, already enabled [ 155.584365][ T5687] loop3: detected capacity change from 0 to 512 [ 155.619064][ T5692] loop8: detected capacity change from 0 to 8 [ 155.662649][ T5692] Dev loop8: unable to read RDB block 8 [ 155.678737][ T5692] loop8: unable to read partition table [ 155.695080][ T5692] loop8: partition table beyond EOD, truncated [ 155.724787][ T5692] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 155.940643][ T5702] netlink: 216 bytes leftover after parsing attributes in process `syz.1.458'. [ 155.984264][ T5702] netlink: 'syz.1.458': attribute type 9 has an invalid length. [ 156.010066][ T5702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 156.759824][ T5709] loop0: detected capacity change from 0 to 2048 [ 157.046338][ T5709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.329776][ T5718] loop1: detected capacity change from 0 to 4096 [ 157.412277][ T5723] tipc: Enabling of bearer rejected, already enabled [ 157.439488][ T5723] loop0: detected capacity change from 0 to 512 [ 157.493671][ T4318] usb 5-1: USB disconnect, device number 9 [ 157.832989][ T5735] loop8: detected capacity change from 0 to 8 [ 157.943872][ T5735] Dev loop8: unable to read RDB block 8 [ 158.001826][ T5735] loop8: unable to read partition table [ 158.051346][ T5735] loop8: partition table beyond EOD, truncated [ 158.112061][ T5735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 158.603351][ T5733] loop0: detected capacity change from 0 to 131072 [ 158.707865][ T5733] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 158.716067][ T5733] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 158.740939][ T5733] F2FS-fs (loop0): invalid crc value [ 159.111837][ T5733] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.222414][ T5733] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.229594][ T5733] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 159.533052][ T5753] loop1: detected capacity change from 0 to 512 [ 159.628708][ T5731] loop3: detected capacity change from 0 to 32768 [ 159.636833][ T5753] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 159.744499][ T5753] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.478: couldn't read orphan inode 26 (err -116) [ 159.790789][ T5753] EXT4-fs (loop1): Remounting filesystem read-only [ 159.804356][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nolazytime,journal_ioprio=0x0000000000000003,dax=never,barrier,. Quota mode: writeback. [ 159.815869][ T5731] XFS (loop3): Mounting V5 Filesystem [ 159.823384][ T5753] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.859327][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 159.884071][ T5756] loop4: detected capacity change from 0 to 4096 [ 160.047620][ T5753] team0: Port device team_slave_0 removed [ 160.100933][ T5731] XFS (loop3): Ending clean mount [ 160.114435][ T4320] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.123791][ T5731] XFS (loop3): Quotacheck needed: Please wait. [ 160.284658][ T5731] XFS (loop3): Quotacheck: Done. [ 160.335315][ T5776] tipc: Enabling of bearer rejected, already enabled [ 160.355738][ T5731] overlayfs: './file1' not a directory [ 160.384313][ T4320] usb 6-1: Using ep0 maxpacket: 8 [ 160.430072][ T5776] loop1: detected capacity change from 0 to 512 [ 160.482890][ T4173] XFS (loop3): Unmounting Filesystem [ 160.506170][ T4320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 160.686731][ T4320] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 160.714223][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.753422][ T4320] usb 6-1: Product: syz [ 160.773727][ T4320] usb 6-1: Manufacturer: syz [ 160.872620][ T5789] loop0: detected capacity change from 0 to 8192 [ 160.953462][ T4320] usb 6-1: SerialNumber: syz [ 160.960505][ T4320] usb 6-1: config 0 descriptor?? [ 161.007698][ T5789] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 161.180744][ T5789] REISERFS (device loop0): using ordered data mode [ 161.267852][ T5789] reiserfs: using flush barriers [ 161.556427][ T5789] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.635287][ T5763] loop5: detected capacity change from 0 to 40427 [ 161.647439][ T5789] REISERFS (device loop0): checking transaction log (loop0) [ 161.716901][ T5781] loop4: detected capacity change from 0 to 32768 [ 161.768527][ T5763] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 161.775634][ T5763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 161.793481][ T5763] F2FS-fs (loop5): invalid crc value [ 161.823680][ T5781] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 161.839082][ T5763] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.920383][ T5763] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 161.927712][ T5763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 161.981422][ T5781] (syz.4.485,5781,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 162.069669][ T5781] (syz.4.485,5781,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 162.110364][ T5781] (syz.4.485,5781,0):ocfs2_mknod:298 ERROR: status = -2 [ 162.169693][ T5781] (syz.4.485,5781,0):ocfs2_mknod:502 ERROR: status = -2 [ 162.184041][ T5789] REISERFS (device loop0): Using tea hash to sort names [ 162.206088][ T5789] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 162.277458][ T5807] loop3: detected capacity change from 0 to 256 [ 162.399213][ T5807] FAT-fs (loop3): Directory bread(block 64) failed [ 162.409312][ T5781] (syz.4.485,5781,0):ocfs2_create:676 ERROR: status = -2 [ 162.427397][ T5807] FAT-fs (loop3): Directory bread(block 65) failed [ 162.457862][ T5807] FAT-fs (loop3): Directory bread(block 66) failed [ 162.489083][ T5807] FAT-fs (loop3): Directory bread(block 67) failed [ 162.524591][ T5807] FAT-fs (loop3): Directory bread(block 68) failed [ 162.551832][ T5807] FAT-fs (loop3): Directory bread(block 69) failed [ 162.575944][ T5807] FAT-fs (loop3): Directory bread(block 70) failed [ 162.605546][ T4184] ocfs2: Unmounting device (7,4) on (node local) [ 162.620510][ T5807] FAT-fs (loop3): Directory bread(block 71) failed [ 162.654562][ T5807] FAT-fs (loop3): Directory bread(block 72) failed [ 162.674833][ T5807] FAT-fs (loop3): Directory bread(block 73) failed [ 162.870811][ T26] audit: type=1800 audit(1745834035.294:24): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.486" name="file2" dev="loop3" ino=1048605 res=0 errno=0 [ 163.009305][ T5805] loop1: detected capacity change from 0 to 131072 [ 163.037183][ T5365] attempt to access beyond end of device [ 163.037183][ T5365] loop5: rw=2049, want=45112, limit=40427 [ 163.086449][ T4320] usb 6-1: USB disconnect, device number 2 [ 163.110515][ T5805] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 163.118696][ T5805] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.134927][ T5805] F2FS-fs (loop1): invalid crc value [ 163.156299][ T5813] loop8: detected capacity change from 0 to 8 [ 163.179042][ T5805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.185750][ T5813] Dev loop8: unable to read RDB block 8 [ 163.191358][ T5813] loop8: unable to read partition table [ 163.222489][ T5813] loop8: partition table beyond EOD, truncated [ 163.234000][ T5813] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 163.268080][ T5805] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.275350][ T5805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 163.314672][ T26] audit: type=1800 audit(1745834035.744:25): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.491" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 163.466903][ T4191] udevd[4191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.578049][ T5816] loop3: detected capacity change from 0 to 4096 [ 163.606701][ T5821] raw_sendmsg: syz.4.495 forgot to set AF_INET. Fix it! [ 163.648466][ T5821] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 163.698286][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.761144][ T5821] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.887941][ T5824] loop5: detected capacity change from 0 to 128 [ 163.985835][ T5824] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 164.060054][ T5824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.032072][ T5831] loop3: detected capacity change from 0 to 131072 [ 165.329787][ T5838] sctp: failed to load transform for md5: -2 [ 165.341520][ T5831] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 165.349681][ T5831] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.378680][ T5831] F2FS-fs (loop3): invalid crc value [ 165.446008][ T5831] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.512452][ T5831] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.519664][ T5831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 165.675136][ T5850] tipc: Enabling of bearer rejected, already enabled [ 165.743243][ T5850] loop0: detected capacity change from 0 to 512 [ 165.872195][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.505'. [ 166.676144][ T5867] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 166.805267][ T5865] loop0: detected capacity change from 0 to 4096 [ 166.983314][ T5857] loop5: detected capacity change from 0 to 131072 [ 167.023738][ T5857] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 167.031949][ T5857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 167.042573][ T5857] F2FS-fs (loop5): invalid crc value [ 167.118556][ T5857] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.177099][ T5857] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 167.184301][ T5857] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 167.216498][ T26] audit: type=1800 audit(1745834039.644:26): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.506" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 167.229906][ T5877] loop1: detected capacity change from 0 to 256 [ 167.282290][ T5884] loop3: detected capacity change from 0 to 256 [ 167.313275][ T5887] loop8: detected capacity change from 0 to 8 [ 167.324175][ T5887] Dev loop8: unable to read RDB block 8 [ 167.329792][ T5887] loop8: unable to read partition table [ 167.339032][ T5887] loop8: partition table beyond EOD, truncated [ 167.345385][ T5887] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 167.447891][ T5884] FAT-fs (loop3): Directory bread(block 64) failed [ 167.474228][ T5884] FAT-fs (loop3): Directory bread(block 65) failed [ 167.500173][ T5884] FAT-fs (loop3): Directory bread(block 66) failed [ 167.524265][ T5884] FAT-fs (loop3): Directory bread(block 67) failed [ 167.560415][ T5884] FAT-fs (loop3): Directory bread(block 68) failed [ 167.592795][ T5889] tipc: Enabling of bearer rejected, already enabled [ 167.600695][ T5884] FAT-fs (loop3): Directory bread(block 69) failed [ 167.634303][ T5884] FAT-fs (loop3): Directory bread(block 70) failed [ 167.655189][ T5889] loop0: detected capacity change from 0 to 512 [ 167.674601][ T5884] FAT-fs (loop3): Directory bread(block 71) failed [ 167.681266][ T5884] FAT-fs (loop3): Directory bread(block 72) failed [ 167.702880][ T5891] loop1: detected capacity change from 0 to 2048 [ 167.709598][ T5884] FAT-fs (loop3): Directory bread(block 73) failed [ 167.798297][ T5891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.385230][ T155] attempt to access beyond end of device [ 168.385230][ T155] loop3: rw=1, want=1832, limit=256 [ 168.453729][ T155] attempt to access beyond end of device [ 168.453729][ T155] loop3: rw=1, want=5356, limit=256 [ 168.464695][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.527655][ T5903] loop4: detected capacity change from 0 to 1024 [ 168.646648][ T5903] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 168.745053][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 168.753593][ T5903] hfsplus: unable to find HFS+ superblock [ 169.125671][ T5910] loop4: detected capacity change from 0 to 4096 [ 169.884826][ T5912] loop3: detected capacity change from 0 to 131072 [ 169.944360][ T4317] usb 2-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=e3.4b [ 169.953468][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.988406][ T5912] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 169.996726][ T5912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.005595][ T4317] usb 2-1: Product: syz [ 170.009796][ T4317] usb 2-1: Manufacturer: syz [ 170.016740][ T5912] F2FS-fs (loop3): invalid crc value [ 170.024497][ T4317] usb 2-1: SerialNumber: syz [ 170.045174][ T4317] usb 2-1: config 0 descriptor?? [ 170.051941][ T5912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.087619][ T5928] loop4: detected capacity change from 0 to 64 [ 170.114901][ T5912] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 170.121999][ T5912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 170.155803][ T4317] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 170.165925][ T26] audit: type=1800 audit(1745834042.594:27): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.526" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 170.386563][ T5891] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 170.403517][ T5932] netlink: 216 bytes leftover after parsing attributes in process `syz.4.532'. [ 170.416892][ T5891] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 170.425324][ T5914] loop5: detected capacity change from 0 to 32768 [ 170.443038][ T5932] netlink: 'syz.4.532': attribute type 9 has an invalid length. [ 170.460374][ T5891] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 170.463949][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 170.485428][ T5914] XFS (loop5): invalid logbufs value: 1 [not 2-8] [ 170.721331][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.533'. [ 170.735233][ T5936] loop4: detected capacity change from 0 to 256 [ 170.763728][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 170.794307][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 170.822747][ T5936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 170.949060][ T5940] loop5: detected capacity change from 0 to 512 [ 171.011614][ T4318] usb 2-1: USB disconnect, device number 3 [ 171.082943][ T5942] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 171.174645][ T5940] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.219408][ T5940] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.283363][ T5942] netlink: 'syz.4.537': attribute type 2 has an invalid length. [ 172.397341][ T5956] loop1: detected capacity change from 0 to 4096 [ 173.236719][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.334558][ T5980] loop8: detected capacity change from 0 to 8 [ 173.364714][ T5980] Dev loop8: unable to read RDB block 8 [ 173.385097][ T5980] loop8: unable to read partition table [ 173.404682][ T5980] loop8: partition table beyond EOD, truncated [ 173.432072][ T5980] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 173.480163][ T5962] loop4: detected capacity change from 0 to 131072 [ 173.514431][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 173.580831][ T5962] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 173.589422][ T5962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 173.612476][ T5962] F2FS-fs (loop4): invalid crc value [ 173.705482][ T5989] loop5: detected capacity change from 0 to 4096 [ 173.743736][ T5962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.791991][ T5962] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 173.799186][ T5962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 173.814735][ T4318] usb 2-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 173.923562][ T4318] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.242526][ T4318] usb 2-1: New USB device found, idVendor=0048, idProduct=0000, bcdDevice= 0.00 [ 174.350682][ T26] audit: type=1800 audit(1745834046.774:28): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.542" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 174.555269][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 174.563313][ T4318] usb 2-1: SerialNumber: syz [ 174.571440][ T4318] usb 2-1: config 0 descriptor?? [ 174.834994][ T4318] usb 2-1: USB disconnect, device number 4 [ 174.911807][ T6020] tipc: Enabling of bearer rejected, already enabled [ 175.066336][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 175.087893][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 175.114271][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 175.200593][ T6030] loop5: detected capacity change from 0 to 1024 [ 175.335388][ T6030] hfsplus: bad catalog entry type [ 175.944257][ T4217] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.184317][ T4217] usb 4-1: Using ep0 maxpacket: 16 [ 176.304468][ T4217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.309439][ T6035] loop1: detected capacity change from 0 to 131072 [ 176.322094][ T4217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.338467][ T6042] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 176.351648][ T6042] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 176.359907][ T6043] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 176.362694][ T4217] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 176.374567][ T6035] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 176.384932][ T6035] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.411760][ T6035] F2FS-fs (loop1): invalid crc value [ 176.439455][ T4217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.465938][ T6035] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.501411][ T4317] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.543264][ T6035] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.552416][ T6035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 176.650302][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.684247][ T26] audit: type=1800 audit(1745834049.104:29): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.569" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 176.712186][ T4217] usb 4-1: config 0 descriptor?? [ 176.727453][ T6043] bond0: (slave team0): Enslaving as an active interface with an up link [ 176.870710][ T6058] tipc: Enabling of bearer rejected, already enabled [ 176.887376][ T6058] loop4: detected capacity change from 0 to 512 [ 176.964641][ T4317] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.973833][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.010711][ T4317] usb 6-1: config 0 descriptor?? [ 177.085572][ T4317] cp210x 6-1:0.0: cp210x converter detected [ 177.196249][ T4217] apple 0003:05AC:0247.0004: unexpected long global item [ 177.216162][ T4217] apple 0003:05AC:0247.0004: parse failed [ 177.221996][ T4217] apple: probe of 0003:05AC:0247.0004 failed with error -22 [ 177.313213][ T6062] loop4: detected capacity change from 0 to 4096 [ 177.416826][ T4217] usb 4-1: USB disconnect, device number 6 [ 177.524768][ T4317] usb 6-1: cp210x converter now attached to ttyUSB0 [ 177.699572][ T6073] loop1: detected capacity change from 0 to 128 [ 177.800745][ T6080] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.567'. [ 178.753641][ T6084] loop1: detected capacity change from 0 to 1024 [ 179.436360][ T6091] tipc: Enabling of bearer rejected, already enabled [ 179.447769][ T6082] loop3: detected capacity change from 0 to 131072 [ 179.476052][ T4318] usb 6-1: USB disconnect, device number 3 [ 179.478614][ T4290] hfsplus: b-tree write err: -5, ino 4 [ 179.484877][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.500201][ T4318] cp210x 6-1:0.0: device disconnected [ 179.512537][ T6091] loop1: detected capacity change from 0 to 512 [ 179.528156][ T6078] loop4: detected capacity change from 0 to 32768 [ 179.538941][ T6082] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 179.547170][ T6082] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 179.564646][ T6082] F2FS-fs (loop3): invalid crc value [ 179.602104][ T6082] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.657622][ T6082] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 179.665781][ T6082] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 179.699987][ T26] audit: type=1800 audit(1745834052.124:30): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.584" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 179.700152][ T6078] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.583 (6078) [ 179.853444][ T6078] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 179.886465][ T6078] BTRFS info (device loop4): using free space tree [ 179.886858][ T6110] tmpfs: Bad value for 'mpol' [ 179.893040][ T6078] BTRFS info (device loop4): has skinny extents [ 180.151949][ T6113] loop1: detected capacity change from 0 to 4096 [ 180.355511][ T6078] BTRFS info (device loop4): enabling ssd optimizations [ 180.754760][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 180.804207][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 180.854169][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 181.074282][ T6130] loop5: detected capacity change from 0 to 32768 [ 181.214872][ T6153] tipc: Enabling of bearer rejected, already enabled [ 181.245426][ T6130] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.597 (6130) [ 183.007684][ T6130] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 183.054344][ T6130] BTRFS info (device loop5): setting nodatacow, compression disabled [ 183.104263][ T6130] BTRFS info (device loop5): max_inline at 0 [ 183.110302][ T6130] BTRFS info (device loop5): using free space tree [ 183.182036][ T6130] BTRFS info (device loop5): has skinny extents [ 183.363054][ T6188] netlink: 'syz.0.607': attribute type 1 has an invalid length. [ 183.384351][ T6188] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 183.716349][ T6130] BTRFS error (device loop5): open_ctree failed: -12 [ 183.930950][ T6200] loop3: detected capacity change from 0 to 4096 [ 183.944510][ T6205] loop4: detected capacity change from 0 to 1024 [ 183.982026][ T6205] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 184.019645][ T6205] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 184.044282][ T6205] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.216626][ T6205] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,block_validity,,errors=continue. Quota mode: writeback. [ 185.701139][ T6205] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.4.612: corrupted in-inode xattr [ 185.739143][ T6216] tipc: Enabling of bearer rejected, already enabled [ 185.813301][ T6216] loop3: detected capacity change from 0 to 512 [ 185.851434][ T6227] device sit0 entered promiscuous mode [ 185.934418][ T6186] Bluetooth: hci0: command 0x0406 tx timeout [ 185.944640][ T4217] Bluetooth: hci3: command 0x0406 tx timeout [ 185.946026][ T6186] Bluetooth: hci1: command 0x0406 tx timeout [ 185.995879][ T6186] Bluetooth: hci4: command 0x0406 tx timeout [ 186.141178][ T6242] device pim6reg1 entered promiscuous mode [ 187.088639][ T6278] device pim6reg1 entered promiscuous mode [ 187.851650][ T6312] device pim6reg1 entered promiscuous mode [ 188.103396][ T6324] device pim6reg1 entered promiscuous mode [ 189.568664][ T6394] device pim6reg1 entered promiscuous mode [ 189.683934][ T6397] device pim6reg1 entered promiscuous mode [ 189.701027][ T6400] device pim6reg1 entered promiscuous mode [ 190.177884][ T6416] [ 190.180261][ T6416] ====================================================== [ 190.187288][ T6416] WARNING: possible circular locking dependency detected [ 190.194324][ T6416] 5.15.180-syzkaller #0 Not tainted [ 190.199539][ T6416] ------------------------------------------------------ [ 190.206561][ T6416] syz.0.701/6416 is trying to acquire lock: [ 190.212479][ T6416] ffff8880b9127e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 190.221120][ T6416] [ 190.221120][ T6416] but task is already holding lock: [ 190.228577][ T6416] ffff8880778c45b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 190.237461][ T6416] [ 190.237461][ T6416] which lock already depends on the new lock. [ 190.237461][ T6416] [ 190.247863][ T6416] [ 190.247863][ T6416] the existing dependency chain (in reverse order) is: [ 190.256876][ T6416] [ 190.256876][ T6416] -> #2 (&trie->lock){..-.}-{2:2}: [ 190.264177][ T6416] _raw_spin_lock_irqsave+0xa4/0xf0 [ 190.269902][ T6416] trie_delete_elem+0x90/0x710 [ 190.275182][ T6416] 0xffffffffa002a276 [ 190.279678][ T6416] bpf_trace_run3+0x17e/0x320 [ 190.284875][ T6416] __traceiter_timer_start+0x73/0xc0 [ 190.290680][ T6416] enqueue_timer+0x394/0x520 [ 190.295787][ T6416] __mod_timer+0x8e1/0xd20 [ 190.300723][ T6416] sk_reset_timer+0x1f/0xb0 [ 190.305743][ T6416] tipc_sk_finish_conn+0x154/0x7e0 [ 190.311369][ T6416] tipc_socketpair+0x250/0x470 [ 190.316653][ T6416] __sys_socketpair+0x2ac/0x540 [ 190.322024][ T6416] __x64_sys_socketpair+0x97/0xb0 [ 190.327569][ T6416] do_syscall_64+0x4c/0xa0 [ 190.332504][ T6416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.338917][ T6416] [ 190.338917][ T6416] -> #1 (&base->lock){-.-.}-{2:2}: [ 190.346206][ T6416] _raw_spin_lock_irqsave+0xa4/0xf0 [ 190.351922][ T6416] lock_timer_base+0x123/0x270 [ 190.357201][ T6416] __mod_timer+0x117/0xd20 [ 190.362132][ T6416] queue_delayed_work_on+0x126/0x1e0 [ 190.367933][ T6416] kvfree_call_rcu+0x4a9/0x7c0 [ 190.373210][ T6416] rtnl_register_internal+0x44e/0x540 [ 190.379104][ T6416] rtnl_register+0x2e/0x70 [ 190.384036][ T6416] ip_rt_init+0x2e0/0x3a0 [ 190.388880][ T6416] ip_init+0xa/0x20 [ 190.393199][ T6416] inet_init+0x28b/0x3a0 [ 190.397955][ T6416] do_one_initcall+0x1ee/0x680 [ 190.403251][ T6416] do_initcall_level+0x137/0x1f0 [ 190.408708][ T6416] do_initcalls+0x4b/0x90 [ 190.413638][ T6416] kernel_init_freeable+0x3ce/0x560 [ 190.419350][ T6416] kernel_init+0x19/0x1b0 [ 190.424197][ T6416] ret_from_fork+0x1f/0x30 [ 190.429135][ T6416] [ 190.429135][ T6416] -> #0 (krc.lock){..-.}-{2:2}: [ 190.436173][ T6416] __lock_acquire+0x2c33/0x7c60 [ 190.441646][ T6416] lock_acquire+0x197/0x3f0 [ 190.446678][ T6416] _raw_spin_lock+0x2a/0x40 [ 190.451717][ T6416] kvfree_call_rcu+0x186/0x7c0 [ 190.457007][ T6416] trie_update_elem+0x86e/0xc50 [ 190.462390][ T6416] bpf_map_update_value+0x591/0x670 [ 190.468124][ T6416] generic_map_update_batch+0x525/0x7c0 [ 190.474190][ T6416] bpf_map_do_batch+0x466/0x600 [ 190.479566][ T6416] __sys_bpf+0x601/0x670 [ 190.484326][ T6416] __x64_sys_bpf+0x78/0x90 [ 190.489259][ T6416] do_syscall_64+0x4c/0xa0 [ 190.494194][ T6416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.500611][ T6416] [ 190.500611][ T6416] other info that might help us debug this: [ 190.500611][ T6416] [ 190.511022][ T6416] Chain exists of: [ 190.511022][ T6416] krc.lock --> &base->lock --> &trie->lock [ 190.511022][ T6416] [ 190.522752][ T6416] Possible unsafe locking scenario: [ 190.522752][ T6416] [ 190.530191][ T6416] CPU0 CPU1 [ 190.535550][ T6416] ---- ---- [ 190.540906][ T6416] lock(&trie->lock); [ 190.545055][ T6416] lock(&base->lock); [ 190.551636][ T6416] lock(&trie->lock); [ 190.558215][ T6416] lock(krc.lock); [ 190.562035][ T6416] [ 190.562035][ T6416] *** DEADLOCK *** [ 190.562035][ T6416] [ 190.570170][ T6416] 2 locks held by syz.0.701/6416: [ 190.575183][ T6416] #0: ffffffff8c11d9e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 190.584500][ T6416] #1: ffff8880778c45b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 190.593822][ T6416] [ 190.593822][ T6416] stack backtrace: [ 190.599702][ T6416] CPU: 1 PID: 6416 Comm: syz.0.701 Not tainted 5.15.180-syzkaller #0 [ 190.607763][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.617813][ T6416] Call Trace: [ 190.621088][ T6416] [ 190.624014][ T6416] dump_stack_lvl+0x168/0x230 [ 190.628695][ T6416] ? load_image+0x3b0/0x3b0 [ 190.633194][ T6416] ? show_regs_print_info+0x20/0x20 [ 190.638392][ T6416] ? print_circular_bug+0x12b/0x1a0 [ 190.643586][ T6416] check_noncircular+0x274/0x310 [ 190.648518][ T6416] ? add_chain_block+0x940/0x940 [ 190.653454][ T6416] ? lockdep_lock+0xdc/0x1e0 [ 190.658041][ T6416] ? stack_depot_save+0x404/0x440 [ 190.663062][ T6416] ? mark_lock+0x94/0x320 [ 190.667402][ T6416] __lock_acquire+0x2c33/0x7c60 [ 190.672260][ T6416] ? stack_depot_save+0x404/0x440 [ 190.677285][ T6416] ? verify_lock_unused+0x140/0x140 [ 190.682489][ T6416] ? kasan_save_stack+0x4b/0x60 [ 190.687346][ T6416] ? kasan_save_stack+0x35/0x60 [ 190.692193][ T6416] ? kasan_record_aux_stack+0xb8/0x100 [ 190.697646][ T6416] ? kvfree_call_rcu+0x10a/0x7c0 [ 190.702579][ T6416] ? trie_update_elem+0x86e/0xc50 [ 190.707600][ T6416] ? bpf_map_update_value+0x591/0x670 [ 190.712964][ T6416] ? generic_map_update_batch+0x525/0x7c0 [ 190.718690][ T6416] ? bpf_map_do_batch+0x466/0x600 [ 190.723709][ T6416] ? __sys_bpf+0x601/0x670 [ 190.728119][ T6416] ? __x64_sys_bpf+0x78/0x90 [ 190.732700][ T6416] ? do_syscall_64+0x4c/0xa0 [ 190.737282][ T6416] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.743354][ T6416] lock_acquire+0x197/0x3f0 [ 190.747852][ T6416] ? kvfree_call_rcu+0x186/0x7c0 [ 190.752788][ T6416] ? read_lock_is_recursive+0x10/0x10 [ 190.758164][ T6416] _raw_spin_lock+0x2a/0x40 [ 190.762666][ T6416] ? kvfree_call_rcu+0x186/0x7c0 [ 190.767600][ T6416] kvfree_call_rcu+0x186/0x7c0 [ 190.772448][ T6416] ? call_rcu+0x920/0x920 [ 190.776776][ T6416] trie_update_elem+0x86e/0xc50 [ 190.781631][ T6416] bpf_map_update_value+0x591/0x670 [ 190.786830][ T6416] generic_map_update_batch+0x525/0x7c0 [ 190.792469][ T6416] ? rcu_read_unlock+0x90/0x90 [ 190.797235][ T6416] ? __fdget+0x18b/0x210 [ 190.801474][ T6416] ? rcu_read_unlock+0x90/0x90 [ 190.806234][ T6416] bpf_map_do_batch+0x466/0x600 [ 190.811087][ T6416] __sys_bpf+0x601/0x670 [ 190.815351][ T6416] ? bpf_link_show_fdinfo+0x310/0x310 [ 190.820734][ T6416] ? vtime_user_exit+0x2dc/0x400 [ 190.825688][ T6416] __x64_sys_bpf+0x78/0x90 [ 190.830115][ T6416] do_syscall_64+0x4c/0xa0 [ 190.834535][ T6416] ? clear_bhb_loop+0x15/0x70 [ 190.839213][ T6416] ? clear_bhb_loop+0x15/0x70 [ 190.843888][ T6416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.849783][ T6416] RIP: 0033:0x7fc758048969 [ 190.854194][ T6416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.873797][ T6416] RSP: 002b:00007fc755eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.882211][ T6416] RAX: ffffffffffffffda RBX: 00007fc75826ffa0 RCX: 00007fc758048969 [ 190.890180][ T6416] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 190.898148][ T6416] RBP: 00007fc7580caab1 R08: 0000000000000000 R09: 0000000000000000 [ 190.906116][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.914080][ T6416] R13: 0000000000000000 R14: 00007fc75826ffa0 R15: 00007ffde090bb38 [ 190.922058][ T6416] [ 194.100940][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.107332][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.239557][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.278844][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.320574][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.378393][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.446570][ T155] tipc: Disabling bearer [ 199.468112][ T155] tipc: Left network mode [ 200.115566][ T155] device hsr_slave_0 left promiscuous mode [ 200.122045][ T155] device hsr_slave_1 left promiscuous mode [ 200.133666][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.141380][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.153581][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.161224][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.172515][ T155] device bridge_slave_1 left promiscuous mode [ 200.178988][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.192280][ T155] device bridge_slave_0 left promiscuous mode [ 200.200481][ T155] bridge0: port 1(bridge_slave_0) entered disabled state