last executing test programs: 32.309019883s ago: executing program 3 (id=322): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 31.259745975s ago: executing program 3 (id=325): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = socket(0x10, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@random="3359ae286fb4", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x380, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX=r2]) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2008c12, &(0x7f0000000280)={[{@map_normal}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffe7}}, {@dmode={'dmode', 0x3d, 0xf8}}, {@mode={'mode', 0x3d, 0x3}}, {@map_normal}, {@overriderock}, {@map_off}, {@mode={'mode', 0x3d, 0xd75}}, {@check_relaxed}, {@unhide}, {@session={'session', 0x3d, 0x62}}, {@check_relaxed}, {@hide}]}, 0x2, 0xa03, &(0x7f0000003a40)="$eJzs3c1vHOd9B/Dv8EWiaUOSbdV1BdlayZVM2yxFUrVUQYdWIlcSXb4UJAVY6MFyLaoQxNat3QK2UaAyUPRUoQVa9NDejJxyEuBLfAl8S27JKYcAgf8FIycFCMBgZpfSklxySYUiafnzIXZ3Xn7zPL/ZmZ2Huzs7T/huWTq4Ymxpqbptdby7Of7DnUiZvevS+Ddf3L9X3j6/m33pztvFj5K+JLWkJ8nLSe/Y+OzMVIeC7iQ3knydFEn2p/G4KTdS/GeeezT+dYr/L+td177NlkwnS3yv7fb+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe1ExNj48PFLsy8T0tXdrDUltjbHx2ZkiS0tr5ywv0/BV1et38VXHepOivKWvb7mr75cPP5r9UpLaiRxtjB2tOiRPXz579qVDF17s6Vpefr1sfi/7N1/sx59+duf9xcWFj55IInvflfr0xNzMxNTFK/XaxNxM7fzZs8Onr16eq12emKzPXZ+br0/VxmbrF+dnZmsDY2/URs6fP1OrD12fuTZ9ZXxosr488dyfjA4Pn629M/RX9YuzczPTp98Zmhu7OjE5OTF9pYopZ5cx58od8S8n5mvz9YtTtdqt24sLZ1bl1J1V+28ZNNJpTcqg0U5Bo8OjoyMjo6Mjnzd7z3444ezb598+NzzcM7xK1kQ8oZ2WveWZ9Tfz9h/E4TF1Ndr/ZDITmc61vJta27+xjGc2M5laZ35TT3VffHXydH3Delvb/6OtizYcKe9O5NXmaN867f86uezc38f5NJ/lTt7PYhazkI92PaOd/buSeqYzkbnMZCJTuVhNqTWn1HI+Z3M2w3kvV3Msc6nlciYymXrmcj1zmU+92qPGMpt6LmY+M5lNLQMZyxupZSTncz5nUks9Q7memVzLdK5kPBerUm7ldvW8n9kgx4dBI5sJGm2Z2L0qaE1jvuX2v776nxO+d7b9GA6Pa6nZ/u/rHDowthMJAQAAANvuj36aA4df+MmvkiKvVJ/LX56YrA/vdloAAADANqq++T+aIuktR19J4f0/AAAAPG2K6jd2RZL+HGsMLf8SyocAAAAA8JSoLtf3aopjjyZ4/w8AAABPmc7X2O8YUQwuX/63drPxeLMZ0Rgr+i9PTNaHxmYmL4zkVHWVgeqXBmtK606K3urnB2/meCPqeH/jsf9RiWWdfWXUyNCFkbyZE80VGXitfHhtoE3kaCPy9Ubk662R3VkReWbogutzAvD0O7FBe7zZ9v/NDDYiBo9UTX7PkTZt8HDZBgMAe8HDPnZ+0+zSrE3734x4db32/083eP9fRryQW8capxQM5YN8mMXczGCaZxwca1fqcm8EjdMQBjt8GtDfPGXh5+e6Mrjm84C+h+vaGruQ0Qy2/USgpdxiOYczjbjuJ7MNAGCnndiwHd5c+z/Y4f1/v1MKAWBPediDfTXQs2bKdgzs9joCACtppQEAAAAAAAAAAAAAAAAAAAAAAAAAAGD7beoC/j87lSwuLiTb3jXABgN9W8lw44Gu7FDOuz7QnWS3av/zrJm1tJRstFS5jffKU2dg5cAuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYEUXS3W56V7I/yXCS0zuf1ZNzd7cT2C61x1useJAH+SQHtjsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDvu+b1/7vSeHy2MSk9XcnJJDeS/PVu57g9Gt0cPNjtNHbN31X3Ldf/70p6s1Skp7HZU/SOjc/OTJWbv9hfzv/mi/v3ylvnstf2qlAWUNawonOJZg0tU3pXLvV8tVT/+MLHd/7pw3+ojV+qdsxL85cnx6euzP7Fo8CXii8bXSC0doOwnO+/nPzxf7VM3tes/MtyTdtbXe/lqt7xtfX+Ybul16l3E24vLoyWNc3X353/57+//UnLrBdyPHltIBlYWdPflrd1ajq++vlcqfi2+PfiQP43N6rtXz4bxVJRbqKD1fo/c+v24sLQBx8u3nyY07+uyOlQjiW5mfRtPqdj1fGkrWqv6+otax2ugsq7wx3K21BLiSPrPK/PV7tM/5bWobb+OlQ6PO/NjM60zei///HFnNrylj7Voca2im+LXxZX84v8W0v/H13l9j+Ztq/ONkVUkS17Suu8FS+vrkZkteajrTPeW13muq9KnoD/yN/kzx5u/66W439zW+3M8ailxvavi2Trr4sfHFzTojxStUiHV7VIzaPPess08zzciFonzz/IW0nPkS0dUd7qcER5Uq///ysG8uvc1f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xVJd7vpXcnJJIeSHCzHa8nS6pi7j1FfV3/xOGlum8fJ+bunWHdFiwd5kE9yYKczAgAAAAAAAODJuDT+zRf37/126f696vv47vxxV3NOLelJcqj4n96x8dmZqQ4F9SY3lr/S79taDjfKu+cejX9djr3cYaHdPX0AAL7TfhcAAP//ekBszQ==") 29.382418249s ago: executing program 3 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x6]}]}}}}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 29.070699866s ago: executing program 3 (id=330): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2102000, &(0x7f0000000000), 0x1, 0x790, &(0x7f00000020c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040), &(0x7f0000000140)=""/72, 0x700}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000040), 0x20, r4}, 0x38) 27.311787111s ago: executing program 3 (id=333): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) socket(0xa, 0x3, 0x3a) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa9f725f81f02d6eb, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00100000000000001b"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) 26.444357056s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) clock_gettime(0xffffffc3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 13.304326076s ago: executing program 2 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae46, &(0x7f0000001180)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) 9.855869688s ago: executing program 4 (id=371): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff020000"], 0x78) socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b12d25a80648c2594f90124fc601000084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) 6.385445362s ago: executing program 4 (id=376): mkdir(&(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000600)='rpc_pipefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, 0x0) 6.258863192s ago: executing program 0 (id=377): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0x228, 0x228, 0x0, 0x228, 0x3e8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4a8, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r2, 0x107, 0x17, 0x0, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x15, r1, 0x1, 0x5, 0x6, @multicast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x2}, 0x4) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8f17, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x0, 0x9dfc, &(0x7f0000013c80)="$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") sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000000306050000000000000000000500000805000100070000000900020073797a320000000500010007000000050001000700000005000100070000000900020073797a32000000004ca14f44ac1fbe81887cad95142855445ad353bc64a0ad96b794b168d5a8a74b00b0573342b578"], 0x54}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000000) 6.194294738s ago: executing program 2 (id=378): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r3}) shutdown(r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1b, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 6.186138309s ago: executing program 1 (id=379): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x10001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f00000007c0), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000100)='./file0\x00', 0x24d3) 5.857282698s ago: executing program 2 (id=380): pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@orlov}, {@bsdgroups}]}, 0x1, 0x640, &(0x7f0000000140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.842186149s ago: executing program 4 (id=381): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x505e81) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000080)=0xfe7c) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="f3810844e6b3f8759295095a5b5a9cbbc563f9fe9a9d17297ab6f5a4", 0x1c}], 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r5 = fcntl$dupfd(r4, 0x0, r4) open_tree(r5, &(0x7f0000000000)='./mnt\x00', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = open$dir(&(0x7f0000000080)='./mnt\x00', 0x420000, 0x1c9) fanotify_mark(r5, 0x1ff, 0x8002020, r7, &(0x7f00000000c0)='./mnt\x00') setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000000)) mq_getsetattr(r2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x8604}, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x20008844) 4.91996969s ago: executing program 0 (id=382): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r1, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r1, &(0x7f0000001b00)=""/194, 0xc2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0xfd, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x10e0, 0x5}, {}, {}, @queue}, {0x0, 0x9, 0x0, 0x0, @time={0xfffffffc}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"e1e2b45b88ecb9fca672830f"}}], 0x70) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="93f74b1d965f3733501911cb7be0357e7b75ecc5b061586a9b96c7b4e56a014c39ee587a49f2daa5e9ddd7d908d919ac1d8b7f384d1a5714e6d6cf2c678e3f415b8814d522", 0x45}], 0x1}}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) 4.91820189s ago: executing program 4 (id=383): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000002c0)) sendfile(r0, r0, &(0x7f0000000040), 0x40000000fffff803) r3 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x24, &(0x7f0000000000), 0x20000000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fsmount(r5, 0x1, 0xfa) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=@ipv4_newroute={0x58, 0x18, 0x100, 0x70bd29, 0x25dfdc00, {0x2, 0x20, 0x14, 0x9, 0xfd, 0x4, 0xfe, 0x8, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0xb, 0x5}}, @RTA_NH_ID={0x8, 0x1e, 0x7}, @RTA_UID={0x8}, @RTA_IIF={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000011) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xb4, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "345724dbb2595ae713767089b43dcc5b0b3ccff8704479bd"}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 4.747087155s ago: executing program 1 (id=384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f0000000200), 0x8) 4.446775621s ago: executing program 0 (id=385): r0 = syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0xb141, 0x1, 0x9, 0x12b}, &(0x7f0000000280), &(0x7f0000000300)) syz_io_uring_setup(0x41e3, &(0x7f00000001c0)={0x0, 0xe5aa, 0x80, 0x40002, 0x38e, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000a000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_setup(0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x9) close(r3) 4.383816907s ago: executing program 1 (id=386): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='block_plug\x00'}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x11, 0x0, 0x0) unshare(0x20000600) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bf652809a2465578d6e40ece0efdbbaa3f27d60ce7e62d1471a208948dffb7d1775874c6e29764e4acd3ac0f25b5e2d3bc35680adb68254add"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) quotactl$Q_QUOTAON(0x0, 0x0, 0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000500)='\xc3\xe8&\xc56>\x9dw\xd7I{\x84\xc9\xcc0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1fc}, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="f5", 0x1}], 0x1}}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x2) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x30000000) 3.256379876s ago: executing program 0 (id=389): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x10001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@data_err_abort}, {@nodelalloc}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f00000007c0), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000100)='./file0\x00', 0x24d3) 3.067270702s ago: executing program 1 (id=390): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000015c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="93ed1d49", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x2, 0x443, &(0x7f0000000940)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x112, 0x3, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0xa7) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000001ba073ee5b4ba056f5a86035", @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r6, @ANYBLOB="6600330050000000080211000000080211000000ffffffffffff000000000000000000006400000001000301000406000000000000060200002d1a000000000000000000000000000000000000000000000000000072060303030303037107000000000000000000"], 0x84}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.111381266s ago: executing program 2 (id=391): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x1, [0x3ff]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x7c, "f1d92d5ea58c1d5bde00a5f4c645ce50733d606fecb34fc041269e181f730523e7004177698c25b203b1a26748bdb6a7bdbc417027cb51a32a5de44fe7786b8451e95679cf698de191f521bac98dc091fb4183d675c8fe6c75c089a487e97a91bbf9503855e1920f1f8a180cd55ce2a6bf053eba3bad2f06bcad1f75"}, &(0x7f0000000200)=0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000140)={0x0, 0x0, 0x3}) r5 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r9, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x94, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xffffff65}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x22000844) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@private2, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x13}}, 0x80, 0x0, 0x0, 0x100, 0x0, 0x810026, r10}) 2.108310426s ago: executing program 1 (id=392): io_destroy(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9363010020050100140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0xe2, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x4, 0x25, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000004c0)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r9) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}, @IFLA_MACSEC_WINDOW={0x8}]}}}]}, 0x44}}, 0x0) 1.744096048s ago: executing program 0 (id=393): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x15) dup(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f0000000080)='\r', 0x1}]) 1.011196942s ago: executing program 2 (id=394): socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2004400, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xde, 0x451, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x404, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 1.000190323s ago: executing program 1 (id=403): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000200)) fcntl$setstatus(r3, 0x4, 0x6800) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x0, 0x4, 0x3695, 0x200, 0xfff}]}) tee(r4, r5, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) 866.824894ms ago: executing program 4 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x24, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r3, @ANYBLOB="1b00000000000000280012800b000100627269646765"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @timestamp, @mss, @mss, @mss], 0x7) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000203030000000007000000f0ffffff000800010001"], 0x1c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) 0s ago: executing program 0 (id=396): r0 = getpid() r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0xd}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="27032700080200000000002f1eafbcf706e105000000803500001104ee1611d4b8bf4a82f6184b8a34f90186cee8440000", 0x31}], 0x1}, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}}, 0x0) listen(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000004c0)='zonefs\x00', 0x0) kernel console output (not intermixed with test programs): 571] device veth1_vlan entered promiscuous mode [ 59.450232][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.460577][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.470487][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.482160][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.493427][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.505331][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.515912][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.527249][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.580791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.589330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.597949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.607317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.616991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.628873][ T1074] Bluetooth: hci0: command 0x040f tx timeout [ 59.649729][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.657772][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.666434][ T3576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.678052][ T3576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.687837][ T3576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701000][ T3576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.709067][ T1074] Bluetooth: hci2: command 0x040f tx timeout [ 59.717975][ T1074] Bluetooth: hci1: command 0x040f tx timeout [ 59.743760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.753940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.764379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.779506][ T3571] device veth0_macvtap entered promiscuous mode [ 59.791208][ T3608] Bluetooth: hci4: command 0x040f tx timeout [ 59.797769][ T3608] Bluetooth: hci3: command 0x040f tx timeout [ 59.807964][ T3571] device veth1_macvtap entered promiscuous mode [ 59.820784][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.840440][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.851438][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.860684][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.866270][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.877236][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.887436][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.895634][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.904792][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.914890][ T3578] device veth0_vlan entered promiscuous mode [ 59.937566][ T3578] device veth1_vlan entered promiscuous mode [ 59.967680][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.981394][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.990712][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.995014][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.011204][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.022118][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.032566][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.043073][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.054358][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.075210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.088223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.097094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.106658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.116500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.127674][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.137031][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.161695][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.174805][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.187684][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.199495][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.210314][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.221348][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.234981][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.253301][ T3578] device veth0_macvtap entered promiscuous mode [ 60.261013][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.278965][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.287557][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.296892][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.306694][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.321016][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.364243][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.365665][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.388508][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.397365][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.411230][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.434099][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.506590][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.525183][ T3578] device veth1_macvtap entered promiscuous mode [ 60.557278][ T3641] loop0: detected capacity change from 0 to 2048 [ 60.585670][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.635641][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.700451][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.716219][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.764014][ T3641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.779690][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.792210][ T3644] loop4: detected capacity change from 0 to 1764 [ 60.815688][ T3644] ======================================================= [ 60.815688][ T3644] WARNING: The mand mount option has been deprecated and [ 60.815688][ T3644] and is ignored by this kernel. Remove the mand [ 60.815688][ T3644] option from the mount to silence this warning. [ 60.815688][ T3644] ======================================================= [ 60.853260][ T3641] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff) [ 60.862371][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893923][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.914214][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.925284][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.936218][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.946592][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.957341][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.974367][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.002421][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.059891][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.093316][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.143136][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.303456][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.328370][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.342187][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.353693][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.366934][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.385076][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.396737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.437451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 61.446491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.455566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.464535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.473584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.482574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.491694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.500680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.510012][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.240190][ T26] audit: type=1804 audit(1727320102.943:2): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file0/file1" dev="overlay" ino=17 res=1 errno=0 [ 62.266537][ T3608] Bluetooth: hci0: command 0x0419 tx timeout [ 62.274102][ T3608] Bluetooth: hci1: command 0x0419 tx timeout [ 62.280282][ T3608] Bluetooth: hci2: command 0x0419 tx timeout [ 62.287568][ T3608] Bluetooth: hci3: command 0x0419 tx timeout [ 62.293693][ T3608] Bluetooth: hci4: command 0x0419 tx timeout [ 62.305343][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.324948][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.359341][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.378035][ T3644] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 62.387529][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.395621][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.561845][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.605748][ T3578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.679583][ T3659] xt_hashlimit: invalid rate [ 63.133879][ T3659] loop2: detected capacity change from 0 to 8192 [ 63.483405][ T3578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.493247][ T3578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.504744][ T3662] loop0: detected capacity change from 0 to 256 [ 63.511807][ T3578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.566496][ T3662] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 63.593656][ T3659] REISERFS warning (device loop2): jmacd-7 reiserfs_fill_super: resize option for remount only [ 63.626010][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.644241][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.744952][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.823163][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.975576][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.014170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.038690][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 64.050092][ T3671] loop2: detected capacity change from 0 to 16 [ 64.098037][ T3669] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 64.105068][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.132284][ T3671] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.138930][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.165143][ T3671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.195567][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.431637][ T3677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.552378][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 64.645401][ T3682] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 65.050232][ T3687] loop4: detected capacity change from 0 to 2048 [ 66.023886][ T3687] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.581872][ T3701] loop2: detected capacity change from 0 to 4096 [ 66.652902][ T3714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.682573][ T3687] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.746022][ T3687] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 66.762120][ T3687] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.762120][ T3687] [ 66.772232][ T3687] EXT4-fs (loop4): Total free blocks count 0 [ 66.778240][ T3687] EXT4-fs (loop4): Free/Dirty block details [ 66.784772][ T3687] EXT4-fs (loop4): free_blocks=2415919104 [ 66.801171][ T3687] EXT4-fs (loop4): dirty_blocks=16 [ 67.098132][ T3720] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.245208][ T3687] EXT4-fs (loop4): Block reservation details [ 67.652210][ T3687] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 67.709683][ T3710] loop1: detected capacity change from 0 to 8192 [ 67.751100][ T26] audit: type=1800 audit(1727320109.263:3): pid=3701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 67.839591][ T3710] ntfs3: Unknown parameter 'Î3øÿÿÅÇ·(Å' [ 68.476495][ T3604] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.534754][ T3604] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.534754][ T3604] [ 68.621672][ T3700] [U]  [ 68.674528][ T3732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 68.825805][ T3732] Zero length message leads to an empty skb [ 69.054568][ T3737] autofs4:pid:3737:autofs_fill_super: called with bogus options [ 69.872949][ T3727] loop3: detected capacity change from 0 to 40427 [ 70.317159][ T3727] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.491275][ T3727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.786151][ T3727] F2FS-fs (loop3): invalid crc value [ 70.869691][ T3727] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 71.061492][ T3753] syz.2.30[3753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.061612][ T3753] syz.2.30[3753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.190954][ T3732] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.393294][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401765][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.963089][ T3764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'. [ 71.997212][ T3762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 72.004234][ T3762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.050198][ T3764] sctp: [Deprecated]: syz.4.34 (pid 3764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.050198][ T3764] Use struct sctp_sack_info instead [ 72.082121][ T3773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.109975][ T3762] vhci_hcd vhci_hcd.0: Device attached [ 72.244431][ T26] audit: type=1326 audit(1727320113.753:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.245354][ T26] audit: type=1326 audit(1727320113.753:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.246372][ T26] audit: type=1326 audit(1727320113.753:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.246908][ T26] audit: type=1326 audit(1727320113.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.247384][ T26] audit: type=1326 audit(1727320113.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.254516][ T3775] capability: warning: `syz.3.35' uses 32-bit capabilities (legacy support in use) [ 72.254661][ T26] audit: type=1326 audit(1727320113.763:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.254709][ T26] audit: type=1326 audit(1727320113.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.254747][ T26] audit: type=1326 audit(1727320113.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.254784][ T26] audit: type=1326 audit(1727320113.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3774 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbe83bf39 code=0x7ffc0000 [ 72.267181][ T3775] loop3: detected capacity change from 0 to 512 [ 72.358457][ T3606] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 72.437412][ T3778] netlink: 124 bytes leftover after parsing attributes in process `syz.4.36'. [ 72.630675][ T3766] vhci_hcd: connection closed [ 72.650254][ T3604] vhci_hcd: stop threads [ 72.670163][ T3781] netlink: 'syz.1.37': attribute type 3 has an invalid length. [ 72.711001][ T3604] vhci_hcd: release socket [ 72.725964][ T3604] vhci_hcd: disconnect device [ 73.072083][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 73.118512][ T3796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.339547][ T3799] xt_policy: output policy not valid in PREROUTING and INPUT [ 73.379687][ T3799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 74.665144][ T3806] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 74.749129][ T3811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.46'. [ 74.838608][ T3813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.895686][ T3816] netlink: 100 bytes leftover after parsing attributes in process `syz.3.46'. [ 74.926550][ T3816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.46'. [ 75.109112][ T3821] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.262029][ T3827] loop0: detected capacity change from 0 to 2048 [ 75.384554][ T3827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.870282][ T3567] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.908482][ T3567] EXT4-fs error (device loop0): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 75.970436][ T3567] EXT4-fs error (device loop0): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 77.470370][ T3859] loop4: detected capacity change from 0 to 2048 [ 77.481910][ T3606] vhci_hcd: vhci_device speed not set [ 77.734995][ T3859] EXT4-fs (loop4): Unrecognized mount option "context=root" or missing value [ 78.128953][ T3567] syz-executor (3567) used greatest stack depth: 19448 bytes left [ 78.322463][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.604472][ T3884] loop1: detected capacity change from 0 to 256 [ 79.061264][ T3884] exFAT-fs (loop1): Invalid exboot-signature(sector = 6): 0x01550000 [ 79.077683][ T3884] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab27) [ 79.088370][ T3884] exFAT-fs (loop1): invalid boot region [ 79.093997][ T3884] exFAT-fs (loop1): failed to recognize exfat type [ 81.415866][ T7] cfg80211: failed to load regulatory.db [ 81.460866][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.599121][ T3905] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 81.708660][ T3905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.780910][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.827158][ T3914] loop2: detected capacity change from 0 to 1024 [ 81.832557][ T3910] wlan1: mtu less than device minimum [ 81.921999][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.158064][ T3914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.192530][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 82.192545][ T26] audit: type=1326 audit(1727320123.933:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3925 comm="syz.1.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32402f3f39 code=0x0 [ 82.216985][ T3914] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.68: inode #0: comm syz.2.68: iget: illegal inode # [ 82.247174][ T3914] EXT4-fs (loop2): Remounting filesystem read-only [ 82.247199][ T3914] EXT4-fs (loop2): get orphan inode failed [ 82.251218][ T3914] EXT4-fs (loop2): mount failed [ 82.407190][ T3887] chnl_net:caif_netlink_parms(): no params data found [ 83.095542][ T3608] Bluetooth: hci0: command 0x0409 tx timeout [ 84.211724][ T3967] loop3: detected capacity change from 0 to 512 [ 84.355849][ T3967] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 84.355849][ T3967] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 84.355849][ T3967] [ 84.483745][ T3974] loop2: detected capacity change from 0 to 1024 [ 84.540435][ T3967] EXT4-fs error (device loop3): ext4_quota_enable:6387: comm syz.3.78: inode #16777216: comm syz.3.78: iget: illegal inode # [ 84.554979][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569685][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.579641][ T3887] device bridge_slave_0 entered promiscuous mode [ 84.588943][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.596553][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.605142][ T3887] device bridge_slave_1 entered promiscuous mode [ 84.624184][ T3974] EXT4-fs (loop2): Ignoring removed nobh option [ 84.660254][ T3974] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.669182][ T3967] EXT4-fs error (device loop3): ext4_quota_enable:6390: comm syz.3.78: Bad quota inode: 16777216, type: 2 [ 84.718792][ T3967] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 84.771988][ T3967] EXT4-fs (loop3): mount failed [ 84.780336][ T3974] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 84.808529][ T3887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.888036][ T3887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.112853][ T3610] Bluetooth: hci0: command 0x041b tx timeout [ 85.131197][ T3887] team0: Port device team_slave_0 added [ 86.871697][ T3887] team0: Port device team_slave_1 added [ 86.942491][ T3998] loop3: detected capacity change from 0 to 512 [ 86.943172][ T3999] loop4: detected capacity change from 0 to 128 [ 87.065535][ T3998] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 87.087381][ T3887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.094389][ T3887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.191924][ T3998] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext2 [ 87.211774][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 87.234766][ T3887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.240188][ T4001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 87.255737][ T3887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.262834][ T3887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.683003][ T26] audit: type=1800 audit(1727320129.380:41): pid=4004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="bus" dev="loop4" ino=1048594 res=0 errno=0 [ 87.762258][ T3887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.996224][ T4005] kAFS: unable to lookup cell '.,' [ 88.237570][ T4010] capability: warning: `syz.2.85' uses deprecated v2 capabilities in a way that may be insecure [ 88.437631][ T3887] device hsr_slave_0 entered promiscuous mode [ 88.445402][ T3887] device hsr_slave_1 entered promiscuous mode [ 88.456912][ T3887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.466569][ T3887] Cannot create hsr debugfs directory [ 88.715260][ T4016] loop1: detected capacity change from 0 to 512 [ 89.224554][ T3610] Bluetooth: hci0: command 0x0419 tx timeout [ 89.886219][ T4016] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.972309][ T4016] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 90.000572][ T4027] loop3: detected capacity change from 0 to 32768 [ 90.219595][ T4040] fuse: Unknown parameter '0x0000000000000006' [ 90.331276][ T4027] XFS (loop3): Mounting V5 Filesystem [ 90.648461][ T4027] XFS (loop3): Ending clean mount [ 90.759570][ T4027] XFS (loop3): Quotacheck needed: Please wait. [ 90.881162][ T4027] XFS (loop3): Quotacheck: Done. [ 91.097044][ T9] device hsr_slave_0 left promiscuous mode [ 91.143586][ T9] device hsr_slave_1 left promiscuous mode [ 91.162864][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.187004][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.202504][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.214603][ T4059] loop4: detected capacity change from 0 to 8192 [ 91.226950][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.268882][ T4059] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 91.306713][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.315558][ T4059] REISERFS (device loop4): using ordered data mode [ 91.323377][ T9] device bridge_slave_1 left promiscuous mode [ 91.329698][ T4059] reiserfs: using flush barriers [ 91.337088][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.357617][ T4059] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.378663][ T4059] REISERFS (device loop4): checking transaction log (loop4) [ 91.396697][ T9] device bridge_slave_0 left promiscuous mode [ 91.410682][ T23] usb 4-1: device descriptor read/64, error -71 [ 91.417175][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.433536][ T4059] REISERFS (device loop4): Using r5 hash to sort names [ 91.454962][ T4059] reiserfs: enabling write barrier flush mode [ 91.492048][ T4059] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 91.536076][ T9] device veth1_macvtap left promiscuous mode [ 91.546666][ T9] device veth0_macvtap left promiscuous mode [ 91.549162][ T26] audit: type=1800 audit(1727320133.402:42): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="cpuset.memory_pressure_enabled" dev="loop4" ino=2 res=0 errno=0 [ 91.553538][ T9] device veth1_vlan left promiscuous mode [ 91.583073][ T3611] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.608172][ T9] device veth0_vlan left promiscuous mode [ 91.619063][ T26] audit: type=1800 audit(1727320133.452:43): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 91.681374][ T4071] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 5 0(1) DIR], item_len 35, item_location 3241, free_space(entry_count) 2 [ 91.691974][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.717100][ T4071] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 91.732608][ T4071] REISERFS (device loop4): Remounting filesystem read-only [ 91.757165][ T26] audit: type=1326 audit(1727320133.614:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4058 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x0 [ 91.787127][ T4071] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 5 0x0 SD] stat data [ 91.839993][ T4059] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 5 0(1) DIR], item_len 35, item_location 3241, free_space(entry_count) 2 [ 91.856900][ T3611] usb 3-1: Using ep0 maxpacket: 32 [ 91.866521][ T4059] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 91.887450][ T4059] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 91.915813][ T23] usb 4-1: device descriptor read/64, error -71 [ 91.974654][ T3578] XFS (loop3): Unmounting Filesystem [ 92.048405][ T23] usb usb4-port1: attempt power cycle [ 92.173751][ T3611] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 92.190925][ T3611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.216614][ T3611] usb 3-1: Product: syz [ 92.221830][ T3611] usb 3-1: Manufacturer: syz [ 92.230640][ T3611] usb 3-1: SerialNumber: syz [ 92.290594][ T3611] usb 3-1: config 0 descriptor?? [ 92.350485][ T3611] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 92.366423][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 92.379507][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 92.437653][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 92.464016][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 92.487910][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 92.510632][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 92.559438][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 92.612457][ T3611] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 92.650991][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 92.669116][ T3610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.685614][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 92.705927][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 92.718564][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 92.729601][ T3611] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 92.902912][ T4078] loop3: detected capacity change from 0 to 32768 [ 92.941905][ T3611] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 92.973208][ T9] team0 (unregistering): Port device team_slave_1 removed [ 93.005688][ T4078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.97 (4078) [ 93.018500][ T3611] usb 3-1: USB disconnect, device number 2 [ 93.060952][ T3611] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 93.089660][ T3611] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 93.108185][ T3611] keyspan 3-1:0.0: device disconnected [ 93.145191][ T3610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.171918][ T3610] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.197209][ T4078] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.199406][ T9] team0 (unregistering): Port device team_slave_0 removed [ 93.206770][ T4078] BTRFS info (device loop3): using free space tree [ 93.222267][ T4078] BTRFS info (device loop3): has skinny extents [ 93.246099][ T3610] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.288792][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.323299][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.335744][ T3610] usb 5-1: config 0 descriptor?? [ 93.438484][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.545015][ T4078] BTRFS info (device loop3): enabling ssd optimizations [ 93.872111][ T4106] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.970595][ C0] sched: RT throttling activated [ 95.192251][ T9] bond0 (unregistering): Released all slaves [ 95.275031][ T3573] block nbd2: Receive control failed (result -107) [ 95.315640][ T4114] nbd2: detected capacity change from 0 to 15960 [ 95.336067][ T150] block nbd2: Dead connection, failed to find a fallback [ 95.344691][ T150] block nbd2: shutting down sockets [ 95.352139][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.364644][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.374119][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.385356][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.393393][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.404904][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.418592][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.430208][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.438674][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.453075][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.467704][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.478779][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.493110][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.505125][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.513198][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.524728][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.539588][ T3561] ldm_validate_partition_table(): Disk read failed. [ 95.546726][ T3610] usbhid 5-1:0.0: can't add hid device: -71 [ 95.558050][ T3610] usbhid: probe of 5-1:0.0 failed with error -71 [ 95.565437][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.576453][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.583554][ T4121] loop4: detected capacity change from 0 to 128 [ 95.584745][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.602704][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.609078][ T3610] usb 5-1: USB disconnect, device number 2 [ 95.613728][ T3561] Dev nbd2: unable to read RDB block 0 [ 95.624239][ T3561] nbd2: unable to read partition table [ 95.650783][ T3561] ldm_validate_partition_table(): Disk read failed. [ 95.658030][ T3561] Dev nbd2: unable to read RDB block 0 [ 95.664399][ T3561] nbd2: unable to read partition table [ 95.759526][ T4121] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 96.631215][ T4143] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 96.651063][ T4142] loop1: detected capacity change from 0 to 1024 [ 96.737570][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 97.872627][ T3887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.978079][ T4142] hfsplus: bad catalog entry type [ 98.012948][ T3887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.052239][ T3887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.097331][ T3887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.379848][ T4195] loop1: detected capacity change from 0 to 512 [ 99.431209][ T3887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.468268][ T4195] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 99.511730][ T4195] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 99.514491][ T3887] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.538778][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.559061][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.598757][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.606821][ T4195] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 99.606960][ T4195] System zones: 1-12 [ 99.615846][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.634829][ T4195] [ 99.642600][ T4195] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.116: corrupted in-inode xattr [ 99.655733][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.662861][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.666608][ T4195] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.116: couldn't read orphan inode 15 (err -117) [ 99.671251][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.691786][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.700802][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.707888][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.720831][ T4195] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 99.745594][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.754539][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.778167][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.786847][ T1076] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.841874][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.854012][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.863925][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.873582][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.886062][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.919448][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.938211][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.967157][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.993913][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.030414][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.046572][ T4206] netlink: 664 bytes leftover after parsing attributes in process `syz.3.120'. [ 100.174349][ T1076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.197488][ T1076] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 100.280126][ T4210] loop3: detected capacity change from 0 to 512 [ 100.309300][ T1076] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.335357][ T1076] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.362152][ T1076] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.472146][ T4210] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 100.501793][ T4210] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 100.602493][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.615940][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.663816][ T3887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.675710][ T1076] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.684940][ T1076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.739579][ T1076] usb 3-1: Product: syz [ 100.743799][ T1076] usb 3-1: Manufacturer: syz [ 100.766403][ T1076] usb 3-1: SerialNumber: syz [ 100.923214][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.964752][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.539295][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.590164][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.662714][ T3887] device veth0_vlan entered promiscuous mode [ 101.694063][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.704776][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.717626][ T3887] device veth1_vlan entered promiscuous mode [ 101.754974][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.814413][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.846579][ T3887] device veth0_macvtap entered promiscuous mode [ 101.857775][ T4229] loop1: detected capacity change from 0 to 16 [ 101.878572][ T3887] device veth1_macvtap entered promiscuous mode [ 101.903046][ T4228] sp0: Synchronizing with TNC [ 101.927394][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.964873][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.986389][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.986775][ T4228] nvme_fabrics: missing parameter 'transport=%s' [ 102.001432][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.018940][ T4228] nvme_fabrics: missing parameter 'nqn=%s' [ 102.028954][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.058598][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.079463][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.099207][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.110967][ T4227] [U] è` [ 102.122300][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.142373][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.157510][ T4229] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.192536][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.222849][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.253744][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.273762][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.284581][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.294528][ T3887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.305162][ T3887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.317264][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.325173][ T1076] cdc_ncm 3-1:1.0: bind() failure [ 102.363299][ T1076] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 102.378961][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.391687][ T1076] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 102.411638][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.427252][ T1076] usbtest: probe of 3-1:1.1 failed with error -71 [ 102.427929][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.458738][ T1076] usb 3-1: USB disconnect, device number 3 [ 102.464530][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.476908][ T3639] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.496380][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.527623][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.551429][ T3887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.585521][ T3887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.604678][ T3887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623850][ T3887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.781843][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.820889][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.853092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.882187][ T3639] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.898868][ T3639] usb 2-1: config 179 has no interface number 0 [ 102.912825][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.920044][ T3639] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 102.930337][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.964426][ T3639] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 102.984809][ T3639] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 103.007056][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.011429][ T3639] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.045591][ T3639] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 103.064824][ T3639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.144299][ T4225] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.201551][ T4225] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.554278][ T4242] tipc: Started in network mode [ 103.559551][ T4242] tipc: Node identity 000000000000003a0000400000000001, cluster identity 4711 [ 103.630771][ T4242] tipc: Enabling of bearer rejected, failed to enable media [ 103.772235][ T3639] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 103.794907][ T3639] usb 2-1: USB disconnect, device number 2 [ 103.812959][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.822241][ T3639] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 105.792278][ T4278] loop0: detected capacity change from 0 to 1024 [ 106.029014][ T4296] loop3: detected capacity change from 0 to 1024 [ 106.111780][ T4296] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 106.146028][ T4302] loop0: detected capacity change from 0 to 256 [ 106.182007][ T4296] EXT4-fs (loop3): group descriptors corrupted! [ 106.221800][ T3606] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.242994][ T4302] FAT-fs (loop0): Unrecognized mount option "codepag" or missing value [ 106.555714][ T4302] loop0: detected capacity change from 0 to 8 [ 106.611500][ T3606] usb 3-1: New USB device found, idVendor=9710, idProduct=7843, bcdDevice= 7.b4 [ 106.651006][ T3606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.659865][ T4302] unable to read inode lookup table [ 106.677020][ T3606] usb 3-1: config 0 descriptor?? [ 106.751482][ T3606] mos7840 3-1:0.0: required endpoints missing [ 106.803166][ T4323] UBIFS error (pid: 4323): cannot open "ubifs", error -22 [ 106.879457][ T4132] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.986645][ T4338] loop0: detected capacity change from 0 to 256 [ 106.992644][ T3606] usb 3-1: USB disconnect, device number 4 [ 107.407792][ T4132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.464660][ T4132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.765023][ T4132] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 108.045536][ T4132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.061122][ T4346] loop4: detected capacity change from 0 to 1024 [ 108.159479][ T4132] usb 2-1: config 0 descriptor?? [ 108.287413][ T4360] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 110.190031][ T4326] udc-core: couldn't find an available UDC or it's busy [ 110.197115][ T4326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.216558][ T4377] loop4: detected capacity change from 0 to 1024 [ 111.008675][ T4377] EXT4-fs (loop4): Ignoring removed nobh option [ 111.021297][ T4132] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 111.036419][ T4372] loop0: detected capacity change from 0 to 2048 [ 111.043307][ T4132] samsung 0003:0419:0600.0001: unknown main item tag 0x4 [ 111.055946][ T4377] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.067013][ T4132] samsung 0003:0419:0600.0001: item fetching failed at offset 4/5 [ 111.076407][ T4132] samsung 0003:0419:0600.0001: parse failed [ 111.086071][ T4132] samsung: probe of 0003:0419:0600.0001 failed with error -22 [ 111.168174][ T4377] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 111.264192][ T4372] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 111.326429][ T4372] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 111.589161][ T4391] fuse: Unknown parameter '0x0000000000000006' [ 113.103933][ T4135] usb 2-1: USB disconnect, device number 3 [ 113.512512][ T4401] loop1: detected capacity change from 0 to 32768 [ 114.319622][ T3639] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 114.328340][ T3639] Bluetooth: hci0: Injecting HCI hardware error event [ 114.354932][ T4401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.161 (4401) [ 114.371897][ T4402] loop4: detected capacity change from 0 to 2048 [ 114.406358][ T146] Bluetooth: hci0: hardware error 0x00 [ 114.515747][ T4401] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 114.524693][ T4401] BTRFS info (device loop1): using free space tree [ 114.531317][ T4401] BTRFS info (device loop1): has skinny extents [ 114.593721][ T4402] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 114.701557][ T4402] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 114.794252][ T4401] BTRFS info (device loop1): enabling ssd optimizations [ 114.991736][ T4402] EXT4-fs (loop4): shut down requested (2) [ 116.125655][ T1074] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.203955][ T4453] loop4: detected capacity change from 0 to 256 [ 116.352670][ T4453] exfat: Unknown parameter 'utfiscard' [ 116.485052][ T1074] usb 4-1: Using ep0 maxpacket: 8 [ 116.582052][ T4453] loop4: detected capacity change from 0 to 512 [ 116.615050][ T1074] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 116.624150][ T1074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.702335][ T1074] usb 4-1: config 0 descriptor?? [ 116.724583][ T4453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.167: inode #1: comm syz.4.167: iget: illegal inode # [ 116.825973][ T4453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.167: error while reading EA inode 1 err=-117 [ 116.919264][ T4453] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.050276][ T4453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.167: inode #1: comm syz.4.167: iget: illegal inode # [ 117.091976][ T4461] fuse: Unknown parameter '0x0000000000000006' [ 117.116190][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 117.128996][ T4453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.167: error while reading EA inode 1 err=-117 [ 117.204801][ T4442] device dummy0 entered promiscuous mode [ 117.217586][ T4453] EXT4-fs (loop4): 1 orphan inode deleted [ 117.252006][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 117.262947][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 117.435113][ T4462] device dummy0 left promiscuous mode [ 117.668023][ T4456] usb 4-1: USB disconnect, device number 5 [ 118.564413][ T4468] loop0: detected capacity change from 0 to 32768 [ 118.654248][ T4468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.173 (4468) [ 118.683825][ T4468] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.692666][ T4468] BTRFS info (device loop0): using free space tree [ 118.699209][ T4468] BTRFS info (device loop0): has skinny extents [ 118.751179][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.010412][ T4468] BTRFS info (device loop0): enabling ssd optimizations [ 119.021436][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 119.170886][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.204494][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 119.277321][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.350885][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 120.360774][ T7] usb 4-1: config 0 descriptor?? [ 120.411111][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 120.930981][ T4508] loop1: detected capacity change from 0 to 2048 [ 121.034197][ T4508] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 121.054920][ T4508] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 121.107925][ T4508] EXT4-fs (loop1): shut down requested (2) [ 121.444041][ T4523] loop2: detected capacity change from 0 to 256 [ 122.296283][ T7] gspca_vc032x: reg_w err -110 [ 122.301408][ T7] vc032x: probe of 4-1:0.0 failed with error -110 [ 122.316598][ T4523] exfat: Unknown parameter 'utfiscard' [ 122.320432][ T7] usb 4-1: USB disconnect, device number 6 [ 122.357395][ T4528] loop0: detected capacity change from 0 to 16 [ 122.403479][ T4523] loop2: detected capacity change from 0 to 512 [ 122.432995][ T4528] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.749647][ T4523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.182: inode #1: comm syz.2.182: iget: illegal inode # [ 122.767140][ T3611] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.834001][ T4535] attempt to access beyond end of device [ 122.834001][ T4535] loop0: rw=0, want=24, limit=16 [ 123.522408][ T4523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.182: error while reading EA inode 1 err=-117 [ 123.557341][ T4523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.182: inode #1: comm syz.2.182: iget: illegal inode # [ 123.620152][ T4523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.182: error while reading EA inode 1 err=-117 [ 123.789034][ T4523] EXT4-fs (loop2): 1 orphan inode deleted [ 123.804379][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 123.831856][ T3611] usb 2-1: Using ep0 maxpacket: 8 [ 124.318563][ T4540] loop3: detected capacity change from 0 to 2048 [ 124.690067][ T3611] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 124.714380][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.784065][ T3611] usb 2-1: config 0 descriptor?? [ 124.886231][ T4540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.714374][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 125.773727][ T4526] device dummy0 entered promiscuous mode [ 125.795646][ T4556] loop3: detected capacity change from 0 to 512 [ 125.816553][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 125.841411][ T4557] device dummy0 left promiscuous mode [ 125.917187][ T4556] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 125.949914][ T4556] ext4 filesystem being mounted at /42/bus supports timestamps until 2038 (0x7fffffff) [ 125.970823][ T3608] usb 2-1: USB disconnect, device number 4 [ 126.822876][ T4566] loop0: detected capacity change from 0 to 2048 [ 126.855126][ T4569] loop3: detected capacity change from 0 to 2048 [ 126.989376][ T4569] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 127.235667][ T4569] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 127.324966][ T4569] EXT4-fs (loop3): shut down requested (2) [ 127.481955][ T4581] netlink: 'syz.1.196': attribute type 15 has an invalid length. [ 130.193922][ T4588] debugfs: Directory 'netdev:nicvf0' with parent 'phy11' already present! [ 130.275393][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 130.368050][ T4593] loop1: detected capacity change from 0 to 2048 [ 130.785258][ T4593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.801457][ T4597] fuse: Unknown parameter '0x0000000000000006' [ 130.817598][ T4584] loop4: detected capacity change from 0 to 8192 [ 130.978512][ T4584] ntfs3: Unknown parameter 'Î3øÿÿÅÇ·(Å' [ 131.470200][ T4605] loop0: detected capacity change from 0 to 512 [ 131.880228][ T4605] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 131.916248][ T4605] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 132.204014][ T4615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.454464][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.460850][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.804208][ T4622] loop0: detected capacity change from 0 to 1024 [ 132.956396][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 133.074833][ T4623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 133.600896][ T26] audit: type=1326 audit(1727320175.595:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 133.669037][ T3622] hfsplus: b-tree write err: -5, ino 4 [ 133.678605][ T26] audit: type=1326 audit(1727320175.645:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 133.701601][ T26] audit: type=1326 audit(1727320175.645:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 133.744297][ T26] audit: type=1326 audit(1727320175.645:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 133.784272][ T4627] loop4: detected capacity change from 0 to 512 [ 135.821869][ T26] audit: type=1326 audit(1727320175.645:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 136.500474][ T26] audit: type=1326 audit(1727320175.645:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 136.595967][ T26] audit: type=1326 audit(1727320175.645:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 136.867793][ T26] audit: type=1326 audit(1727320175.645:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 136.923481][ T26] audit: type=1326 audit(1727320175.645:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 137.250155][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.486523][ T26] audit: type=1326 audit(1727320175.645:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbede2b2f39 code=0x7ffc0000 [ 137.508634][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.516304][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 137.652451][ T4654] loop0: detected capacity change from 0 to 64 [ 137.734516][ T4656] loop1: detected capacity change from 0 to 2048 [ 137.786069][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 137.800426][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.825556][ T23] usb 4-1: Product: syz [ 137.830175][ T23] usb 4-1: Manufacturer: syz [ 137.836198][ T23] usb 4-1: SerialNumber: syz [ 137.863001][ T23] usb 4-1: config 0 descriptor?? [ 137.883911][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 137.918271][ T4656] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 138.118019][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.240296][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 139.208115][ T4674] loop1: detected capacity change from 0 to 32768 [ 139.221338][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 139.239184][ T23] usb 4-1: USB disconnect, device number 7 [ 139.363866][ T4681] lo speed is unknown, defaulting to 1000 [ 139.374770][ T4681] lo speed is unknown, defaulting to 1000 [ 139.406107][ T4674] XFS (loop1): Mounting V5 Filesystem [ 139.417880][ T4681] lo speed is unknown, defaulting to 1000 [ 139.474164][ T4688] loop4: detected capacity change from 0 to 2048 [ 139.516664][ T4674] XFS (loop1): Ending clean mount [ 139.523754][ T4674] XFS (loop1): Quotacheck needed: Please wait. [ 139.607184][ T4674] XFS (loop1): Quotacheck: Done. [ 140.564322][ T4135] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.703873][ T4697] netlink: 108 bytes leftover after parsing attributes in process `syz.4.225'. [ 140.760501][ T4699] loop4: detected capacity change from 0 to 256 [ 140.811618][ T4681] infiniband syz1: set active [ 140.822954][ T4681] infiniband syz1: added lo [ 140.842575][ T2047] lo speed is unknown, defaulting to 1000 [ 140.877907][ T4681] infiniband syz1: Couldn't open port 1 [ 140.885052][ T4699] exfat: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000000' [ 140.945827][ T4135] usb 2-1: device descriptor read/64, error -71 [ 140.996126][ T4681] RDS/IB: syz1: added [ 141.054329][ T4681] smc: adding ib device syz1 with port count 1 [ 141.183604][ T4704] loop3: detected capacity change from 0 to 2048 [ 141.219500][ T4681] smc: ib device syz1 port 1 has pnetid [ 141.231403][ T23] lo speed is unknown, defaulting to 1000 [ 141.264783][ T4681] lo speed is unknown, defaulting to 1000 [ 141.334907][ T4135] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.630089][ T4135] usb 2-1: device descriptor read/64, error -71 [ 141.701268][ T4697] loop4: detected capacity change from 0 to 512 [ 141.701397][ T3571] XFS (loop1): Unmounting Filesystem [ 141.746803][ T4135] usb usb2-port1: attempt power cycle [ 141.772351][ T4697] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 141.806090][ T4697] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 141.806781][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 141.827723][ T4704] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 141.849448][ T4701] EXT4-fs (loop3): shut down requested (2) [ 142.079890][ T4697] loop4: detected capacity change from 0 to 1764 [ 142.323682][ T4709] loop3: detected capacity change from 0 to 2048 [ 142.335983][ T4681] lo speed is unknown, defaulting to 1000 [ 142.483178][ T4709] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 142.531755][ T4709] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 142.586362][ T4713] loop1: detected capacity change from 0 to 4096 [ 142.772792][ T4681] lo speed is unknown, defaulting to 1000 [ 142.865266][ T4713] EXT4-fs (loop1): Invalid commit interval 67106816, must be smaller than 21474836 [ 143.032337][ T4132] Bluetooth: hci5: command 0x0409 tx timeout [ 144.514315][ T4681] lo speed is unknown, defaulting to 1000 [ 144.616580][ T4702] chnl_net:caif_netlink_parms(): no params data found [ 144.807834][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.841634][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.868039][ T4702] device bridge_slave_0 entered promiscuous mode [ 144.891607][ T4681] lo speed is unknown, defaulting to 1000 [ 144.900979][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.918838][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.938797][ T4702] device bridge_slave_1 entered promiscuous mode [ 144.981106][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.003300][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.047602][ T4132] Bluetooth: hci5: command 0x041b tx timeout [ 145.064124][ T4702] team0: Port device team_slave_0 added [ 145.080296][ T4702] team0: Port device team_slave_1 added [ 145.157236][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.172064][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.209862][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.221796][ T4681] lo speed is unknown, defaulting to 1000 [ 145.231073][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.247658][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.301740][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.459308][ T4702] device hsr_slave_0 entered promiscuous mode [ 145.480144][ T4702] device hsr_slave_1 entered promiscuous mode [ 145.504491][ T4702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.540579][ T4702] Cannot create hsr debugfs directory [ 145.776954][ T4702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.945380][ T4702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.071469][ T4702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.166161][ T4702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.374339][ T4741] loop1: detected capacity change from 0 to 40427 [ 146.578834][ T4750] loop4: detected capacity change from 0 to 2048 [ 147.096850][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 147.353469][ T4748] loop3: detected capacity change from 0 to 2048 [ 147.388568][ T4741] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.396321][ T4750] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 147.409875][ T4750] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 147.438607][ T4749] EXT4-fs (loop4): shut down requested (2) [ 147.466311][ T4702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.493575][ T4702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.532146][ T4702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.578726][ T4748] loop3: detected capacity change from 0 to 128 [ 147.606400][ T4702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.660555][ T4741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.918703][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 147.918788][ T26] audit: type=1800 audit(1727320190.216:91): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file0" dev="loop3" ino=1048597 res=0 errno=0 [ 149.186277][ T4135] Bluetooth: hci5: command 0x0419 tx timeout [ 150.190686][ T3571] attempt to access beyond end of device [ 150.190686][ T3571] loop1: rw=2049, want=45104, limit=40427 [ 150.210703][ T4770] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 150.298914][ T4770] syz.0.239[4770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.299071][ T4770] syz.0.239[4770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.424179][ T4770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.239'. [ 150.447796][ T4772] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 150.456666][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.527929][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.546449][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.566728][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.595536][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.613040][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.621617][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.628762][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.693073][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.742626][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.787025][ T4779] loop4: detected capacity change from 0 to 256 [ 150.802083][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.842734][ T4781] loop3: detected capacity change from 0 to 1024 [ 150.880384][ T4779] exfat: Deprecated parameter 'utf8' [ 150.892737][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.899898][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.956115][ T4779] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 150.980285][ T4781] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 151.097615][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.169890][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.195765][ T4779] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 151.240380][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.268861][ T4782] loop0: detected capacity change from 0 to 8192 [ 151.298696][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.327742][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.356853][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.395076][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.440557][ T4782] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 151.489815][ T4782] REISERFS (device loop0): using ordered data mode [ 151.496596][ T4782] reiserfs: using flush barriers [ 151.522017][ T4782] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.552087][ T4782] REISERFS (device loop0): checking transaction log (loop0) [ 151.571096][ T4782] REISERFS (device loop0): Using r5 hash to sort names [ 151.581156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.622334][ T4782] reiserfs: enabling write barrier flush mode [ 151.648935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.682765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.706822][ T4782] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 151.719690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.744384][ T26] audit: type=1800 audit(1727320194.081:92): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.243" name="cpuset.memory_pressure_enabled" dev="loop0" ino=2 res=0 errno=0 [ 151.769898][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.813630][ T26] audit: type=1800 audit(1727320194.081:93): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.243" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 151.841231][ T4796] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 5 0(1) DIR], item_len 35, item_location 3241, free_space(entry_count) 2 [ 151.905544][ T4796] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 151.964761][ T4796] REISERFS (device loop0): Remounting filesystem read-only [ 152.007447][ T4796] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 5 0x0 SD] stat data [ 152.045531][ T3574] syz-executor (3574) used greatest stack depth: 18776 bytes left [ 152.110080][ T3722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.287572][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.318088][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.364713][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.427258][ T4808] syz.1.248[4808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.427711][ T4808] syz.1.248[4808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.222965][ T3722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.553293][ T3722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.715250][ T4821] loop1: detected capacity change from 0 to 64 [ 154.210529][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.500857][ T4821] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop1 [ 154.756471][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.984720][ T3722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.089957][ T4814] lo speed is unknown, defaulting to 1000 [ 155.134885][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.148414][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.170122][ T4702] device veth0_vlan entered promiscuous mode [ 155.178530][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.205295][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.236959][ T4702] device veth1_vlan entered promiscuous mode [ 155.430439][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.459584][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.546765][ T4702] device veth0_macvtap entered promiscuous mode [ 155.563880][ T2047] Bluetooth: hci2: command 0x0409 tx timeout [ 155.601886][ T4702] device veth1_macvtap entered promiscuous mode [ 155.672131][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.753039][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.788545][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.836746][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.890806][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.937965][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.977822][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.029982][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.073225][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.114134][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.173578][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.217972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.235254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.268802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.334343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.349379][ T4822] loop0: detected capacity change from 0 to 32768 [ 156.633873][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.651607][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.662798][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.686619][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.702019][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.728289][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.756826][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.785477][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.808963][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.834526][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.869006][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.916210][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.928449][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.970388][ T4702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.993319][ T4702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.026220][ T4702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.047426][ T4702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.482498][ T4853] loop3: detected capacity change from 0 to 512 [ 157.527111][ T4814] chnl_net:caif_netlink_parms(): no params data found [ 157.600139][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.667874][ T2047] Bluetooth: hci2: command 0x041b tx timeout [ 157.686071][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.719465][ T4860] loop3: detected capacity change from 0 to 512 [ 157.819122][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.841059][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.073081][ T4870] unsupported nlmsg_type 40 [ 158.094333][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.106258][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.336964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.407962][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.415610][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.425072][ T4814] device bridge_slave_0 entered promiscuous mode [ 158.635126][ T3722] bond0: (slave wlan1): Releasing backup interface [ 158.889162][ T4891] syz.3.261[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.889264][ T4891] syz.3.261[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.940534][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 160.308521][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.330088][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.374027][ T4814] device bridge_slave_1 entered promiscuous mode [ 160.578045][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.459367][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.838299][ T4814] team0: Port device team_slave_0 added [ 161.883764][ T4814] team0: Port device team_slave_1 added [ 161.999960][ T4824] Bluetooth: hci2: command 0x0419 tx timeout [ 162.180434][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.323477][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.246229][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.568827][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.627459][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.250624][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.293446][ T4932] loop0: detected capacity change from 0 to 64 [ 164.351094][ T3722] device hsr_slave_0 left promiscuous mode [ 164.399126][ T3722] device hsr_slave_1 left promiscuous mode [ 164.405929][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.489291][ T3722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.548390][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.577998][ T3722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.625642][ T3722] device bridge_slave_1 left promiscuous mode [ 164.634322][ T3722] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.673081][ T3722] device bridge_slave_0 left promiscuous mode [ 164.694652][ T3722] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.766308][ T3722] device veth1_macvtap left promiscuous mode [ 164.772383][ T3722] device veth0_macvtap left promiscuous mode [ 164.787384][ T3722] device veth1_vlan left promiscuous mode [ 164.805567][ T3722] device veth0_vlan left promiscuous mode [ 164.912025][ T4940] loop0: detected capacity change from 0 to 512 [ 164.999063][ T4940] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 164.999063][ T4940] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 164.999063][ T4940] [ 166.176290][ T4940] EXT4-fs (loop0): 1 orphan inode deleted [ 166.273875][ T4940] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 166.693861][ T4940] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038 (0x7fffffff) [ 170.399903][ T4970] loop0: detected capacity change from 0 to 4096 [ 170.431561][ T3722] team0 (unregistering): Port device team_slave_1 removed [ 170.461495][ T3722] team0 (unregistering): Port device team_slave_0 removed [ 170.474004][ T4970] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 170.507412][ T4970] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 170.520909][ T3722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.540211][ T4970] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 170.561313][ T3722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.729641][ T3722] bond0 (unregistering): Released all slaves [ 170.805090][ T4976] loop0: detected capacity change from 0 to 256 [ 171.184739][ T4976] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.665652][ T4814] device hsr_slave_0 entered promiscuous mode [ 172.065431][ T4989] loop1: detected capacity change from 0 to 2048 [ 172.391077][ T4989] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 172.406096][ T4989] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 172.463250][ T4989] EXT4-fs (loop1): shut down requested (2) [ 172.708847][ T3611] Bluetooth: hci2: command 0x0411 tx timeout [ 172.716127][ T4814] device hsr_slave_1 entered promiscuous mode [ 174.033412][ T4991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.072027][ T5016] loop1: detected capacity change from 0 to 16 [ 174.106012][ T5014] loop3: detected capacity change from 0 to 256 [ 174.138470][ T4991] team0: Port device bond0 added [ 174.314743][ T5016] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 174.398006][ T5014] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 175.029704][ T5028] loop0: detected capacity change from 0 to 1024 [ 177.118727][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 177.192959][ T3611] Bluetooth: hci1: command 0x0406 tx timeout [ 177.458174][ T1186] hfsplus: b-tree write err: -5, ino 4 [ 177.695976][ T5039] mmap: syz.3.293 (5039): VmData 37474304 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 178.925330][ T5059] loop3: detected capacity change from 0 to 2048 [ 179.581588][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 179.641278][ T5066] netlink: 'syz.1.299': attribute type 4 has an invalid length. [ 179.679233][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 179.692269][ T5059] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 179.709273][ T5054] EXT4-fs (loop3): shut down requested (2) [ 179.723538][ T5066] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.299'. [ 179.741916][ T5070] ipt_REJECT: ECHOREPLY no longer supported. [ 179.948841][ T5075] loop2: detected capacity change from 0 to 16 [ 179.997042][ T5075] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 180.214135][ T3609] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.394271][ T5082] loop3: detected capacity change from 0 to 1024 [ 181.063868][ T1186] hfsplus: b-tree write err: -5, ino 4 [ 181.141978][ T5088] loop1: detected capacity change from 0 to 512 [ 181.183728][ T4814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.212105][ T5088] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 181.233137][ T3609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.248040][ T3609] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 181.257587][ T3609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.266796][ T5088] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.280704][ T3609] usb 1-1: config 0 descriptor?? [ 181.291068][ T4814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.366337][ T4814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.401622][ T5088] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 181.449929][ T4814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.465005][ T5088] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 181.507510][ T5088] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.304: bg 0: block 40: padding at end of block bitmap is not set [ 181.614416][ T5088] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 181.635447][ T5099] netlink: 'syz.2.305': attribute type 30 has an invalid length. [ 181.687924][ T5088] EXT4-fs (loop1): 1 truncate cleaned up [ 181.712561][ T5088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.724496][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.757088][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.764031][ T3609] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 181.792326][ T3609] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 181.793828][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.799411][ T3609] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 181.952659][ T4814] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.003218][ T3609] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 182.010712][ T3609] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x0 [ 182.042285][ T3609] corsair 0003:1B1C:1B3E.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 182.095010][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.322819][ T5108] team0: Port device bond0 added [ 182.370131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.400322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.458355][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.465599][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.554552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.627213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.682447][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.689586][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.759734][ T3611] usb 1-1: USB disconnect, device number 2 [ 182.787728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.919222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.031045][ T5120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 183.087374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.129153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.859529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.902869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.114951][ T4814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.202677][ T4814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.395748][ T5136] loop1: detected capacity change from 0 to 256 [ 184.415180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.448949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.634005][ T5142] loop2: detected capacity change from 0 to 2048 [ 184.641721][ T2988] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.016847][ T2988] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 185.061088][ T2988] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.144622][ T2988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.252303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.273427][ T2988] usb 4-1: config 0 descriptor?? [ 185.294387][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 185.304980][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 185.307676][ T5142] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 185.318915][ T5131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.341031][ T5139] EXT4-fs (loop2): shut down requested (2) [ 185.362704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.402459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.539348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.600865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.759271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.804908][ T2988] ath6kl: Failed to submit usb control message: -71 [ 185.806310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.812060][ T2988] ath6kl: unable to send the bmi data to the device: -71 [ 185.864967][ T2988] ath6kl: Unable to send get target info: -71 [ 186.112643][ T5162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.657094][ T5162] team0: Port device bond0 added [ 186.669428][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.024930][ T5171] loop1: detected capacity change from 0 to 40427 [ 187.378972][ T5171] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.518870][ T5171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.301052][ T4824] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 188.397956][ T3571] attempt to access beyond end of device [ 188.397956][ T3571] loop1: rw=2049, want=45104, limit=40427 [ 188.446262][ T5200] loop2: detected capacity change from 0 to 512 [ 188.449374][ T5194] loop3: detected capacity change from 0 to 1764 [ 188.532850][ T2988] ath6kl: Failed to init ath6kl core: -71 [ 188.628030][ T5200] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 188.686432][ T5200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.750868][ T4824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.781360][ T4824] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 188.820931][ T4824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.832895][ T4824] usb 1-1: config 0 descriptor?? [ 188.867782][ T5200] EXT4-fs (loop2): 1 truncate cleaned up [ 188.878863][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.910156][ T5200] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.957524][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.965704][ T26] audit: type=1800 audit(1727320231.451:94): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.326" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 189.080098][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.105032][ T26] audit: type=1804 audit(1727320231.491:95): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.326" name="/newroot/16/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 189.156339][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.206734][ T4814] device veth0_vlan entered promiscuous mode [ 189.220783][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.247744][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.255530][ T26] audit: type=1804 audit(1727320231.501:96): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.326" name="/newroot/16/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 189.544484][ T4824] corsair 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 189.587663][ T4814] device veth1_vlan entered promiscuous mode [ 189.624870][ T4824] corsair 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 189.665535][ T4824] corsair 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 189.708940][ T4824] corsair 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 189.752846][ T4824] corsair 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 189.789604][ T4814] device veth0_macvtap entered promiscuous mode [ 189.820301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.843095][ T2988] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 189.862542][ T4824] corsair 0003:1B1C:1B3E.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 189.864846][ T2988] usb 4-1: USB disconnect, device number 8 [ 189.880188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.919803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.978591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.000352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.136825][ T4814] device veth1_macvtap entered promiscuous mode [ 190.156439][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.166966][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.177715][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.189055][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.198994][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.213351][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.358884][ T5231] loop1: detected capacity change from 0 to 2048 [ 190.379530][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.543381][ T5228] loop3: detected capacity change from 0 to 2048 [ 190.609309][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.785086][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.980360][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.017160][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.063716][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.114350][ T7] usb 1-1: USB disconnect, device number 3 [ 191.133538][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.147056][ T5231] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 191.160166][ T5231] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 191.222848][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.277903][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.332514][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.405435][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.488245][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.645806][ T5253] loop2: detected capacity change from 0 to 512 [ 191.910882][ T3609] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.970944][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.142066][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.203094][ T3609] usb 1-1: Using ep0 maxpacket: 16 [ 192.247535][ T3609] usb 1-1: no configurations [ 192.252275][ T3609] usb 1-1: can't read configurations, error -22 [ 192.278909][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.289424][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.300574][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.330035][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.368906][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.385938][ T5257] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.399301][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.441125][ T3609] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.442084][ T4814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.471511][ T4814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.481041][ T4814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.490037][ T4814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.492802][ T5263] loop1: detected capacity change from 0 to 256 [ 192.521014][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 192.639187][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.657050][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.696587][ T5253] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 192.733845][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.748186][ T3721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.835660][ T5263] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 192.841402][ T3609] usb 1-1: Using ep0 maxpacket: 16 [ 192.849719][ T3721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.899545][ T3609] usb 1-1: no configurations [ 192.904402][ T3609] usb 1-1: can't read configurations, error -22 [ 192.925790][ T3609] usb usb1-port1: attempt power cycle [ 192.966071][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.636612][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.643032][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.748833][ T5273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.816983][ T3609] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 194.152373][ T3609] usb 1-1: Using ep0 maxpacket: 16 [ 194.195630][ T3609] usb 1-1: no configurations [ 194.200299][ T3609] usb 1-1: can't read configurations, error -22 [ 194.391138][ T3609] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.646379][ T3609] usb 1-1: device descriptor read/8, error -71 [ 194.654954][ T5293] loop1: detected capacity change from 0 to 128 [ 194.780966][ T3609] usb usb1-port1: unable to enumerate USB device [ 194.959293][ T5293] FAT-fs (loop1): bogus number of FAT sectors [ 195.052158][ T5293] FAT-fs (loop1): Can't find a valid FAT filesystem [ 195.467610][ T3609] Bluetooth: hci6: command 0x1003 tx timeout [ 195.505727][ T3573] Bluetooth: hci6: sending frame failed (-49) [ 195.705420][ T5309] hub 9-0:1.0: USB hub found [ 195.722743][ T5309] hub 9-0:1.0: 8 ports detected [ 196.594828][ T5308] loop2: detected capacity change from 0 to 128 [ 197.239840][ T5322] loop4: detected capacity change from 0 to 2048 [ 198.419741][ T3609] Bluetooth: hci6: command 0x1001 tx timeout [ 198.426340][ T3573] Bluetooth: hci6: sending frame failed (-49) [ 198.549217][ T5322] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 198.563575][ T5322] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 198.577225][ T5308] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 198.740850][ T5308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.113841][ T26] audit: type=1326 audit(1727320240.843:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5346 comm="syz.0.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x0 [ 199.881134][ T5347] loop4: detected capacity change from 0 to 4096 [ 200.061930][ T5347] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 200.183114][ T5362] loop2: detected capacity change from 0 to 1024 [ 200.665479][ T2988] Bluetooth: hci6: command 0x1009 tx timeout [ 201.248014][ T5375] loop1: detected capacity change from 0 to 512 [ 201.493079][ T26] audit: type=1800 audit(1727320243.032:98): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.350" name=".log" dev="loop2" ino=27 res=0 errno=0 [ 201.554043][ T5375] EXT4-fs (loop1): 1 orphan inode deleted [ 201.727796][ T5375] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: none. [ 201.754333][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.837099][ T5375] netem: change failed [ 202.918937][ T5389] loop4: detected capacity change from 0 to 32768 [ 203.421520][ T5389] XFS (loop4): Mounting V5 Filesystem [ 203.621078][ T5419] loop1: detected capacity change from 0 to 2048 [ 203.675310][ T3645] hfsplus: b-tree write err: -5, ino 4 [ 204.396392][ T5419] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 204.409743][ T5419] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 204.522882][ T5389] XFS (loop4): Ending clean mount [ 204.530844][ T5389] XFS (loop4): Quotacheck needed: Please wait. [ 205.419215][ T5389] XFS (loop4): Quotacheck: Done. [ 205.509985][ T4814] XFS (loop4): Unmounting Filesystem [ 205.603585][ T5444] loop1: detected capacity change from 0 to 8192 [ 205.617015][ T5440] delete_channel: no stack [ 205.625259][ T5437] lo speed is unknown, defaulting to 1000 [ 205.814236][ T5444] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 205.847895][ T5444] REISERFS (device loop1): using ordered data mode [ 205.902782][ T5444] reiserfs: using flush barriers [ 205.917439][ T5444] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.005202][ T5444] REISERFS (device loop1): checking transaction log (loop1) [ 206.298286][ T5444] REISERFS (device loop1): Using tea hash to sort names [ 206.299700][ T5444] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 208.287318][ T2047] Bluetooth: hci6: command 0x0409 tx timeout [ 208.969438][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 209.255473][ T5437] chnl_net:caif_netlink_parms(): no params data found [ 209.498906][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.506791][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.515280][ T5437] device bridge_slave_0 entered promiscuous mode [ 209.543311][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.551132][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.560514][ T5437] device bridge_slave_1 entered promiscuous mode [ 209.572680][ T5482] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.371'. [ 209.698920][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.765266][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.962817][ T5437] team0: Port device team_slave_0 added [ 209.986239][ T5437] team0: Port device team_slave_1 added [ 210.056492][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.080523][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.152006][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.199116][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.223428][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.309012][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.450998][ T5437] device hsr_slave_0 entered promiscuous mode [ 210.491756][ T5437] device hsr_slave_1 entered promiscuous mode [ 210.510813][ T5437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.524966][ T3660] Bluetooth: hci6: command 0x041b tx timeout [ 210.531038][ T5437] Cannot create hsr debugfs directory [ 210.669286][ T5493] loop0: detected capacity change from 0 to 256 [ 210.732492][ T5493] exfat: Deprecated parameter 'utf8' [ 210.737935][ T5493] exfat: Deprecated parameter 'namecase' [ 210.757436][ T5493] exfat: Deprecated parameter 'namecase' [ 210.769366][ T5493] exfat: Deprecated parameter 'namecase' [ 210.944219][ T5493] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 212.066156][ T5437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.508191][ T5437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.638948][ T5437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.781202][ T5437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.819426][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 213.014637][ T5511] loop0: detected capacity change from 0 to 128 [ 213.225318][ T5516] loop1: detected capacity change from 0 to 256 [ 213.232945][ T5511] befs: (loop0): invalid magic header [ 213.313590][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 213.544178][ T5514] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'. [ 213.911912][ T5519] loop2: detected capacity change from 0 to 1024 [ 213.920235][ T5516] FAT-fs (loop1): Directory bread(block 64) failed [ 213.929042][ T5516] FAT-fs (loop1): Directory bread(block 65) failed [ 213.935773][ T5516] FAT-fs (loop1): Directory bread(block 66) failed [ 213.942353][ T5516] FAT-fs (loop1): Directory bread(block 67) failed [ 213.949023][ T5516] FAT-fs (loop1): Directory bread(block 68) failed [ 213.955621][ T5516] FAT-fs (loop1): Directory bread(block 69) failed [ 213.962307][ T5516] FAT-fs (loop1): Directory bread(block 70) failed [ 213.969220][ T5516] FAT-fs (loop1): Directory bread(block 71) failed [ 213.975836][ T5516] FAT-fs (loop1): Directory bread(block 72) failed [ 213.982465][ T5516] FAT-fs (loop1): Directory bread(block 73) failed [ 214.014969][ T5515] attempt to access beyond end of device [ 214.014969][ T5515] loop1: rw=0, want=1756, limit=256 [ 214.041193][ T5519] EXT4-fs (loop2): Ignoring removed orlov option [ 214.118787][ T5519] EXT4-fs (loop2): filesystem is read-only [ 214.159008][ T5437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.213350][ T5437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.240307][ T5519] EXT4-fs (loop2): #clusters per group too big: 8193 [ 214.243229][ T26] audit: type=1326 audit(1727320739.798:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.284252][ T5437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.311768][ T26] audit: type=1326 audit(1727320739.844:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.337698][ T5437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.365648][ T5524] loop4: detected capacity change from 0 to 2048 [ 214.435646][ T5524] loop4: p1 < > p4 [ 214.451383][ T26] audit: type=1326 audit(1727320739.844:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.503438][ T5524] loop4: p4 size 8388608 extends beyond EOD, truncated [ 214.511722][ T26] audit: type=1326 audit(1727320739.844:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.538663][ T26] audit: type=1326 audit(1727320739.844:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.562106][ T26] audit: type=1326 audit(1727320739.844:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.625207][ T26] audit: type=1326 audit(1727320739.844:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.647535][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.756933][ T26] audit: type=1326 audit(1727320739.844:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83121cdf39 code=0x7ffc0000 [ 214.784518][ T5533] loop1: detected capacity change from 0 to 17 [ 214.792841][ T26] audit: type=1326 audit(1727320739.854:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83121cc8d0 code=0x7ffc0000 [ 215.029384][ T3608] Bluetooth: hci6: command 0x0419 tx timeout [ 215.415833][ T5533] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 215.432938][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.469471][ T26] audit: type=1326 audit(1727320739.854:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83121cc8d0 code=0x7ffc0000 [ 215.502920][ T5533] BFS-fs: bfs_fill_super(): Impossible last inode number 229432 > 513 on loop1 [ 215.593916][ T5437] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.657264][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.665067][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.709286][ T4324] udevd[4324]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 215.850276][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.872541][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 215.907193][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.929890][ T5548] loop4: detected capacity change from 0 to 256 [ 215.994565][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.001756][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.186377][ T5553] loop0: detected capacity change from 0 to 2048 [ 216.816166][ T5548] exfat: Deprecated parameter 'utf8' [ 216.821554][ T5548] exfat: Deprecated parameter 'namecase' [ 216.827349][ T5548] exfat: Deprecated parameter 'namecase' [ 216.833094][ T5548] exfat: Deprecated parameter 'namecase' [ 216.853257][ T5548] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 216.866304][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.879825][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.888932][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.899349][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.899717][ T5553] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 216.906502][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.919506][ T5553] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 216.939931][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.949873][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.964799][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.981578][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.990792][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.000699][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.009799][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.018875][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.027904][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.123273][ T5563] netlink: 'syz.2.391': attribute type 62 has an invalid length. [ 217.150868][ T5564] device macvlan2 entered promiscuous mode [ 217.200876][ T5564] device virt_wifi0 entered promiscuous mode [ 217.727037][ T5564] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 217.755821][ T5437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.781583][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.804374][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.835252][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.088598][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 218.108225][ T4324] udevd[4324]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 218.871236][ T5579] loop2: detected capacity change from 0 to 512 [ 219.038564][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.196898][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.223771][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.244885][ T5579] EXT4-fs (loop2): 1 orphan inode deleted [ 219.273542][ T5583] ================================================================== [ 219.282425][ T5583] BUG: KASAN: use-after-free in mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 219.291029][ T5583] Read of size 4 at addr ffff8880661b9250 by task syz.0.396/5583 [ 219.298737][ T5583] [ 219.301050][ T5583] CPU: 0 PID: 5583 Comm: syz.0.396 Not tainted 5.15.167-syzkaller #0 [ 219.309134][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 219.319189][ T5583] Call Trace: [ 219.322460][ T5583] [ 219.325381][ T5583] dump_stack_lvl+0x1e3/0x2d0 [ 219.330059][ T5583] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 219.335687][ T5583] ? _printk+0xd1/0x120 [ 219.339839][ T5583] ? __wake_up_klogd+0xcc/0x100 [ 219.344703][ T5583] ? panic+0x860/0x860 [ 219.348762][ T5583] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 219.354223][ T5583] print_address_description+0x63/0x3b0 [ 219.359763][ T5583] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 219.361421][ T5579] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: none. [ 219.365997][ T5583] kasan_report+0x16b/0x1c0 [ 219.396431][ T5583] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 219.402749][ T5583] mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 219.408828][ T5583] ? mptcp_pm_nl_rm_subflow_received+0x20/0x20 [ 219.414979][ T5583] ? mptcp_pm_remove_addr+0x84/0x140 [ 219.420260][ T5583] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 219.425642][ T5583] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 219.431095][ T5583] ? mark_lock+0x98/0x340 [ 219.435416][ T5583] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 219.441495][ T5583] ? print_irqtrace_events+0x210/0x210 [ 219.446960][ T5583] ? rcu_is_watching+0x11/0xa0 [ 219.451744][ T5583] ? lockdep_hardirqs_on+0x94/0x130 [ 219.456943][ T5583] ? genl_rcv_msg+0xf8d/0x14a0 [ 219.461709][ T5583] genl_rcv_msg+0xfbd/0x14a0 [ 219.466300][ T5583] ? genl_bind+0x420/0x420 [ 219.470716][ T5583] ? mark_lock+0x98/0x340 [ 219.475041][ T5583] ? __lock_acquire+0x1295/0x1ff0 [ 219.480062][ T5583] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 219.485520][ T5583] netlink_rcv_skb+0x1cf/0x410 [ 219.490276][ T5583] ? genl_bind+0x420/0x420 [ 219.494694][ T5583] ? netlink_ack+0xb10/0xb10 [ 219.499279][ T5583] ? down_read+0x1b3/0x2e0 [ 219.503766][ T5583] ? genl_rcv+0x9/0x40 [ 219.507834][ T5583] genl_rcv+0x24/0x40 [ 219.511818][ T5583] netlink_unicast+0x7b6/0x980 [ 219.516681][ T5583] ? netlink_detachskb+0x90/0x90 [ 219.521624][ T5583] ? __virt_addr_valid+0x3bb/0x460 [ 219.526719][ T5583] ? 0xffffffff81000000 [ 219.530855][ T5583] ? __check_object_size+0x300/0x410 [ 219.536129][ T5583] ? bpf_lsm_netlink_send+0x5/0x10 [ 219.541249][ T5583] netlink_sendmsg+0xa30/0xd60 [ 219.546040][ T5583] ? netlink_getsockopt+0x5b0/0x5b0 [ 219.551228][ T5583] ? aa_sock_msg_perm+0x91/0x150 [ 219.556149][ T5583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.561415][ T5583] ? security_socket_sendmsg+0x7d/0xa0 [ 219.566856][ T5583] ? netlink_getsockopt+0x5b0/0x5b0 [ 219.572044][ T5583] ____sys_sendmsg+0x59e/0x8f0 [ 219.576826][ T5583] ? iovec_from_user+0x300/0x390 [ 219.581783][ T5583] ? __sys_sendmsg_sock+0x30/0x30 [ 219.586826][ T5583] ___sys_sendmsg+0x252/0x2e0 [ 219.591505][ T5583] ? __sys_sendmsg+0x260/0x260 [ 219.596273][ T5583] ? release_firmware_map_entry+0x190/0x190 [ 219.602196][ T5583] ? __fdget+0x191/0x220 [ 219.606432][ T5583] __se_sys_sendmsg+0x19a/0x260 [ 219.611277][ T5583] ? __x64_sys_sendmsg+0x80/0x80 [ 219.616230][ T5583] ? trace_hardirqs_on+0x30/0x80 [ 219.621201][ T5583] ? __x64_sys_sendmsg+0x34/0x80 [ 219.626135][ T5583] do_syscall_64+0x3b/0xb0 [ 219.630566][ T5583] ? clear_bhb_loop+0x15/0x70 [ 219.635232][ T5583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.641121][ T5583] RIP: 0033:0x7f83121cdf39 [ 219.645535][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.665154][ T5583] RSP: 002b:00007f8310646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.673556][ T5583] RAX: ffffffffffffffda RBX: 00007f8312385f80 RCX: 00007f83121cdf39 [ 219.681517][ T5583] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 219.689474][ T5583] RBP: 00007f8312240216 R08: 0000000000000000 R09: 0000000000000000 [ 219.697432][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.705389][ T5583] R13: 0000000000000000 R14: 00007f8312385f80 R15: 00007ffc5d787268 [ 219.713360][ T5583] [ 219.716367][ T5583] [ 219.718672][ T5583] Allocated by task 5583: [ 219.723000][ T5583] ____kasan_kmalloc+0xba/0xf0 [ 219.727783][ T5583] kmem_cache_alloc_trace+0x143/0x290 [ 219.733153][ T5583] subflow_ulp_init+0x8f/0x470 [ 219.737909][ T5583] tcp_set_ulp+0x498/0x550 [ 219.742311][ T5583] mptcp_subflow_create_socket+0x64f/0xc10 [ 219.748138][ T5583] mptcp_init_sock+0x114/0x790 [ 219.752890][ T5583] inet_create+0xa35/0xd40 [ 219.757295][ T5583] __sock_create+0x460/0x8d0 [ 219.761872][ T5583] __sys_socket+0x132/0x370 [ 219.766364][ T5583] __x64_sys_socket+0x76/0x80 [ 219.771061][ T5583] do_syscall_64+0x3b/0xb0 [ 219.775473][ T5583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.781381][ T5583] [ 219.783695][ T5583] Freed by task 7: [ 219.787411][ T5583] kasan_set_track+0x4b/0x80 [ 219.791997][ T5583] kasan_set_free_info+0x1f/0x40 [ 219.796920][ T5583] ____kasan_slab_free+0xd8/0x120 [ 219.801932][ T5583] slab_free_freelist_hook+0xdd/0x160 [ 219.807290][ T5583] kmem_cache_free_bulk+0x28f/0x4c0 [ 219.812473][ T5583] kfree_rcu_work+0x332/0x7a0 [ 219.817154][ T5583] process_one_work+0x8a1/0x10c0 [ 219.822081][ T5583] worker_thread+0xaca/0x1280 [ 219.826741][ T5583] kthread+0x3f6/0x4f0 [ 219.830801][ T5583] ret_from_fork+0x1f/0x30 [ 219.835205][ T5583] [ 219.837507][ T5583] Last potentially related work creation: [ 219.843208][ T5583] kasan_save_stack+0x36/0x60 [ 219.847922][ T5583] kasan_record_aux_stack+0xba/0x100 [ 219.853199][ T5583] kvfree_call_rcu+0x118/0x8a0 [ 219.857957][ T5583] tcp_cleanup_ulp+0x6d/0xe0 [ 219.862530][ T5583] tcp_v4_destroy_sock+0x184/0x700 [ 219.867629][ T5583] inet_csk_destroy_sock+0x153/0x370 [ 219.872907][ T5583] __tcp_close+0x890/0xec0 [ 219.877319][ T5583] __mptcp_close_ssk+0x1ff/0x470 [ 219.882294][ T5583] mptcp_pm_nl_rm_addr_or_subflow+0x4b4/0xcf0 [ 219.888356][ T5583] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 219.893718][ T5583] genl_rcv_msg+0xfbd/0x14a0 [ 219.898301][ T5583] netlink_rcv_skb+0x1cf/0x410 [ 219.903076][ T5583] genl_rcv+0x24/0x40 [ 219.907049][ T5583] netlink_unicast+0x7b6/0x980 [ 219.911798][ T5583] netlink_sendmsg+0xa30/0xd60 [ 219.916546][ T5583] ____sys_sendmsg+0x59e/0x8f0 [ 219.921297][ T5583] ___sys_sendmsg+0x252/0x2e0 [ 219.925957][ T5583] __se_sys_sendmsg+0x19a/0x260 [ 219.930792][ T5583] do_syscall_64+0x3b/0xb0 [ 219.935192][ T5583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.941069][ T5583] [ 219.943374][ T5583] The buggy address belongs to the object at ffff8880661b9200 [ 219.943374][ T5583] which belongs to the cache kmalloc-256 of size 256 [ 219.957410][ T5583] The buggy address is located 80 bytes inside of [ 219.957410][ T5583] 256-byte region [ffff8880661b9200, ffff8880661b9300) [ 219.970585][ T5583] The buggy address belongs to the page: [ 219.976211][ T5583] page:ffffea0001986e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x661b8 [ 219.986344][ T5583] head:ffffea0001986e00 order:1 compound_mapcount:0 [ 219.992918][ T5583] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 220.000901][ T5583] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017041b40 [ 220.009471][ T5583] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 220.018033][ T5583] page dumped because: kasan: bad access detected [ 220.024430][ T5583] page_owner tracks the page as allocated [ 220.030142][ T5583] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5437, ts 217040616240, free_ts 205260605264 [ 220.050813][ T5583] get_page_from_freelist+0x322a/0x33c0 [ 220.056351][ T5583] __alloc_pages+0x272/0x700 [ 220.060924][ T5583] new_slab+0xbb/0x4b0 [ 220.064980][ T5583] ___slab_alloc+0x6f6/0xe10 [ 220.069556][ T5583] __kmalloc+0x1c9/0x300 [ 220.073785][ T5583] fib_create_info+0xaab/0x2570 [ 220.078669][ T5583] fib_table_insert+0x213/0x1f90 [ 220.083592][ T5583] fib_add_ifaddr+0x47f/0x1730 [ 220.088366][ T5583] fib_inetaddr_event+0x12b/0x2b0 [ 220.093396][ T5583] blocking_notifier_call_chain+0x104/0x1b0 [ 220.099282][ T5583] __inet_insert_ifa+0x9f8/0xc10 [ 220.104236][ T5583] inet_rtm_newaddr+0x8ca/0x1840 [ 220.109176][ T5583] rtnetlink_rcv_msg+0x993/0xee0 [ 220.114108][ T5583] netlink_rcv_skb+0x1cf/0x410 [ 220.118861][ T5583] netlink_unicast+0x7b6/0x980 [ 220.123613][ T5583] netlink_sendmsg+0xa30/0xd60 [ 220.128371][ T5583] page last free stack trace: [ 220.129482][ T5589] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 220.133061][ T5583] free_unref_page_prepare+0xc34/0xcf0 [ 220.133090][ T5583] free_unref_page+0x95/0x2d0 [ 220.133108][ T5583] __vunmap+0x8d4/0xa20 [ 220.155315][ T5583] kcov_close+0x27/0x50 [ 220.159455][ T5583] __fput+0x3fe/0x8e0 [ 220.163422][ T5583] task_work_run+0x129/0x1a0 [ 220.168001][ T5583] do_exit+0x6a3/0x2480 [ 220.172164][ T5583] do_group_exit+0x144/0x310 [ 220.176743][ T5583] get_signal+0xc66/0x14e0 [ 220.181145][ T5583] arch_do_signal_or_restart+0xc3/0x1890 [ 220.186762][ T5583] exit_to_user_mode_loop+0x97/0x130 [ 220.192031][ T5583] exit_to_user_mode_prepare+0xb1/0x140 [ 220.197565][ T5583] syscall_exit_to_user_mode+0x5d/0x240 [ 220.203103][ T5583] do_syscall_64+0x47/0xb0 [ 220.207510][ T5583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.213396][ T5583] [ 220.215707][ T5583] Memory state around the buggy address: [ 220.221317][ T5583] ffff8880661b9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.229365][ T5583] ffff8880661b9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.237418][ T5583] >ffff8880661b9200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.245477][ T5583] ^ [ 220.252137][ T5583] ffff8880661b9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.260198][ T5583] ffff8880661b9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.268242][ T5583] ================================================================== [ 220.276366][ T5583] Disabling lock debugging due to kernel taint [ 220.282593][ T5583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.289789][ T5583] CPU: 0 PID: 5583 Comm: syz.0.396 Tainted: G B 5.15.167-syzkaller #0 [ 220.299256][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 220.309297][ T5583] Call Trace: [ 220.312563][ T5583] [ 220.315478][ T5583] dump_stack_lvl+0x1e3/0x2d0 [ 220.320143][ T5583] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 220.325761][ T5583] ? panic+0x860/0x860 [ 220.329817][ T5583] ? rcu_is_watching+0x11/0xa0 [ 220.334573][ T5583] panic+0x318/0x860 [ 220.338469][ T5583] ? asm_common_interrupt+0x22/0x40 [ 220.343743][ T5583] ? check_panic_on_warn+0x1d/0xa0 [ 220.348842][ T5583] ? fb_is_primary_device+0xd0/0xd0 [ 220.354048][ T5583] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 220.359955][ T5583] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 220.365837][ T5583] ? _raw_spin_unlock+0x40/0x40 [ 220.370686][ T5583] check_panic_on_warn+0x7e/0xa0 [ 220.375611][ T5583] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 220.381853][ T5583] end_report+0x6d/0xf0 [ 220.385992][ T5583] kasan_report+0x18e/0x1c0 [ 220.390489][ T5583] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 220.396715][ T5583] mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 220.402777][ T5583] ? mptcp_pm_nl_rm_subflow_received+0x20/0x20 [ 220.408936][ T5583] ? mptcp_pm_remove_addr+0x84/0x140 [ 220.414222][ T5583] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 220.419594][ T5583] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 220.425046][ T5583] ? mark_lock+0x98/0x340 [ 220.429377][ T5583] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 220.435361][ T5583] ? print_irqtrace_events+0x210/0x210 [ 220.440808][ T5583] ? rcu_is_watching+0x11/0xa0 [ 220.445619][ T5583] ? lockdep_hardirqs_on+0x94/0x130 [ 220.450816][ T5583] ? genl_rcv_msg+0xf8d/0x14a0 [ 220.455621][ T5583] genl_rcv_msg+0xfbd/0x14a0 [ 220.460210][ T5583] ? genl_bind+0x420/0x420 [ 220.464614][ T5583] ? mark_lock+0x98/0x340 [ 220.468953][ T5583] ? __lock_acquire+0x1295/0x1ff0 [ 220.473978][ T5583] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 220.479440][ T5583] netlink_rcv_skb+0x1cf/0x410 [ 220.484215][ T5583] ? genl_bind+0x420/0x420 [ 220.488621][ T5583] ? netlink_ack+0xb10/0xb10 [ 220.493214][ T5583] ? down_read+0x1b3/0x2e0 [ 220.497625][ T5583] ? genl_rcv+0x9/0x40 [ 220.501680][ T5583] genl_rcv+0x24/0x40 [ 220.505647][ T5583] netlink_unicast+0x7b6/0x980 [ 220.510408][ T5583] ? netlink_detachskb+0x90/0x90 [ 220.515336][ T5583] ? __virt_addr_valid+0x3bb/0x460 [ 220.520434][ T5583] ? 0xffffffff81000000 [ 220.524572][ T5583] ? __check_object_size+0x300/0x410 [ 220.529853][ T5583] ? bpf_lsm_netlink_send+0x5/0x10 [ 220.534959][ T5583] netlink_sendmsg+0xa30/0xd60 [ 220.539735][ T5583] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.544921][ T5583] ? aa_sock_msg_perm+0x91/0x150 [ 220.549848][ T5583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.555123][ T5583] ? security_socket_sendmsg+0x7d/0xa0 [ 220.560570][ T5583] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.565765][ T5583] ____sys_sendmsg+0x59e/0x8f0 [ 220.570517][ T5583] ? iovec_from_user+0x300/0x390 [ 220.575444][ T5583] ? __sys_sendmsg_sock+0x30/0x30 [ 220.580460][ T5583] ___sys_sendmsg+0x252/0x2e0 [ 220.585123][ T5583] ? __sys_sendmsg+0x260/0x260 [ 220.589881][ T5583] ? release_firmware_map_entry+0x190/0x190 [ 220.595773][ T5583] ? __fdget+0x191/0x220 [ 220.600024][ T5583] __se_sys_sendmsg+0x19a/0x260 [ 220.604871][ T5583] ? __x64_sys_sendmsg+0x80/0x80 [ 220.609834][ T5583] ? trace_hardirqs_on+0x30/0x80 [ 220.614783][ T5583] ? __x64_sys_sendmsg+0x34/0x80 [ 220.619715][ T5583] do_syscall_64+0x3b/0xb0 [ 220.624136][ T5583] ? clear_bhb_loop+0x15/0x70 [ 220.628821][ T5583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.634701][ T5583] RIP: 0033:0x7f83121cdf39 [ 220.639104][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.658699][ T5583] RSP: 002b:00007f8310646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.667103][ T5583] RAX: ffffffffffffffda RBX: 00007f8312385f80 RCX: 00007f83121cdf39 [ 220.675069][ T5583] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 220.683043][ T5583] RBP: 00007f8312240216 R08: 0000000000000000 R09: 0000000000000000 [ 220.690998][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.698969][ T5583] R13: 0000000000000000 R14: 00007f8312385f80 R15: 00007ffc5d787268 [ 220.706933][ T5583] [ 220.710295][ T5583] Kernel Offset: disabled [ 220.714612][ T5583] Rebooting in 86400 seconds..