last executing test programs: 2m35.784846278s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000070000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) read(r3, &(0x7f0000001600)=""/233, 0xe9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002b80)={0x10, 0x14, 0x4, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x8040) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0xffff, 0xaa35, 0x9, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000003dc0)={0x2020}, 0x2020) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000026c0)={'\x00', 0x5, 0x510, 0x8001, 0xe256, 0x7fffffff, 0xffffffffffffffff}) 2m34.893138132s ago: executing program 3 (id=6): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@unlock_all, 0xb) 2m33.775091699s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r5, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) chdir(&(0x7f0000000100)='./file0\x00') r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m33.645615361s ago: executing program 4 (id=5): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x8, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m28.601066357s ago: executing program 4 (id=11): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) getdents64(r3, 0x0, 0x0) 2m28.576704798s ago: executing program 3 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000400)={[{@journal_checksum}, {@lazytime}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x654, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2m26.42625523s ago: executing program 4 (id=15): syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80"], 0xf0}, 0x1, 0xe}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r3, 0x0) io_submit(0x0, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) 2m13.2518412s ago: executing program 32 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000400)={[{@journal_checksum}, {@lazytime}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x654, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2m10.672699399s ago: executing program 33 (id=15): syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80"], 0xf0}, 0x1, 0xe}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nSRN+vU6r6+v77VWTa1isJi0abVdCFJRcKEgVlCXIR8ldtpIk4ItVaYgdSkF9+LSrQu36qaIK8FtXQpSKNJNW0EcuTN3PjuTNMkkY8zvB5M5536dc+655+bcc2YmgE1rOP2TVMI3I2JXRORaNxiuvN27c2Xy/p0rk1EslU7/lpR3u5vGM9lhYnsWGclF5D5O6isazF+6fHaiUJi+kMXHFs69PzZ/6fKzs0PZkpMnjx87euL58eeWX6g26aXlurv/o7kD+1599/rrk/3V5dXUGsvRLcMx3C4rZU91O7Ee29kQTvp7mBGWJb3+0+oaKLf/XdEXi1VecR1zBqy1UqlUGuy8ulhqdfWBJcCGlUSvcwD0RvUfffr8W3216whsWZvuR8/dPlV5AErLfS97RTxeXlgdBxloeb7tpuGIeKf4++fpK9ZoHAIAoNG3p2rDP839v3xlZuSPizdeTN//lc2h5CPi3xGxOyL+ExF7IuK/EbE3Iv4XEf9vOX5fRJQWSX+4JV5LvzYJlbvVhWJ2lPb/Xsjmtur9v6YM5Puy2M6Iaod5+kh2TkZiYHBmtjB9dJE0vnv5p087rWvs/6WvNP1qXzDLx63+lgG6qYmFiRUXuMXtqxH7+1vLn/RHJLWZgCQi9kXE/mUcN98Qnn3mywO1yEDzdkuXv6zUdh6tC/NMpS8inq7UfzGa6r+eYtI0P3lu4sz0menz47X5ybGhKEwfGZvpmJsffrz2Rqd1S5b/619ad3nlxDens5a1emn9b2u4/qM6f1svfz6JSGrztfPLT+Paz590fKZZ6fW/JXmrHK4+l34wsbBw4WjEluS1B5eP1/etxtP3KFbKP3Koffvfne2TnolHIiK9iB+NiMei8oSY5v1gRDwREYcWKf/3Lz353srLv7bS8k+13P8qNd9U//X5+k6BJJsbbLOq7+zBm/c73Dwerv6Pl0Mj2ZL297+k6RbRKafVcY90yZ+rPnsAAACwMeQiYkfDWNKOyOVGRytjQHtiW64wN79weGbu4vmpdF1EPgZyM7OF8vhnZTx4IKmOf+Yb4uMt8WPZuPFnfVvL8dHJucJUT0sObC+3+SQ3GvF2X0P7T/3anSFm4O/M97Vg81qs/aed+L3X1zEzwLp6+P//Nz5c04wA666h/Xf6hn9xBZ/7AjYAz/9A3dI/9OOeARtfSVuGTW1Z7f+wHwGEf5L+eLMWzvU0J8B60/+HTWnJ7/WvKlAabL9qKB7cOIYWP2BfrCwbW9uk1ZNA2rPqSepbV7JX9dcUOm4TueUdcDC6U6czqzwbxQvzZ/Z2/eIvZZ+V73YNfrUu7bRdoCe3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK77KwAA//8KhtfB") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r3, 0x0) io_submit(0x0, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) 38.875829891s ago: executing program 0 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 35.850721817s ago: executing program 0 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.721693798s ago: executing program 0 (id=369): bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="e4aa", 0x2}], 0x1, 0x0, 0x0, 0x4000}, 0x20004001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000000)={0x20, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffffffff}]}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0xffffffff, 0x0, 0x0, 0xffffffff) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="14800400000076001371"], 0x0, 0x0, 0x0, 0x0, 0x0}) 32.682539835s ago: executing program 0 (id=383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 32.484306108s ago: executing program 0 (id=384): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) uname(&(0x7f0000000180)=""/224) 32.271573351s ago: executing program 0 (id=386): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x35c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c4b, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000900d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, 0x0) 28.296704291s ago: executing program 2 (id=397): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYBLOB="9e57c7d014862498bc78a021cd88f5c0251a3cb6bf493e0db9b7a32ff9e956e454d5deef4ea610dd15f390a1f2bd740b3b2c3d99c589edf6fb9a21a9372446624390f509dbecdf4fca54185cd3e260dc64421dee6072578ea118143eb41f4e779ec2f7f8ab82619e4a77fa6bd64bb734eed1569c15112bd15bc9855d641b20e018", @ANYRES64], 0x26, 0x336, &(0x7f00000001c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getpeername(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0xeb, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 25.484376143s ago: executing program 2 (id=399): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x100, {{0xa, 0x4e20, 0x9, @mcast2, 0x10001}}}, 0x88) 24.648358126s ago: executing program 2 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.478652189s ago: executing program 2 (id=404): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x8801, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 22.688855436s ago: executing program 2 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) 21.525880094s ago: executing program 2 (id=412): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noblock_validity}]}, 0x5, 0x795, &(0x7f0000000cc0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTsmgRwY2g4kLQTdf+qDu3/tjqf+FCWqqmxYoLidyZO+20mUmTNjOj5vOBmznn3js553vP/XHunMtMAHvWRPonF3EoIt5NIsay+UlEDNVTgxEnGuvdXl8rplMSGxuv/pzU17m1vlaMlvekDmSZ/0fEN29FHM415g+3lFtdWZ0vlMulpSw/VVs4P1VdWT1ybqEwV5orLR6bnpk5evyZ48d2L9Zfv189eP29l578/MTvb/7v6jvfJnEiDmbLWuPYLRMxkW2ToXQT3uPF3S6sz5J+V4CHkh6aA42jPA7FWAzUUx2M9LJmAEC3bAAAe1CiDwAAe0zzc4Bb62vF5tTfTyR668YLEbG/EX9zfLOxZDAbs9tfHwcdvZXcMzKSRMT4LpQ/EREff/n6p+kUWTu0G0szvgbstkuXI+LM+MTm83+y6ZmFnXpqq4UbjadBJu6bvdeuP9BPX6X9n2fb9f9yd/o/0ab/M9zm2H0YDz7+c9d2oZiO0v7f8y3Ptt1uiT8zPpDl/lXv8w0lZ8+VS+m57d8RMRlDw2l+ur5q+17a5M0/bnYqv7X/98v7b3ySlp++3l0jd21w+N73zA7XCo8ad9ONyxGPDbaLP7nT/kmH/u+pbZbx8nNvf9RpWRp/Gm9z2hx/d21ciXiibfvfbctky+cTp+q7w1Rzp2jjix8+HO1Ufmv7p1NafvNeoBfS9h/dOv7xpPV5zerOy/juytjXnZY9OP42+3+hVtiXvFZP78vmXSzUakvTEfuSVzbPP3r3vc18c/00/snH2x//jWLb7//pPeGZbcY/eP2nzx4+/u5K45/dUfvvPHH19vxAp/K31/4z9dRkNidt/wfFtd0KPsq2AwAAAAAAAAAAAAAAAAAAAAAAAIDtykXEwUhy+TvpXC6fb/yG939jNFeuVGuHz1aWF2ej/lvZ4zGUa37V5VjL96FOZ9+H38wfvS//dET8JyI+GB6p5/PFSnm238EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOZAh9//T/043O/aAQBds7/fFQAAes71HwD2np1d/0e6Vg8AoHfc/wPA3rPt6/+Z7tYDAOgd9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02amTJ9Np47f1tWKan72wsjxfuXBktlSdzy8sF/PFytL5/FylMlcu5YuVhY7/6FLjpVypnJ+JxeWLU7VStTZVXVk9vVBZXqydPrdQmCudLg31LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L7qyup8oVwuLUlsmRhJE4PZRvsL1KffiUEb4R+eaD1LjPTn5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwN/BnAAAA//+9uipa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0), 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vlan1\x00', {}, 'hsr0\x00', {}, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {0x1fe}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x1, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x5, 0x0, 0x2, 0x5], 0x3, 0x7}, {0x2, [0x2, 0x5, 0x2, 0x1, 0x0, 0x3], 0x0, 0x5}}}}, {{@ip={@local, @empty, 0x0, 0xff000000, 'syzkaller1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x50}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x38, 0xfd, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x2, 0x2, 0x3, 0x0, 0x2], 0x4, 0x2}, {0xffffffffffffffff, [0x5, 0x7, 0x6, 0x4, 0x0, 0x4], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendto$packet(r5, &(0x7f00000002c0), 0x0, 0x4, 0x0, 0x0) 21.356714146s ago: executing program 34 (id=412): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noblock_validity}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0), 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vlan1\x00', {}, 'hsr0\x00', {}, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {0x1fe}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x1, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x5, 0x0, 0x2, 0x5], 0x3, 0x7}, {0x2, [0x2, 0x5, 0x2, 0x1, 0x0, 0x3], 0x0, 0x5}}}}, {{@ip={@local, @empty, 0x0, 0xff000000, 'syzkaller1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x50}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x38, 0xfd, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x2, 0x2, 0x3, 0x0, 0x2], 0x4, 0x2}, {0xffffffffffffffff, [0x5, 0x7, 0x6, 0x4, 0x0, 0x4], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendto$packet(r5, &(0x7f00000002c0), 0x0, 0x4, 0x0, 0x0) 16.541969629s ago: executing program 35 (id=386): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x35c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c4b, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000900d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, 0x0) 8.165036866s ago: executing program 6 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) shutdown(0xffffffffffffffff, 0x1) 7.980968929s ago: executing program 6 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) 6.864308546s ago: executing program 1 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080)={0x0, 0x6a44, 0x1, 0x0, 0x67}, &(0x7f0000ff0000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000001680), 0x20a3) 5.93637438s ago: executing program 1 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x3fffffffc00, 0x3ff, 0x5, 0x2}) 5.758731053s ago: executing program 5 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4.676270819s ago: executing program 1 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffffff, 0x0, 0x781003, 0x25) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x16, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 4.675834779s ago: executing program 5 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000b00)=""/151}, 0x20) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 4.545845501s ago: executing program 5 (id=455): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x1bd00c8, &(0x7f0000000100)=ANY=[], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000003c0), &(0x7f0000000400)=ANY=[], 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000005, 0x21, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 4.384496364s ago: executing program 6 (id=456): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0xbb, 0x2}) 3.896273441s ago: executing program 6 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000020000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}, 0x1, 0x7}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, &(0x7f0000000100)) io_setup(0x987, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000700)='keyring\x00', 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 3.574308696s ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/171}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x78}}, 0x0) 3.478703977s ago: executing program 5 (id=459): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000000000)='./file1\x00', 0x2001, 0x0) linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') bind$802154_raw(r5, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) 2.550228541s ago: executing program 6 (id=460): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) mkdir(0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000000029"], 0x5b0}, 0x20008001) 1.591374576s ago: executing program 1 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "15c69d", 0x0, 0x0, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}}}}}, 0x0) 654.40261ms ago: executing program 6 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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") 550.334942ms ago: executing program 1 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) utime(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000000201010100000000000008070000070400028000"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x3fffffffffffd17, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0/file0\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r6, 0x25, 0x8, @val=@netkit={@void, @value}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xed) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7) 306.239005ms ago: executing program 5 (id=464): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r5, 0x0, 0x0) 0s ago: executing program 5 (id=465): r0 = open$dir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8a100, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x8000000000000001, 0x28, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f0000002680)=ANY=[], 0x1, 0x203, &(0x7f0000000580)="$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") kernel console output (not intermixed with test programs): mended to keep mac addresses unique to avoid problems! [ 57.464311][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.475086][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.485847][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.497471][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.508729][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.539449][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.549632][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.564032][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.577253][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.587992][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.601222][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.611339][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.622076][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.632342][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.642890][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.653935][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.671750][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.680691][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.694002][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.703119][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.715759][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.726401][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.757374][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.766020][ T4217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.781657][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.818401][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.829868][ T4257] loop2: detected capacity change from 0 to 512 [ 57.847208][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.867345][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.905471][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.923317][ T4257] ======================================================= [ 57.923317][ T4257] WARNING: The mand mount option has been deprecated and [ 57.923317][ T4257] and is ignored by this kernel. Remove the mand [ 57.923317][ T4257] option from the mount to silence this warning. [ 57.923317][ T4257] ======================================================= [ 57.964874][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.973481][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.988201][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.140474][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.219562][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.248262][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.301516][ T4217] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 58.521986][ T4217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.963566][ T4217] usb 2-1: config 0 has no interface number 0 [ 59.131875][ T4217] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 59.154598][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.165203][ T4217] usb 2-1: Product: syz [ 59.169859][ T4217] usb 2-1: Manufacturer: syz [ 60.406838][ T4284] loop4: detected capacity change from 0 to 1024 [ 60.468705][ T4285] loop2: detected capacity change from 0 to 256 [ 61.471350][ T4217] usb 2-1: SerialNumber: syz [ 62.005187][ T4277] sched: RT throttling activated [ 63.010341][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 63.648303][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 63.701863][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 63.746020][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 63.771740][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 63.992777][ T4217] usb 2-1: config 0 descriptor?? [ 64.459170][ T4297] loop1: detected capacity change from 0 to 40427 [ 65.009772][ T4217] usb 2-1: can't set config #0, error -71 [ 65.018921][ T4217] usb 2-1: USB disconnect, device number 2 [ 65.246299][ T4303] loop0: detected capacity change from 0 to 2048 [ 65.301684][ T4297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.438769][ T4297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.722168][ T4297] attempt to access beyond end of device [ 65.722168][ T4297] loop1: rw=2049, want=45104, limit=40427 [ 66.663280][ T4170] attempt to access beyond end of device [ 66.663280][ T4170] loop1: rw=2049, want=45112, limit=40427 [ 66.760218][ T4303] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 67.760030][ T4335] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.131175][ T4292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.422044][ T4343] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19'. [ 68.581542][ T4292] usb 3-1: Using ep0 maxpacket: 16 [ 68.718697][ T4292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.912620][ T4292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.121950][ T4292] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.140968][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.162332][ T4292] usb 3-1: Product: syz [ 69.174316][ T4292] usb 3-1: Manufacturer: syz [ 69.179077][ T4292] usb 3-1: SerialNumber: syz [ 69.494661][ T4350] overlayfs: failed to resolve './file1': -2 [ 70.221270][ T26] audit: type=1326 audit(1750597021.624:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.251385][ T4292] usb 3-1: 0:2 : does not exist [ 70.261538][ T4195] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 70.266810][ T4292] usb 3-1: unit 9 not found! [ 70.290644][ T26] audit: type=1326 audit(1750597021.634:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.318603][ T4195] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28 [ 70.355089][ T4292] usb 3-1: USB disconnect, device number 2 [ 70.361179][ T4195] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.361179][ T4195] [ 70.391068][ T26] audit: type=1326 audit(1750597021.634:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.422008][ T4195] EXT4-fs (loop0): Total free blocks count 0 [ 70.438609][ T4195] EXT4-fs (loop0): Free/Dirty block details [ 70.456863][ T26] audit: type=1326 audit(1750597021.634:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.458894][ T4195] EXT4-fs (loop0): free_blocks=2415919504 [ 70.478413][ T26] audit: type=1326 audit(1750597021.634:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.478442][ T26] audit: type=1326 audit(1750597021.634:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.478468][ T26] audit: type=1326 audit(1750597021.634:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.478494][ T26] audit: type=1326 audit(1750597021.634:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.478518][ T26] audit: type=1326 audit(1750597021.634:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 70.638919][ T4195] EXT4-fs (loop0): dirty_blocks=160 [ 70.647258][ T4195] EXT4-fs (loop0): Block reservation details [ 70.659796][ T4195] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 71.195517][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202749][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.601636][ T4359] loop0: detected capacity change from 0 to 40427 [ 71.640387][ T4359] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.672921][ T4359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.780294][ T4359] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.886095][ T4359] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.901094][ T4359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.945795][ T4379] loop1: detected capacity change from 0 to 256 [ 73.235545][ T4379] FAT-fs (loop1): Directory bread(block 64) failed [ 73.281087][ T4379] FAT-fs (loop1): Directory bread(block 65) failed [ 73.297869][ T4379] FAT-fs (loop1): Directory bread(block 66) failed [ 73.331052][ T4379] FAT-fs (loop1): Directory bread(block 67) failed [ 73.337736][ T4379] FAT-fs (loop1): Directory bread(block 68) failed [ 73.370989][ T4379] FAT-fs (loop1): Directory bread(block 69) failed [ 73.381103][ T4379] FAT-fs (loop1): Directory bread(block 70) failed [ 73.387815][ T4379] FAT-fs (loop1): Directory bread(block 71) failed [ 73.439322][ T4379] FAT-fs (loop1): Directory bread(block 72) failed [ 73.481178][ T4379] FAT-fs (loop1): Directory bread(block 73) failed [ 74.531652][ T4393] overlayfs: failed to resolve './file1': -2 [ 75.388459][ T4399] xt_limit: Overflow, try lower: 687865856/40 [ 75.721197][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.301843][ T13] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 76.351998][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.444237][ T13] usb 1-1: Product: syz [ 76.479515][ T13] usb 1-1: Manufacturer: syz [ 76.518972][ T13] usb 1-1: SerialNumber: syz [ 76.983516][ T21] cfg80211: failed to load regulatory.db [ 77.004784][ T13] r8152-cfgselector 1-1: config 0 descriptor?? [ 77.284222][ T13] r8152-cfgselector 1-1: Unknown version 0x0000 [ 77.385052][ T13] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 78.641015][ T1108] usb 1-1: USB disconnect, device number 2 [ 79.186241][ T4437] overlayfs: failed to resolve './file1': -2 [ 79.710370][ T4445] loop0: detected capacity change from 0 to 128 [ 80.001909][ T4447] xt_limit: Overflow, try lower: 687865856/40 [ 80.208285][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,bsddf,errors=remount-ro,. Quota mode: none. [ 80.240452][ T4445] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.075123][ T4454] chnl_net:caif_netlink_parms(): no params data found [ 82.436274][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 82.750530][ T4490] overlayfs: failed to resolve './file1': -2 [ 83.247958][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.258396][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.269867][ T4454] device bridge_slave_0 entered promiscuous mode [ 83.286121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.331811][ T4501] xt_limit: Overflow, try lower: 687865856/40 [ 83.362928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.364827][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.550152][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.696377][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.752591][ T4454] device bridge_slave_1 entered promiscuous mode [ 83.813511][ T4505] serio: Serial port ptm0 [ 83.903783][ T4454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.974183][ T4454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.004207][ T4454] team0: Port device team_slave_0 added [ 84.013242][ T4454] team0: Port device team_slave_1 added [ 84.036100][ T4454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.043098][ T4454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.084049][ T4454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.153804][ T4454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.160769][ T4454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.198391][ T4454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.432366][ T4212] Bluetooth: hci5: command 0x041b tx timeout [ 85.442031][ T4212] Bluetooth: hci6: command 0x0409 tx timeout [ 85.493063][ T4454] device hsr_slave_0 entered promiscuous mode [ 85.500498][ T4454] device hsr_slave_1 entered promiscuous mode [ 85.525186][ T4454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.644017][ T4522] loop0: detected capacity change from 0 to 512 [ 85.698341][ T4522] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 85.705903][ T4522] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 85.757867][ T4454] Cannot create hsr debugfs directory [ 85.812924][ T4522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b000c198, mo2=0002] [ 85.821553][ T4522] System zones: 1-12 [ 85.869833][ T4522] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.72: corrupted in-inode xattr [ 85.884510][ T4522] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.72: couldn't read orphan inode 15 (err -117) [ 85.899084][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,nobarrier,noload,mblk_io_submit,minixdf,minixdf,debug,,errors=continue. Quota mode: none. [ 87.525813][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 87.536022][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 87.542576][ T4454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.559800][ T4454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.570974][ T4454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.590384][ T4454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.810782][ T4454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.952769][ T4547] loop2: detected capacity change from 0 to 16 [ 87.963020][ T4493] chnl_net:caif_netlink_parms(): no params data found [ 87.984190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.103137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.537065][ T4554] xt_limit: Overflow, try lower: 687865856/40 [ 88.595014][ T4454] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.729961][ T4454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.740505][ T4454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.787623][ T4547] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.057484][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.083417][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.091916][ T4493] device bridge_slave_0 entered promiscuous mode [ 89.100349][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.110398][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.120340][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.127467][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.139539][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.148502][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.185140][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.192244][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.229935][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.242713][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.258422][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.278026][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.305398][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.336734][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.378957][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.420512][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.458110][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.500533][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.544068][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.577705][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.601416][ T4293] Bluetooth: hci5: command 0x0419 tx timeout [ 89.611868][ T4293] Bluetooth: hci6: command 0x040f tx timeout [ 89.632497][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.664945][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.678707][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.695824][ T4493] device bridge_slave_1 entered promiscuous mode [ 89.708321][ T4566] netlink: 'syz.2.83': attribute type 27 has an invalid length. [ 91.270347][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.279742][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.714966][ T2419] Bluetooth: hci6: command 0x0419 tx timeout [ 92.529526][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.591671][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.004266][ T4566] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.985188][ T4566] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.994865][ T4566] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.005289][ T4566] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.816020][ T4604] loop1: detected capacity change from 0 to 40427 [ 94.946639][ T4604] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.954571][ T4604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.023531][ T4604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.225785][ T4604] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.233037][ T4604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.656544][ T4566] syz.2.83 (4566) used greatest stack depth: 19744 bytes left [ 95.676864][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.708661][ T4570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.725571][ T4570] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.740032][ T4570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.963828][ T4493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.980571][ T4454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.353054][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.463209][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.687630][ T4493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.907705][ T4493] team0: Port device team_slave_0 added [ 97.339343][ T4493] team0: Port device team_slave_1 added [ 97.403973][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.418498][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.446411][ T4493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.461438][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.468702][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.497559][ T4493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.700473][ T4493] device hsr_slave_0 entered promiscuous mode [ 97.707385][ T4493] device hsr_slave_1 entered promiscuous mode [ 97.714566][ T4493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.762955][ T4493] Cannot create hsr debugfs directory [ 97.836527][ T4454] device veth0_vlan entered promiscuous mode [ 97.877424][ T4454] device veth1_vlan entered promiscuous mode [ 97.963827][ T4454] device veth0_macvtap entered promiscuous mode [ 98.001299][ T4454] device veth1_macvtap entered promiscuous mode [ 98.065050][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.122005][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.159288][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.169787][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.185504][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.194991][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.199241][ T4643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 98.203628][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.222140][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.231210][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.269416][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.287756][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.307044][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.328268][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.349908][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.370812][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.393086][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.403773][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.415429][ T4454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.438059][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.451956][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.476439][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.492492][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.509775][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.645835][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.667352][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.678772][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.694824][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.708233][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.721071][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.889228][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.994329][ T4454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.121901][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.192775][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 99.207544][ T4454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.309938][ T4454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.334569][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.348721][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.371133][ T21] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 99.375776][ T4454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.386447][ T21] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 99.399828][ T21] usb 3-1: config 4 has no interface number 0 [ 99.401307][ T4454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.417035][ T4454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.426097][ T4454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.591133][ T21] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 99.612650][ T4493] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.638869][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 99.645664][ T4493] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.660096][ T21] usb 3-1: Product: syz [ 99.667767][ T4493] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.677679][ T21] usb 3-1: Manufacturer: syz [ 99.698052][ T21] usb 3-1: SerialNumber: syz [ 99.719398][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.724717][ T4493] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.731257][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.752109][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.784473][ T4587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.807693][ T4587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.845402][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.952869][ T4493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.975003][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.000779][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.012978][ T4493] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.014732][ T4661] loop5: detected capacity change from 0 to 256 [ 100.028559][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.037602][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.046274][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.053392][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.061620][ T4217] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.083806][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.421648][ T4217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.450069][ T4661] FAT-fs (loop5): Directory bread(block 64) failed [ 100.509764][ T4217] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.572021][ T4661] FAT-fs (loop5): Directory bread(block 65) failed [ 100.614421][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.622782][ T4661] FAT-fs (loop5): Directory bread(block 66) failed [ 100.629326][ T4661] FAT-fs (loop5): Directory bread(block 67) failed [ 100.643375][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.648709][ T4217] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.659679][ T4661] FAT-fs (loop5): Directory bread(block 68) failed [ 100.668882][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.677603][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.684716][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.687132][ T4661] FAT-fs (loop5): Directory bread(block 69) failed [ 100.700220][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.715776][ T4217] usb 2-1: config 0 descriptor?? [ 100.745835][ T21] usb 3-1: USB disconnect, device number 3 [ 100.754252][ T4217] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.777686][ T4661] FAT-fs (loop5): Directory bread(block 70) failed [ 100.793556][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.806428][ T4661] FAT-fs (loop5): Directory bread(block 71) failed [ 100.825800][ T4661] FAT-fs (loop5): Directory bread(block 72) failed [ 100.838561][ T4661] FAT-fs (loop5): Directory bread(block 73) failed [ 100.859588][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.887839][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.969956][ T4217] usb 2-1: USB disconnect, device number 3 [ 100.987864][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.122245][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.139140][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.149182][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.168449][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.601992][ T4493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.635377][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.660149][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.735650][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.305541][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.417534][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.446304][ T4670] loop0: detected capacity change from 0 to 40427 [ 103.531965][ T4670] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.700410][ T4670] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.998180][ T4493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.036891][ T4168] attempt to access beyond end of device [ 104.036891][ T4168] loop0: rw=2049, want=45104, limit=40427 [ 104.800860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.848231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.663058][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.674649][ T4705] loop5: detected capacity change from 0 to 40427 [ 105.682238][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.697796][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.705786][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.742652][ T4705] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 105.749625][ T4705] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 105.751442][ T4493] device veth0_vlan entered promiscuous mode [ 105.794391][ T4718] loop2: detected capacity change from 0 to 256 [ 105.819395][ T4493] device veth1_vlan entered promiscuous mode [ 105.827009][ T4705] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 105.880824][ T4705] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 105.929896][ T4718] FAT-fs (loop2): Directory bread(block 64) failed [ 105.961953][ T4718] FAT-fs (loop2): Directory bread(block 65) failed [ 105.962252][ T4705] F2FS-fs (loop5): invalid crc value [ 105.968574][ T4718] FAT-fs (loop2): Directory bread(block 66) failed [ 105.981302][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.010680][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.013935][ T4718] FAT-fs (loop2): Directory bread(block 67) failed [ 106.028799][ T4493] device veth0_macvtap entered promiscuous mode [ 106.045001][ T4493] device veth1_macvtap entered promiscuous mode [ 106.053277][ T4705] F2FS-fs (loop5): Found nat_bits in checkpoint [ 106.126990][ T4718] FAT-fs (loop2): Directory bread(block 68) failed [ 106.164890][ T4718] FAT-fs (loop2): Directory bread(block 69) failed [ 106.407521][ T4718] FAT-fs (loop2): Directory bread(block 70) failed [ 106.549439][ T4718] FAT-fs (loop2): Directory bread(block 71) failed [ 106.687891][ T4718] FAT-fs (loop2): Directory bread(block 72) failed [ 106.774410][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.930581][ T4718] FAT-fs (loop2): Directory bread(block 73) failed [ 106.938452][ T4705] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 106.947313][ T4705] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 106.960957][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.061019][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.282358][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.914076][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.945184][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.976453][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.010600][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.052963][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.067248][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.107779][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.136300][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.154413][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.171380][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.186608][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.196502][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.208997][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.218857][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.229418][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.239314][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.264050][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.320276][ T4454] attempt to access beyond end of device [ 108.320276][ T4454] loop5: rw=2049, want=45112, limit=40427 [ 108.345141][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.486438][ T4739] loop1: detected capacity change from 0 to 2048 [ 108.599710][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.664245][ T4162] loop1: p1 < > p3 [ 108.673601][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.794304][ T4162] loop1: p3 size 134217728 extends beyond EOD, truncated [ 108.839591][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.025135][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.110572][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.140280][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.346292][ T4739] loop1: p1 < > p3 [ 109.351646][ T4739] loop1: p3 size 134217728 extends beyond EOD, truncated [ 110.113418][ T4493] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.123953][ T4493] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.132735][ T4493] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.161493][ T4493] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.321144][ T26] audit: type=1326 audit(1750597061.714:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 110.356878][ T26] audit: type=1326 audit(1750597061.714:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 110.387280][ T26] audit: type=1326 audit(1750597061.714:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 110.417324][ T26] audit: type=1326 audit(1750597061.714:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 110.896461][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.908315][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.941598][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 110.970696][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.985984][ T26] audit: type=1326 audit(1750597062.394:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 110.992387][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.029688][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 111.029737][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.199202][ T26] audit: type=1326 audit(1750597062.414:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 111.237498][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.247592][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.262996][ T26] audit: type=1326 audit(1750597062.414:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 111.632972][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.700164][ T26] audit: type=1326 audit(1750597062.414:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 111.953651][ T4764] loop0: detected capacity change from 0 to 128 [ 111.960822][ T26] audit: type=1326 audit(1750597062.414:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 112.068822][ T4764] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.138627][ T4764] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.250051][ T4775] loop1: detected capacity change from 0 to 256 [ 112.490230][ T4764] fscrypt: Error allocating hmac(sha512): -2 [ 112.791868][ T1111] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.803839][ T4775] FAT-fs (loop1): Directory bread(block 64) failed [ 112.855349][ T4775] FAT-fs (loop1): Directory bread(block 65) failed [ 112.924430][ T4775] FAT-fs (loop1): Directory bread(block 66) failed [ 112.968303][ T4775] FAT-fs (loop1): Directory bread(block 67) failed [ 113.009005][ T4775] FAT-fs (loop1): Directory bread(block 68) failed [ 113.037127][ T4775] FAT-fs (loop1): Directory bread(block 69) failed [ 113.049364][ T26] audit: type=1326 audit(1750597064.454:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4786 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fb53f929 code=0x7ffc0000 [ 113.062090][ T4775] FAT-fs (loop1): Directory bread(block 70) failed [ 113.092074][ T4775] FAT-fs (loop1): Directory bread(block 71) failed [ 113.112346][ T4775] FAT-fs (loop1): Directory bread(block 72) failed [ 113.118914][ T4775] FAT-fs (loop1): Directory bread(block 73) failed [ 113.181289][ T4791] xt_limit: Overflow, try lower: 687865856/40 [ 113.491159][ T1111] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 113.562795][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.740977][ T1111] usb 7-1: Product: syz [ 113.751310][ T1111] usb 7-1: Manufacturer: syz [ 114.166114][ T1111] usb 7-1: SerialNumber: syz [ 114.302472][ T1111] r8152-cfgselector 7-1: config 0 descriptor?? [ 114.333662][ T4801] process 'syz.2.140' launched './file0' with NULL argv: empty string added [ 114.689218][ T1111] r8152-cfgselector 7-1: Unknown version 0x0000 [ 114.717538][ T4817] loop0: detected capacity change from 0 to 1024 [ 114.731438][ T1111] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 114.881967][ T4817] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 115.068034][ T4817] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 115.598374][ T4832] loop2: detected capacity change from 0 to 1024 [ 115.769325][ T4832] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.860964][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.967478][ T4841] loop0: detected capacity change from 0 to 256 [ 116.287373][ T4843] loop5: detected capacity change from 0 to 256 [ 116.883474][ T4292] usb 7-1: USB disconnect, device number 2 [ 117.064596][ T4841] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.111384][ T4841] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 117.189795][ T4849] loop2: detected capacity change from 0 to 256 [ 117.191574][ T4841] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 117.315716][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 117.315729][ T26] audit: type=1800 audit(1750597068.724:23): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 117.350810][ T4849] FAT-fs (loop2): Directory bread(block 64) failed [ 117.363897][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.378707][ T4849] FAT-fs (loop2): Directory bread(block 65) failed [ 117.406561][ T4849] FAT-fs (loop2): Directory bread(block 66) failed [ 117.421904][ T4849] FAT-fs (loop2): Directory bread(block 67) failed [ 117.439096][ T4849] FAT-fs (loop2): Directory bread(block 68) failed [ 117.459498][ T4849] FAT-fs (loop2): Directory bread(block 69) failed [ 117.466663][ T4849] FAT-fs (loop2): Directory bread(block 70) failed [ 117.481091][ T4849] FAT-fs (loop2): Directory bread(block 71) failed [ 117.481530][ T1108] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 117.500433][ T4849] FAT-fs (loop2): Directory bread(block 72) failed [ 117.519253][ T4849] FAT-fs (loop2): Directory bread(block 73) failed [ 117.549248][ T1108] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.580979][ T1108] usb 2-1: config 1 has no interface number 1 [ 117.597443][ T1108] usb 2-1: too many endpoints for config 1 interface 2 altsetting 6: 70, using maximum allowed: 30 [ 117.639407][ T1108] usb 2-1: config 1 interface 2 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 70 [ 117.761125][ T1108] usb 2-1: config 1 interface 2 has no altsetting 0 [ 118.631305][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.668863][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.716781][ T1108] usb 2-1: Product: syz [ 118.814875][ T1108] usb 2-1: Manufacturer: syz [ 118.861288][ T1108] usb 2-1: can't set config #1, error -71 [ 118.877684][ T1108] usb 2-1: USB disconnect, device number 4 [ 118.918642][ T4871] xt_limit: Overflow, try lower: 687865856/40 [ 119.931421][ T4893] loop1: detected capacity change from 0 to 256 [ 120.031151][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.065120][ T4893] FAT-fs (loop1): Directory bread(block 64) failed [ 120.098130][ T4893] FAT-fs (loop1): Directory bread(block 65) failed [ 120.137012][ T4893] FAT-fs (loop1): Directory bread(block 66) failed [ 120.143767][ T4893] FAT-fs (loop1): Directory bread(block 67) failed [ 120.152955][ T4893] FAT-fs (loop1): Directory bread(block 68) failed [ 120.159680][ T4893] FAT-fs (loop1): Directory bread(block 69) failed [ 120.166688][ T4893] FAT-fs (loop1): Directory bread(block 70) failed [ 120.178341][ T4867] loop6: detected capacity change from 0 to 40427 [ 120.183408][ T4893] FAT-fs (loop1): Directory bread(block 71) failed [ 120.194624][ T4893] FAT-fs (loop1): Directory bread(block 72) failed [ 120.202957][ T4893] FAT-fs (loop1): Directory bread(block 73) failed [ 120.228920][ T4867] F2FS-fs (loop6): Unrecognized mount option "memory=low" or missing value [ 120.427258][ T4899] loop7: detected capacity change from 0 to 16384 [ 121.061437][ T13] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 121.125029][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.274199][ T13] usb 6-1: Product: syz [ 122.283772][ T13] usb 6-1: Manufacturer: syz [ 122.293739][ T13] usb 6-1: SerialNumber: syz [ 122.307335][ T13] r8152-cfgselector 6-1: config 0 descriptor?? [ 122.717450][ T13] r8152-cfgselector 6-1: Unknown version 0x0000 [ 122.801840][ T13] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 124.050671][ T1111] usb 6-1: USB disconnect, device number 2 [ 124.127556][ T4945] loop1: detected capacity change from 0 to 256 [ 124.233908][ T4945] FAT-fs (loop1): Directory bread(block 64) failed [ 124.279332][ T4945] FAT-fs (loop1): Directory bread(block 65) failed [ 124.299661][ T4945] FAT-fs (loop1): Directory bread(block 66) failed [ 124.319899][ T4945] FAT-fs (loop1): Directory bread(block 67) failed [ 124.384603][ T4945] FAT-fs (loop1): Directory bread(block 68) failed [ 124.431040][ T4945] FAT-fs (loop1): Directory bread(block 69) failed [ 124.471988][ T4945] FAT-fs (loop1): Directory bread(block 70) failed [ 124.553918][ T4945] FAT-fs (loop1): Directory bread(block 71) failed [ 124.621246][ T4945] FAT-fs (loop1): Directory bread(block 72) failed [ 124.627808][ T4945] FAT-fs (loop1): Directory bread(block 73) failed [ 126.755005][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.768915][ T4988] loop0: detected capacity change from 0 to 512 [ 126.898089][ T4988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.193: bg 0: block 248: padding at end of block bitmap is not set [ 127.051762][ T4988] Quota error (device loop0): write_blk: dquota write failed [ 127.061832][ T4984] xt_limit: Overflow, try lower: 687865856/40 [ 127.108392][ T4988] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 127.139898][ T4988] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.193: Failed to acquire dquot type 1 [ 127.162059][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.188914][ T4988] EXT4-fs (loop0): 1 truncate cleaned up [ 127.190178][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.206005][ T4988] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 127.222779][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.230198][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.238123][ T4988] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.278530][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.302419][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.331346][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.355737][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.371206][ T1111] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 127.380264][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.396150][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.416001][ T1111] usb 3-1: Product: syz [ 127.421953][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.433889][ T1111] usb 3-1: Manufacturer: syz [ 127.441922][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.452028][ T1111] usb 3-1: SerialNumber: syz [ 127.470407][ T1111] r8152-cfgselector 3-1: config 0 descriptor?? [ 127.476702][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.491066][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.508712][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.518838][ T4212] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 127.564222][ T4212] hid-generic 00A0:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 127.741071][ T1111] r8152-cfgselector 3-1: Unknown version 0x0000 [ 127.980249][ T5021] Zero length message leads to an empty skb [ 128.061465][ T5016] fido_id[5016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.168519][ T5023] loop6: detected capacity change from 0 to 512 [ 128.271275][ T5023] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.352348][ T5038] loop0: detected capacity change from 0 to 256 [ 128.428014][ T5023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.613033][ T5038] FAT-fs (loop0): Directory bread(block 64) failed [ 128.651025][ T5038] FAT-fs (loop0): Directory bread(block 65) failed [ 128.676478][ T5038] FAT-fs (loop0): Directory bread(block 66) failed [ 128.689438][ T5023] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.780659][ T5038] FAT-fs (loop0): Directory bread(block 67) failed [ 128.785852][ T5023] EXT4-fs (loop6): 1 truncate cleaned up [ 128.808890][ T5023] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noquota,quota,,errors=continue. Quota mode: writeback. [ 128.830058][ T5038] FAT-fs (loop0): Directory bread(block 68) failed [ 128.837224][ T5038] FAT-fs (loop0): Directory bread(block 69) failed [ 128.864605][ T5038] FAT-fs (loop0): Directory bread(block 70) failed [ 128.901123][ T1111] r8152-cfgselector 3-1: Unknown version 0x0000 [ 128.928794][ T1111] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 128.952532][ T5038] FAT-fs (loop0): Directory bread(block 71) failed [ 129.038521][ T5038] FAT-fs (loop0): Directory bread(block 72) failed [ 129.063722][ T5038] FAT-fs (loop0): Directory bread(block 73) failed [ 129.271569][ T5081] overlayfs: missing 'lowerdir' [ 130.652793][ T5090] device bridge0 entered promiscuous mode [ 130.711901][ T5090] bridge0: port 3(macsec1) entered blocking state [ 130.805101][ T5090] bridge0: port 3(macsec1) entered disabled state [ 130.826712][ T5090] device bridge0 left promiscuous mode [ 131.285445][ T5088] loop2: detected capacity change from 0 to 256 [ 131.601663][ T26] audit: type=1107 audit(1750597083.004:24): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 131.670592][ T5107] xt_limit: Overflow, try lower: 687865856/40 [ 131.748893][ T5109] loop1: detected capacity change from 0 to 128 [ 132.242995][ T4293] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.643480][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.649887][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761299][ T4293] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 132.780430][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.806522][ T4293] usb 3-1: Product: syz [ 132.820032][ T4293] usb 3-1: Manufacturer: syz [ 132.835898][ T4293] usb 3-1: SerialNumber: syz [ 132.889256][ T4293] r8152-cfgselector 3-1: config 0 descriptor?? [ 133.088704][ T5121] overlayfs: missing 'lowerdir' [ 133.367287][ T5125] loop5: detected capacity change from 0 to 256 [ 133.505018][ T4293] r8152-cfgselector 3-1: Unknown version 0x0000 [ 133.896659][ T5125] FAT-fs (loop5): Directory bread(block 64) failed [ 134.060853][ T5125] FAT-fs (loop5): Directory bread(block 65) failed [ 134.318649][ T5125] FAT-fs (loop5): Directory bread(block 66) failed [ 134.337186][ T5125] FAT-fs (loop5): Directory bread(block 67) failed [ 134.351085][ T5125] FAT-fs (loop5): Directory bread(block 68) failed [ 134.471132][ T5125] FAT-fs (loop5): Directory bread(block 69) failed [ 134.489275][ T5125] FAT-fs (loop5): Directory bread(block 70) failed [ 134.511067][ T5125] FAT-fs (loop5): Directory bread(block 71) failed [ 134.517753][ T5125] FAT-fs (loop5): Directory bread(block 72) failed [ 134.563234][ T5125] FAT-fs (loop5): Directory bread(block 73) failed [ 134.746311][ T5141] loop1: detected capacity change from 0 to 1024 [ 134.786084][ T5141] EXT4-fs (loop1): filesystem is read-only [ 134.815286][ T5141] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 134.901082][ T5141] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 135.138771][ T5141] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: comm syz.1.222: inode #1: comm syz.1.222: iget: illegal inode # [ 135.191257][ T4293] r8152-cfgselector 3-1: Unknown version 0x0000 [ 135.207674][ T4293] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 135.320173][ T5141] EXT4-fs (loop1): no journal found [ 135.354347][ T5141] EXT4-fs (loop1): can't get journal size [ 135.458814][ T5141] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.222: iget: special inode unallocated [ 135.486280][ T5141] EXT4-fs (loop1): get root inode failed [ 135.531080][ T5141] EXT4-fs (loop1): mount failed [ 136.487247][ T5169] xt_limit: Overflow, try lower: 687865856/40 [ 137.591140][ T5171] overlayfs: missing 'lowerdir' [ 138.841408][ T5185] loop1: detected capacity change from 0 to 1024 [ 138.970636][ T5185] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.971051][ T4293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.006260][ T5192] loop0: detected capacity change from 0 to 256 [ 139.176996][ T5192] FAT-fs (loop0): Directory bread(block 64) failed [ 139.219380][ T5192] FAT-fs (loop0): Directory bread(block 65) failed [ 139.852083][ T5192] FAT-fs (loop0): Directory bread(block 66) failed [ 139.891285][ T5192] FAT-fs (loop0): Directory bread(block 67) failed [ 139.897920][ T5192] FAT-fs (loop0): Directory bread(block 68) failed [ 139.975439][ T5192] FAT-fs (loop0): Directory bread(block 69) failed [ 140.021068][ T5192] FAT-fs (loop0): Directory bread(block 70) failed [ 140.060996][ T5192] FAT-fs (loop0): Directory bread(block 71) failed [ 140.067633][ T5192] FAT-fs (loop0): Directory bread(block 72) failed [ 140.127470][ T5192] FAT-fs (loop0): Directory bread(block 73) failed [ 140.174934][ T5204] loop5: detected capacity change from 0 to 512 [ 140.211187][ T4293] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 140.221438][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.363597][ T4293] usb 3-1: Product: syz [ 140.368607][ T4293] usb 3-1: Manufacturer: syz [ 140.373388][ T4293] usb 3-1: SerialNumber: syz [ 141.452270][ T4293] r8152-cfgselector 3-1: config 0 descriptor?? [ 141.565690][ T5214] xt_limit: Overflow, try lower: 687865856/40 [ 141.601366][ T5204] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.693072][ T5204] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.736048][ T4293] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.773067][ T4293] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.838542][ T4293] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 144.069391][ T5231] loop0: detected capacity change from 0 to 512 [ 144.253909][ T5231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.359563][ T5237] overlayfs: missing 'lowerdir' [ 144.610122][ T5231] EXT4-fs (loop0): 1 truncate cleaned up [ 144.669203][ T5231] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 144.708042][ T5242] capability: warning: `syz.5.251' uses deprecated v2 capabilities in a way that may be insecure [ 144.969328][ T5251] loop0: detected capacity change from 0 to 256 [ 145.050729][ T5247] loop1: detected capacity change from 0 to 8192 [ 145.056100][ T5251] FAT-fs (loop0): Directory bread(block 64) failed [ 145.107917][ T5251] FAT-fs (loop0): Directory bread(block 65) failed [ 145.141198][ T5251] FAT-fs (loop0): Directory bread(block 66) failed [ 145.147761][ T5251] FAT-fs (loop0): Directory bread(block 67) failed [ 145.195342][ T5251] FAT-fs (loop0): Directory bread(block 68) failed [ 145.221030][ T4737] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.241512][ T5251] FAT-fs (loop0): Directory bread(block 69) failed [ 145.291164][ T5251] FAT-fs (loop0): Directory bread(block 70) failed [ 145.301282][ T5251] FAT-fs (loop0): Directory bread(block 71) failed [ 145.310039][ T5251] FAT-fs (loop0): Directory bread(block 72) failed [ 145.348505][ T5251] FAT-fs (loop0): Directory bread(block 73) failed [ 147.071258][ T4737] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 147.121375][ T4737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.129404][ T4737] usb 6-1: Product: syz [ 147.180988][ T4737] usb 6-1: Manufacturer: syz [ 147.196318][ T4737] usb 6-1: SerialNumber: syz [ 147.247816][ T4737] r8152-cfgselector 6-1: config 0 descriptor?? [ 148.121131][ T4737] r8152-cfgselector 6-1: Unknown version 0x0000 [ 148.161005][ T4737] r8152-cfgselector 6-1: Unknown version 0x0000 [ 148.170187][ T4737] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 148.488799][ T5284] overlayfs: missing 'lowerdir' [ 148.885812][ T5277] xt_limit: Overflow, try lower: 687865856/40 [ 149.479756][ T5290] loop6: detected capacity change from 0 to 1024 [ 149.563349][ T5290] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 149.715841][ T5290] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 149.742498][ T5298] loop5: detected capacity change from 0 to 256 [ 149.880535][ T5298] FAT-fs (loop5): Directory bread(block 64) failed [ 149.909892][ T5298] FAT-fs (loop5): Directory bread(block 65) failed [ 149.953747][ T5298] FAT-fs (loop5): Directory bread(block 66) failed [ 149.960310][ T5298] FAT-fs (loop5): Directory bread(block 67) failed [ 150.181491][ T5298] FAT-fs (loop5): Directory bread(block 68) failed [ 150.201974][ T5298] FAT-fs (loop5): Directory bread(block 69) failed [ 150.210429][ T5298] FAT-fs (loop5): Directory bread(block 70) failed [ 150.220580][ T5298] FAT-fs (loop5): Directory bread(block 71) failed [ 150.332162][ T5298] FAT-fs (loop5): Directory bread(block 72) failed [ 150.642338][ T5298] FAT-fs (loop5): Directory bread(block 73) failed [ 151.701130][ T4213] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.795265][ T5328] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.805343][ T5328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.364371][ T5343] loop5: detected capacity change from 0 to 512 [ 152.541121][ T4737] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 152.901529][ T4737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.931190][ T4737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.974136][ T4737] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.535941][ T4737] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.545129][ T4737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.754221][ T4213] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 153.790677][ T4737] usb 7-1: config 0 descriptor?? [ 153.898240][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.005954][ T4213] usb 3-1: Product: syz [ 154.010288][ T4213] usb 3-1: Manufacturer: syz [ 154.015328][ T4213] usb 3-1: SerialNumber: syz [ 154.021529][ T4213] r8152-cfgselector 3-1: config 0 descriptor?? [ 154.071589][ T4213] r8152-cfgselector 3-1: can't set config #0, error -71 [ 154.091950][ T5346] xt_limit: Overflow, try lower: 687865856/40 [ 154.141246][ T4213] r8152-cfgselector 3-1: Unknown version 0x0000 [ 154.169377][ T4213] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 154.533305][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 154.637773][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 154.672022][ T5351] loop0: detected capacity change from 0 to 256 [ 154.796859][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 154.914782][ T5343] EXT4-fs (loop5): orphan cleanup on readonly fs [ 154.927643][ T5343] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.278: bg 0: block 248: padding at end of block bitmap is not set [ 154.944736][ T5343] Quota error (device loop5): write_blk: dquota write failed [ 154.952233][ T5343] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 154.962284][ T5343] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.278: Failed to acquire dquot type 1 [ 154.975694][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 154.989573][ T5343] EXT4-fs (loop5): 1 truncate cleaned up [ 154.998908][ T5343] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 155.025789][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.037292][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.045141][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.053011][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.060434][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.081825][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.099974][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.144969][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.218821][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.231575][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.240131][ T4737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 155.249993][ T4737] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 155.277999][ T4737] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 155.397668][ T4737] usb 7-1: USB disconnect, device number 3 [ 155.576832][ T5366] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 155.576911][ T5366] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 155.576925][ T5366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 155.581859][ T5366] syz.2.285 (5366) used greatest stack depth: 17216 bytes left [ 155.582512][ T26] audit: type=1800 audit(1750597106.984:25): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.285" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 156.549286][ T5373] loop1: detected capacity change from 0 to 256 [ 156.589547][ T5374] xt_socket: unknown flags 0x50 [ 156.624931][ T5373] FAT-fs (loop1): Directory bread(block 64) failed [ 156.786344][ T5373] FAT-fs (loop1): Directory bread(block 65) failed [ 156.821073][ T5373] FAT-fs (loop1): Directory bread(block 66) failed [ 156.827638][ T5373] FAT-fs (loop1): Directory bread(block 67) failed [ 156.879572][ T5375] fido_id[5375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 156.955078][ T5373] FAT-fs (loop1): Directory bread(block 68) failed [ 157.097754][ T5373] FAT-fs (loop1): Directory bread(block 69) failed [ 157.158713][ T5373] FAT-fs (loop1): Directory bread(block 70) failed [ 157.169362][ T26] audit: type=1326 audit(1750597108.574:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.173466][ T5373] FAT-fs (loop1): Directory bread(block 71) failed [ 157.273317][ T5392] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 157.282557][ T5392] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.295844][ T5373] FAT-fs (loop1): Directory bread(block 72) failed [ 157.475490][ T5373] FAT-fs (loop1): Directory bread(block 73) failed [ 157.514579][ T26] audit: type=1326 audit(1750597108.894:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.715973][ T26] audit: type=1326 audit(1750597108.894:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.757217][ T26] audit: type=1326 audit(1750597108.894:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.795783][ T26] audit: type=1326 audit(1750597108.894:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.851063][ T26] audit: type=1326 audit(1750597108.894:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 157.874455][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.276435][ T26] audit: type=1326 audit(1750597108.914:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 158.485704][ T5407] xt_limit: Overflow, try lower: 687865856/40 [ 158.516311][ T5406] loop5: detected capacity change from 0 to 2048 [ 158.582845][ T5406] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 158.882998][ T7] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 158.899987][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.994635][ T7] usb 3-1: Product: syz [ 159.999114][ T7] usb 3-1: Manufacturer: syz [ 160.004233][ T7] usb 3-1: SerialNumber: syz [ 160.216230][ T5415] Restarting kernel threads ... done. [ 160.260210][ T7] r8152-cfgselector 3-1: config 0 descriptor?? [ 160.281180][ T7] r8152-cfgselector 3-1: can't set config #0, error -71 [ 160.301135][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 160.319633][ T7] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 160.320012][ T4286] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.399332][ T4286] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 160.433290][ T4286] EXT4-fs (loop5): This should not happen!! Data will be lost [ 160.433290][ T4286] [ 160.471651][ T4286] EXT4-fs (loop5): Total free blocks count 0 [ 160.477690][ T4286] EXT4-fs (loop5): Free/Dirty block details [ 160.515676][ T4286] EXT4-fs (loop5): free_blocks=2415919504 [ 160.545646][ T4286] EXT4-fs (loop5): dirty_blocks=2912 [ 160.568717][ T4286] EXT4-fs (loop5): Block reservation details [ 160.582004][ T4286] EXT4-fs (loop5): i_reserved_data_blocks=182 [ 160.724730][ T5057] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 858 with error 28 [ 160.772068][ T5057] EXT4-fs (loop5): This should not happen!! Data will be lost [ 160.772068][ T5057] [ 160.857978][ T5427] overlayfs: failed to resolve './file0': -2 [ 161.478272][ T5433] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.487306][ T5433] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.684391][ T5436] loop5: detected capacity change from 0 to 256 [ 161.823698][ T5436] FAT-fs (loop5): Directory bread(block 64) failed [ 161.862077][ T5436] FAT-fs (loop5): Directory bread(block 65) failed [ 161.918224][ T5436] FAT-fs (loop5): Directory bread(block 66) failed [ 161.961135][ T5436] FAT-fs (loop5): Directory bread(block 67) failed [ 161.998406][ T5436] FAT-fs (loop5): Directory bread(block 68) failed [ 162.041914][ T5436] FAT-fs (loop5): Directory bread(block 69) failed [ 162.073346][ T5445] loop6: detected capacity change from 0 to 2048 [ 162.083683][ T5436] FAT-fs (loop5): Directory bread(block 70) failed [ 162.090419][ T5439] loop0: detected capacity change from 0 to 8192 [ 162.124623][ T5436] FAT-fs (loop5): Directory bread(block 71) failed [ 162.132221][ T5436] FAT-fs (loop5): Directory bread(block 72) failed [ 162.139545][ T5436] FAT-fs (loop5): Directory bread(block 73) failed [ 162.305333][ T5445] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 162.661118][ T4292] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.099536][ T4286] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 164.153625][ T4286] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 164.180609][ T4286] EXT4-fs (loop6): This should not happen!! Data will be lost [ 164.180609][ T4286] [ 164.199713][ T4286] EXT4-fs (loop6): Total free blocks count 0 [ 164.207222][ T4286] EXT4-fs (loop6): Free/Dirty block details [ 164.220721][ T4286] EXT4-fs (loop6): free_blocks=2415919504 [ 164.248416][ T4286] EXT4-fs (loop6): dirty_blocks=8192 [ 164.259700][ T4286] EXT4-fs (loop6): Block reservation details [ 164.268246][ T4286] EXT4-fs (loop6): i_reserved_data_blocks=512 [ 164.394965][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 164.399409][ T4286] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 164.443476][ T4292] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 164.504535][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.668207][ T4292] usb 3-1: Product: syz [ 164.748897][ T4292] usb 3-1: Manufacturer: syz [ 164.844271][ T4292] usb 3-1: SerialNumber: syz [ 164.978838][ T4286] EXT4-fs (loop6): This should not happen!! Data will be lost [ 164.978838][ T4286] [ 164.997021][ T4292] r8152-cfgselector 3-1: config 0 descriptor?? [ 165.191006][ T4292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 165.211015][ T4292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 165.223835][ T4292] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 165.242722][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 165.242734][ T26] audit: type=1326 audit(1750597116.654:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.322181][ T26] audit: type=1326 audit(1750597116.684:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.344848][ T4214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.401030][ T5482] xt_limit: Overflow, try lower: 687865856/40 [ 165.417686][ T26] audit: type=1326 audit(1750597116.684:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.472329][ T5487] loop2: detected capacity change from 0 to 256 [ 165.501336][ T26] audit: type=1326 audit(1750597116.684:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.535026][ T26] audit: type=1326 audit(1750597116.684:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.559964][ T26] audit: type=1326 audit(1750597116.684:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.582417][ T26] audit: type=1326 audit(1750597116.684:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.605500][ T26] audit: type=1326 audit(1750597116.684:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.630983][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 165.653964][ T5487] FAT-fs (loop2): Directory bread(block 64) failed [ 165.680168][ T5487] FAT-fs (loop2): Directory bread(block 65) failed [ 165.691170][ T5487] FAT-fs (loop2): Directory bread(block 66) failed [ 165.719700][ T5487] FAT-fs (loop2): Directory bread(block 67) failed [ 165.730955][ T26] audit: type=1326 audit(1750597116.684:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.753659][ T5487] FAT-fs (loop2): Directory bread(block 68) failed [ 165.766877][ T5487] FAT-fs (loop2): Directory bread(block 69) failed [ 165.785861][ T5487] FAT-fs (loop2): Directory bread(block 70) failed [ 165.790620][ T26] audit: type=1326 audit(1750597116.684:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 165.803581][ T5487] FAT-fs (loop2): Directory bread(block 71) failed [ 165.834298][ T4214] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.857628][ T5487] FAT-fs (loop2): Directory bread(block 72) failed [ 165.876672][ T5487] FAT-fs (loop2): Directory bread(block 73) failed [ 165.934220][ T4214] usb 1-1: config 131 has an invalid interface number: 152 but max is 0 [ 165.954135][ T4214] usb 1-1: config 131 has no interface number 0 [ 165.978293][ T4214] usb 1-1: config 131 interface 152 has no altsetting 0 [ 166.464890][ T5491] loop1: detected capacity change from 0 to 256 [ 166.491201][ T4214] usb 1-1: New USB device found, idVendor=4eb3, idProduct=5155, bcdDevice=10.85 [ 166.518015][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.537945][ T4214] usb 1-1: Product: syz [ 166.549895][ T4214] usb 1-1: Manufacturer: syz [ 166.557111][ T4214] usb 1-1: SerialNumber: syz [ 166.824305][ T5486] loop6: detected capacity change from 0 to 40427 [ 166.863117][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 166.926388][ T5495] loop2: detected capacity change from 0 to 256 [ 166.936672][ T5486] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 166.952815][ T5486] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 166.972549][ T4214] usb 1-1: bad CDC descriptors [ 166.996234][ T4214] usb 1-1: USB disconnect, device number 3 [ 167.030739][ T5486] F2FS-fs (loop6): Found nat_bits in checkpoint [ 167.031370][ T5495] FAT-fs (loop2): Directory bread(block 64) failed [ 167.103374][ T5497] loop1: detected capacity change from 0 to 2048 [ 167.127762][ T5495] FAT-fs (loop2): Directory bread(block 65) failed [ 167.143272][ T5495] FAT-fs (loop2): Directory bread(block 66) failed [ 167.211418][ T5486] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 167.218625][ T5486] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 167.228842][ T5495] FAT-fs (loop2): Directory bread(block 67) failed [ 167.241938][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 167.261984][ T5495] FAT-fs (loop2): Directory bread(block 68) failed [ 167.268533][ T5495] FAT-fs (loop2): Directory bread(block 69) failed [ 167.348778][ T5495] FAT-fs (loop2): Directory bread(block 70) failed [ 167.381141][ T5495] FAT-fs (loop2): Directory bread(block 71) failed [ 167.389524][ T5509] capability: warning: `syz.5.332' uses 32-bit capabilities (legacy support in use) [ 167.413618][ T5495] FAT-fs (loop2): Directory bread(block 72) failed [ 167.431995][ T5495] FAT-fs (loop2): Directory bread(block 73) failed [ 168.032798][ T5495] 9pnet: Insufficient options for proto=fd [ 168.060211][ T5507] overlayfs: failed to resolve './file0': -2 [ 168.350756][ T4286] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.368404][ T4286] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 168.382489][ T4286] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.382489][ T4286] [ 168.392269][ T4286] EXT4-fs (loop1): Total free blocks count 0 [ 168.398253][ T4286] EXT4-fs (loop1): Free/Dirty block details [ 168.404245][ T4286] EXT4-fs (loop1): free_blocks=2415919504 [ 168.409970][ T4286] EXT4-fs (loop1): dirty_blocks=8192 [ 168.415355][ T4286] EXT4-fs (loop1): Block reservation details [ 168.421488][ T4286] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 169.194569][ T4286] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 169.217645][ T5527] loop0: detected capacity change from 0 to 256 [ 169.256558][ T4286] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.256558][ T4286] [ 169.393225][ T5527] FAT-fs (loop0): Directory bread(block 64) failed [ 169.425344][ T5527] FAT-fs (loop0): Directory bread(block 65) failed [ 169.471347][ T5527] FAT-fs (loop0): Directory bread(block 66) failed [ 169.529800][ T5527] FAT-fs (loop0): Directory bread(block 67) failed [ 169.577818][ T5527] FAT-fs (loop0): Directory bread(block 68) failed [ 169.603649][ T5527] FAT-fs (loop0): Directory bread(block 69) failed [ 169.610982][ T5527] FAT-fs (loop0): Directory bread(block 70) failed [ 169.617635][ T5527] FAT-fs (loop0): Directory bread(block 71) failed [ 169.624375][ T5527] FAT-fs (loop0): Directory bread(block 72) failed [ 169.632167][ T5527] FAT-fs (loop0): Directory bread(block 73) failed [ 171.280331][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 171.311799][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 171.311812][ T26] audit: type=1326 audit(1750597122.624:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 171.434559][ T26] audit: type=1326 audit(1750597122.624:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 171.538094][ T26] audit: type=1326 audit(1750597122.634:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 171.591154][ T4293] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.689293][ T26] audit: type=1326 audit(1750597122.634:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 171.846614][ T26] audit: type=1326 audit(1750597122.634:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.003814][ T26] audit: type=1326 audit(1750597122.634:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.144157][ T5558] overlayfs: conflicting options: userxattr,metacopy=on [ 172.152853][ T26] audit: type=1326 audit(1750597122.634:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.180504][ T5562] loop2: detected capacity change from 0 to 128 [ 172.189348][ T26] audit: type=1326 audit(1750597122.634:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.213140][ T26] audit: type=1326 audit(1750597122.634:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.248465][ T4293] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 172.257771][ T26] audit: type=1326 audit(1750597122.634:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 172.289108][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.334303][ T4293] usb 2-1: Product: syz [ 172.338519][ T4293] usb 2-1: Manufacturer: syz [ 172.353230][ T4293] usb 2-1: SerialNumber: syz [ 172.362357][ T5566] loop0: detected capacity change from 0 to 256 [ 172.378822][ T4293] r8152-cfgselector 2-1: config 0 descriptor?? [ 172.507277][ T5566] FAT-fs (loop0): Directory bread(block 64) failed [ 172.521353][ T5566] FAT-fs (loop0): Directory bread(block 65) failed [ 172.554117][ T5566] FAT-fs (loop0): Directory bread(block 66) failed [ 172.597133][ T5566] FAT-fs (loop0): Directory bread(block 67) failed [ 172.625276][ T5566] FAT-fs (loop0): Directory bread(block 68) failed [ 172.646927][ T5566] FAT-fs (loop0): Directory bread(block 69) failed [ 172.671140][ T4293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 172.689701][ T5566] FAT-fs (loop0): Directory bread(block 70) failed [ 172.703500][ T5566] FAT-fs (loop0): Directory bread(block 71) failed [ 172.710484][ T5566] FAT-fs (loop0): Directory bread(block 72) failed [ 172.722210][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.723979][ T5566] FAT-fs (loop0): Directory bread(block 73) failed [ 172.730299][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.737680][ T4293] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 172.960750][ T4663] usb 2-1: USB disconnect, device number 5 [ 173.539315][ T5570] loop6: detected capacity change from 0 to 40427 [ 173.570366][ T5570] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 173.587656][ T5570] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 173.623029][ T5570] F2FS-fs (loop6): invalid crc value [ 173.665449][ T5570] F2FS-fs (loop6): Found nat_bits in checkpoint [ 173.821572][ T5570] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 173.829183][ T5570] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 175.313506][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.415360][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.608806][ T5603] loop6: detected capacity change from 0 to 256 [ 175.661825][ T5603] FAT-fs (loop6): Directory bread(block 64) failed [ 175.668393][ T5603] FAT-fs (loop6): Directory bread(block 65) failed [ 175.676113][ T5603] FAT-fs (loop6): Directory bread(block 66) failed [ 175.686119][ T4217] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.690207][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 175.699584][ T5603] FAT-fs (loop6): Directory bread(block 67) failed [ 175.699865][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 175.708460][ T5603] FAT-fs (loop6): Directory bread(block 68) failed [ 175.719416][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.726837][ T5603] FAT-fs (loop6): Directory bread(block 69) failed [ 175.735114][ T5603] FAT-fs (loop6): Directory bread(block 70) failed [ 175.740066][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 175.748103][ T5603] FAT-fs (loop6): Directory bread(block 71) failed [ 175.758894][ T5603] FAT-fs (loop6): Directory bread(block 72) failed [ 175.775939][ T5603] FAT-fs (loop6): Directory bread(block 73) failed [ 175.978972][ T5564] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.988061][ T5564] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.997561][ T5564] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.023006][ T5564] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.078979][ T4217] usb 2-1: Using ep0 maxpacket: 16 [ 176.202142][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.242801][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.298334][ T4217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.365989][ T4217] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.416850][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.562775][ T4217] usb 2-1: config 0 descriptor?? [ 176.767876][ T5609] loop5: detected capacity change from 0 to 256 [ 176.897701][ T5609] FAT-fs (loop5): Directory bread(block 64) failed [ 176.932241][ T5609] FAT-fs (loop5): Directory bread(block 65) failed [ 176.947036][ T5609] FAT-fs (loop5): Directory bread(block 66) failed [ 176.955898][ T5609] FAT-fs (loop5): Directory bread(block 67) failed [ 176.963777][ T5609] FAT-fs (loop5): Directory bread(block 68) failed [ 176.970425][ T5609] FAT-fs (loop5): Directory bread(block 69) failed [ 176.977611][ T5609] FAT-fs (loop5): Directory bread(block 70) failed [ 177.026107][ T5609] FAT-fs (loop5): Directory bread(block 71) failed [ 177.033123][ T5609] FAT-fs (loop5): Directory bread(block 72) failed [ 177.039831][ T5609] FAT-fs (loop5): Directory bread(block 73) failed [ 177.066305][ T4292] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.082762][ T4217] microsoft 0003:045E:07DA.0003: unknown main item tag 0x2 [ 177.093876][ T4217] microsoft 0003:045E:07DA.0003: unknown main item tag 0xd [ 177.103701][ T4217] microsoft 0003:045E:07DA.0003: global environment stack underflow [ 177.112657][ T4217] microsoft 0003:045E:07DA.0003: item 0 1 1 11 parsing failed [ 177.120647][ T4217] microsoft 0003:045E:07DA.0003: parse failed [ 177.127470][ T4217] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 177.893954][ T4217] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.923100][ T1111] usb 2-1: USB disconnect, device number 6 [ 177.969328][ T5622] loop5: detected capacity change from 0 to 256 [ 177.993786][ T5622] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 178.051219][ T4292] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.063889][ T4292] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.086802][ T5625] loop1: detected capacity change from 0 to 512 [ 178.089914][ T4292] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.257025][ T4292] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 178.268585][ T4292] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.323754][ T5625] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.372: invalid indirect mapped block 10 (level 1) [ 178.347292][ T5625] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.372: invalid indirect mapped block 8 (level 1) [ 178.402156][ T4292] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.640289][ T4292] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.659448][ T4292] usb 7-1: Product: syz [ 178.669550][ T4292] usb 7-1: Manufacturer: syz [ 178.690227][ T5625] EXT4-fs (loop1): 1 truncate cleaned up [ 178.696422][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 178.782210][ T4292] cdc_wdm 7-1:1.0: skipping garbage [ 178.789721][ T4292] cdc_wdm 7-1:1.0: skipping garbage [ 178.801317][ T4217] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 178.827028][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.894131][ T4217] usb 1-1: Product: syz [ 178.898332][ T4217] usb 1-1: Manufacturer: syz [ 178.906231][ T4292] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 178.912353][ T4292] cdc_wdm 7-1:1.0: Unknown control protocol [ 178.918635][ T4217] usb 1-1: SerialNumber: syz [ 178.940203][ T4217] r8152-cfgselector 1-1: config 0 descriptor?? [ 178.989533][ T1111] usb 7-1: USB disconnect, device number 4 [ 179.118144][ T5620] loop2: detected capacity change from 0 to 40427 [ 179.201251][ T4217] r8152-cfgselector 1-1: Unknown version 0x0000 [ 179.251676][ T4217] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 179.302017][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 179.302030][ T26] audit: type=1326 audit(1750597130.714:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 179.431765][ T26] audit: type=1326 audit(1750597130.714:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 179.468519][ T4217] usb 1-1: USB disconnect, device number 4 [ 179.529067][ T26] audit: type=1326 audit(1750597130.744:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 179.599553][ T5652] loop1: detected capacity change from 0 to 256 [ 179.601060][ T26] audit: type=1326 audit(1750597130.744:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 179.659004][ T26] audit: type=1326 audit(1750597130.744:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 179.708591][ T26] audit: type=1326 audit(1750597130.804:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 179.762319][ T5652] FAT-fs (loop1): Directory bread(block 64) failed [ 179.783939][ T26] audit: type=1326 audit(1750597130.804:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 179.791343][ T5652] FAT-fs (loop1): Directory bread(block 65) failed [ 179.865892][ T26] audit: type=1326 audit(1750597130.804:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 179.897938][ T5652] FAT-fs (loop1): Directory bread(block 66) failed [ 179.919184][ T5652] FAT-fs (loop1): Directory bread(block 67) failed [ 179.941207][ T26] audit: type=1326 audit(1750597130.804:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6b7cfc963 code=0x7ffc0000 [ 179.961569][ T5652] FAT-fs (loop1): Directory bread(block 68) failed [ 179.970667][ T5652] FAT-fs (loop1): Directory bread(block 69) failed [ 180.011168][ T5652] FAT-fs (loop1): Directory bread(block 70) failed [ 180.017742][ T5652] FAT-fs (loop1): Directory bread(block 71) failed [ 180.025762][ T5654] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.055172][ T5654] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.072831][ T26] audit: type=1326 audit(1750597131.114:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6b7cfb3df code=0x7ffc0000 [ 180.073265][ T5652] FAT-fs (loop1): Directory bread(block 72) failed [ 180.151097][ T5652] FAT-fs (loop1): Directory bread(block 73) failed [ 180.458876][ T5665] loop0: detected capacity change from 0 to 512 [ 180.475330][ T5662] loop6: detected capacity change from 0 to 2048 [ 181.042083][ T5646] loop2: detected capacity change from 0 to 40427 [ 181.094510][ T5649] loop5: detected capacity change from 0 to 40427 [ 181.105227][ T5662] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 181.132877][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 181.213575][ T5646] F2FS-fs (loop2): invalid crc value [ 181.232379][ T5649] F2FS-fs (loop5): invalid crc value [ 181.506855][ T5646] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.541860][ T5649] F2FS-fs (loop5): Found nat_bits in checkpoint [ 181.690649][ T4307] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.751426][ T4307] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 181.766119][ T5646] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 181.780504][ T5649] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 181.796859][ T4307] EXT4-fs (loop6): This should not happen!! Data will be lost [ 181.796859][ T4307] [ 181.818399][ T5646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 181.834709][ T4307] EXT4-fs (loop6): Total free blocks count 0 [ 181.850300][ T4307] EXT4-fs (loop6): Free/Dirty block details [ 181.862868][ T4307] EXT4-fs (loop6): free_blocks=2415919504 [ 181.888158][ T4307] EXT4-fs (loop6): dirty_blocks=2176 [ 181.906528][ T4307] EXT4-fs (loop6): Block reservation details [ 181.924289][ T4307] EXT4-fs (loop6): i_reserved_data_blocks=136 [ 182.002264][ T4307] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 112 with error 28 [ 182.015303][ T4307] EXT4-fs (loop6): This should not happen!! Data will be lost [ 182.015303][ T4307] [ 182.022472][ T5646] attempt to access beyond end of device [ 182.022472][ T5646] loop2: rw=2049, want=53256, limit=40427 [ 182.122142][ T5689] attempt to access beyond end of device [ 182.122142][ T5689] loop5: rw=2049, want=45104, limit=40427 [ 182.515953][ T5646] attempt to access beyond end of device [ 182.515953][ T5646] loop2: rw=0, want=53256, limit=40427 [ 182.580594][ T4454] attempt to access beyond end of device [ 182.580594][ T4454] loop5: rw=2049, want=40976, limit=40427 [ 182.719489][ T4182] attempt to access beyond end of device [ 182.719489][ T4182] loop2: rw=2049, want=45112, limit=40427 [ 182.871100][ T5695] loop1: detected capacity change from 0 to 16 [ 182.969971][ T5695] erofs: (device loop1): mounted with root inode @ nid 36. [ 183.003971][ T5695] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 183.071142][ T5695] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 184.184868][ T5699] loop6: detected capacity change from 0 to 40427 [ 184.202437][ T5699] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 184.315403][ T5699] F2FS-fs (loop6): invalid crc value [ 184.362988][ T26] kauditd_printk_skb: 130 callbacks suppressed [ 184.363003][ T26] audit: type=1326 audit(1750597135.774:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5711 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 184.418688][ T5699] F2FS-fs (loop6): Found nat_bits in checkpoint [ 184.449304][ T5717] loop2: detected capacity change from 0 to 256 [ 184.544501][ T26] audit: type=1326 audit(1750597135.774:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5711 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b7cfc929 code=0x7ffc0000 [ 184.607617][ T5717] FAT-fs (loop2): Directory bread(block 64) failed [ 184.651844][ T5717] FAT-fs (loop2): Directory bread(block 65) failed [ 184.702469][ T5717] FAT-fs (loop2): Directory bread(block 66) failed [ 184.709050][ T5717] FAT-fs (loop2): Directory bread(block 67) failed [ 184.723943][ T5699] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 184.766639][ T5717] FAT-fs (loop2): Directory bread(block 68) failed [ 184.773493][ T5717] FAT-fs (loop2): Directory bread(block 69) failed [ 184.780238][ T5717] FAT-fs (loop2): Directory bread(block 70) failed [ 184.789500][ T5717] FAT-fs (loop2): Directory bread(block 71) failed [ 185.118229][ T5717] FAT-fs (loop2): Directory bread(block 72) failed [ 185.474634][ T5717] FAT-fs (loop2): Directory bread(block 73) failed [ 185.768556][ T5723] loop5: detected capacity change from 0 to 2048 [ 186.355195][ T5723] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 188.382867][ T5746] loop5: detected capacity change from 0 to 256 [ 188.474530][ T5746] exfat: Deprecated parameter 'utf8' [ 188.480455][ T5746] exfat: Deprecated parameter 'utf8' [ 188.653586][ T5746] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 188.993437][ T5747] loop2: detected capacity change from 0 to 512 [ 189.143813][ T5747] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 189.275966][ T5747] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.519403][ T5745] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.404: corrupted xattr block 33 [ 189.621340][ T5745] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 189.671358][ T5745] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #15: comm syz.2.404: mark_inode_dirty error [ 190.017776][ T4182] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 190.782359][ T4182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 190.808110][ T4182] EXT4-fs error (device loop2): ext4_quota_off:6510: inode #3: comm syz-executor: mark_inode_dirty error [ 190.831444][ T4182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 190.850267][ T4182] EXT4-fs error (device loop2): ext4_quota_off:6510: inode #4: comm syz-executor: mark_inode_dirty error [ 191.382299][ T1108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 191.751178][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.770310][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.791189][ T1108] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 191.800383][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.811552][ T1108] usb 7-1: config 0 descriptor?? [ 192.201840][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 193.021125][ T1108] hid-led: probe of 0003:0FC5:B080.0004 failed with error -71 [ 193.077350][ T1108] usb 7-1: USB disconnect, device number 5 [ 193.201418][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.228920][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.280791][ T5775] device bridge_slave_0 entered promiscuous mode [ 193.340813][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.358305][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.382546][ T5775] device bridge_slave_1 entered promiscuous mode [ 193.429296][ T5763] loop5: detected capacity change from 0 to 131072 [ 193.492787][ T5763] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 193.518655][ T5763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 193.520424][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.551781][ T5763] F2FS-fs (loop5): invalid crc value [ 193.566989][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.641177][ T5763] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 193.723305][ T5775] team0: Port device team_slave_0 added [ 193.735781][ T5775] team0: Port device team_slave_1 added [ 193.761247][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 193.797716][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.812597][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.906358][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.227406][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233795][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279505][ T5824] netlink: 40 bytes leftover after parsing attributes in process `syz.6.422'. [ 194.435954][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.481107][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.684285][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.729134][ T5810] loop1: detected capacity change from 0 to 40427 [ 194.801697][ T5810] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 195.073027][ T5810] F2FS-fs (loop1): invalid crc value [ 195.153588][ T5810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.401007][ T5810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.577263][ T5853] loop5: detected capacity change from 0 to 1024 [ 195.709672][ T5853] EXT4-fs (loop5): Ignoring removed nobh option [ 195.716154][ T5853] EXT4-fs (loop5): Ignoring removed bh option [ 195.722905][ T5853] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.831186][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 195.979141][ T5853] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 196.058537][ T5775] device hsr_slave_0 entered promiscuous mode [ 198.022380][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 198.029379][ T5775] device hsr_slave_1 entered promiscuous mode [ 198.048105][ T4170] attempt to access beyond end of device [ 198.048105][ T4170] loop1: rw=2049, want=40976, limit=40427 [ 198.080664][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.091088][ T5775] Cannot create hsr debugfs directory [ 198.336529][ T548] device hsr_slave_0 left promiscuous mode [ 198.351724][ T548] device hsr_slave_1 left promiscuous mode [ 198.591056][ T548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.648534][ T5874] loop5: detected capacity change from 0 to 16 [ 198.656244][ T548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.688184][ T548] device bridge_slave_1 left promiscuous mode [ 198.727784][ T5874] erofs: (device loop5): mounted with root inode @ nid 36. [ 198.742742][ T548] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.801201][ T548] device bridge_slave_0 left promiscuous mode [ 198.810676][ T5874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.811590][ T548] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.016844][ T548] team0 (unregistering): Port device team_slave_1 removed [ 199.053577][ T26] audit: type=1326 audit(1750597150.464:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.103528][ T26] audit: type=1326 audit(1750597150.494:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.126772][ T26] audit: type=1326 audit(1750597150.494:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.150263][ T26] audit: type=1326 audit(1750597150.494:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.151850][ T548] team0 (unregistering): Port device team_slave_0 removed [ 199.181100][ T26] audit: type=1326 audit(1750597150.494:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.379209][ T26] audit: type=1326 audit(1750597150.494:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.439572][ T26] audit: type=1326 audit(1750597150.494:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.473023][ T26] audit: type=1326 audit(1750597150.534:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.5.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f057d4929 code=0x7ffc0000 [ 199.573621][ T548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.588579][ T548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.656186][ T548] bond0 (unregistering): Released all slaves [ 200.018266][ T21] Bluetooth: hci7: command 0x0409 tx timeout [ 200.185622][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 200.218976][ T5893] loop1: detected capacity change from 0 to 512 [ 200.327100][ T5897] overlayfs: failed to resolve './file1': -2 [ 200.582414][ T5775] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 200.616820][ T5893] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 200.645059][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 200.671896][ T5775] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 200.679462][ T5893] Quota error (device loop1): write_blk: dquota write failed [ 200.711046][ T5775] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 200.731278][ T5893] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 200.781092][ T5893] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.437: Failed to acquire dquot type 0 [ 200.802377][ T5893] EXT4-fs (loop1): 1 truncate cleaned up [ 200.812483][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.856400][ T5893] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.000126][ T5775] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 201.079176][ T5893] x_tables: duplicate underflow at hook 4 [ 201.446603][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 201.478174][ T5885] loop5: detected capacity change from 0 to 40427 [ 201.535451][ T5885] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 201.543297][ T5885] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 201.558325][ T5885] F2FS-fs (loop5): invalid crc value [ 201.589221][ T5885] F2FS-fs (loop5): Found nat_bits in checkpoint [ 201.766100][ T5885] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 201.783825][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.798698][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.808182][ T5864] device bridge_slave_0 entered promiscuous mode [ 201.811643][ T5885] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 201.900395][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.919750][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.954346][ T5864] device bridge_slave_1 entered promiscuous mode [ 202.152082][ T4214] Bluetooth: hci7: command 0x041b tx timeout [ 202.184631][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.509574][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.729028][ T5864] team0: Port device team_slave_0 added [ 202.783005][ T5864] team0: Port device team_slave_1 added [ 202.875631][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.941972][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.980323][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.013634][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.020608][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.138295][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.180453][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.210111][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.258623][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.350981][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.365725][ T5950] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.415013][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.435276][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.488707][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.495858][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.581022][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.158801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.231071][ T21] Bluetooth: hci7: command 0x040f tx timeout [ 204.275017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.387675][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.394811][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.434026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.461975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.497994][ T5864] device hsr_slave_0 entered promiscuous mode [ 204.522712][ T5864] device hsr_slave_1 entered promiscuous mode [ 204.606158][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.628339][ T5864] Cannot create hsr debugfs directory [ 204.636131][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 204.636144][ T26] audit: type=1326 audit(1750597156.044:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb294a67929 code=0x7ffc0000 [ 204.681023][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.709459][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.739983][ T26] audit: type=1326 audit(1750597156.084:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb294a67929 code=0x7ffc0000 [ 204.761929][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.788831][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.827476][ T26] audit: type=1326 audit(1750597156.084:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb294a67929 code=0x7ffc0000 [ 204.988715][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.050375][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.090692][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.127786][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.171975][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.252406][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.274454][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.291787][ T5958] loop5: detected capacity change from 0 to 40427 [ 205.372771][ T5958] F2FS-fs (loop5): invalid crc value [ 205.426754][ T5958] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 205.708328][ T5958] F2FS-fs (loop5): Start checkpoint disabled! [ 205.756236][ T5864] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 205.781350][ T5958] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 205.974461][ T5864] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 206.020716][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.043436][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.311073][ T21] Bluetooth: hci7: command 0x0419 tx timeout [ 206.431252][ T5864] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.759194][ T4212] Bluetooth: hci5: command 0x0406 tx timeout [ 206.793578][ T5864] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.817721][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.829112][ T5992] loop1: detected capacity change from 0 to 512 [ 206.963493][ T5992] EXT4-fs (loop1): Ignoring removed nobh option [ 207.077989][ T5992] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.451: invalid indirect mapped block 256 (level 2) [ 207.196174][ T5992] EXT4-fs (loop1): 2 truncates cleaned up [ 207.211728][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 207.894035][ T26] audit: type=1800 audit(1750597159.304:254): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.451" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 207.904952][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.942129][ T6007] netlink: 'syz.5.452': attribute type 3 has an invalid length. [ 207.958823][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.972132][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.999408][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.041697][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.067890][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.102869][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.109959][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.171935][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.287244][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.302493][ T6014] loop5: detected capacity change from 0 to 128 [ 208.359465][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.384716][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.391856][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.762079][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.246788][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.289623][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.596388][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.807531][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.854887][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.882596][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.910572][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.929664][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.938364][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.947053][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.964088][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 209.982834][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.863072][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.914292][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.122933][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.132745][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.192662][ T5775] device veth0_vlan entered promiscuous mode [ 211.962501][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.970362][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.124986][ T6044] loop6: detected capacity change from 0 to 1024 [ 212.203764][ T6044] JBD2: no valid journal superblock found [ 212.244983][ T6044] EXT4-fs (loop6): error loading journal [ 212.260039][ T5775] device veth1_vlan entered promiscuous mode [ 212.297154][ T26] audit: type=1326 audit(1750597163.704:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.331765][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 212.397426][ T26] audit: type=1326 audit(1750597163.734:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.420696][ T26] audit: type=1326 audit(1750597163.734:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.451316][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.453475][ T26] audit: type=1326 audit(1750597163.734:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.460057][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.505517][ T5775] device veth0_macvtap entered promiscuous mode [ 212.533150][ T5775] device veth1_macvtap entered promiscuous mode [ 212.590602][ T26] audit: type=1326 audit(1750597163.734:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.664636][ T27] INFO: task syz.4.15:4317 blocked for more than 144 seconds. [ 212.704041][ T27] Not tainted 5.15.185-syzkaller #0 [ 212.711421][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.752985][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.805738][ T27] task:syz.4.15 state:D stack:27504 pid: 4317 ppid: 4169 flags:0x00004004 [ 212.820998][ T26] audit: type=1326 audit(1750597163.734:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.864053][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.888607][ T27] Call Trace: [ 212.900049][ T27] [ 212.909008][ T27] __schedule+0x11b8/0x43b0 [ 212.914162][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.938134][ T27] ? release_firmware_map_entry+0x190/0x190 [ 212.960835][ T26] audit: type=1326 audit(1750597163.744:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 212.993804][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.009596][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 213.032199][ T27] ? lock_chain_count+0x20/0x20 [ 213.040750][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.065868][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 213.083517][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 213.096364][ T26] audit: type=1326 audit(1750597163.744:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 213.125493][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.147338][ T27] schedule+0x11b/0x1e0 [ 213.162504][ T27] schedule_preempt_disabled+0xf/0x20 [ 213.177580][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.191771][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 213.211056][ T27] ? down_write_killable_nested+0x90/0x90 [ 213.221358][ T26] audit: type=1326 audit(1750597163.744:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 213.245414][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.263290][ T27] ? read_lock_is_recursive+0x10/0x10 [ 213.295071][ T27] ? __rwlock_init+0x140/0x140 [ 213.303573][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.322213][ T27] ? ksys_sync+0x150/0x150 [ 213.340314][ T27] down_read+0x96/0x2e0 [ 213.353628][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.367319][ T26] audit: type=1326 audit(1750597163.864:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de253f929 code=0x7ffc0000 [ 213.390836][ T27] ? ksys_sync+0x150/0x150 [ 213.414487][ T27] iterate_supers+0xa4/0x1d0 [ 213.427936][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.439637][ T27] ksys_sync+0x91/0x150 [ 213.454229][ T27] ? sync_filesystem+0x220/0x220 [ 213.468208][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.483786][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 213.490588][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.520415][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 213.535091][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.554917][ T27] __ia32_sys_sync+0xa/0x10 [ 213.577449][ T27] do_syscall_64+0x4c/0xa0 [ 213.588213][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.605863][ T27] ? clear_bhb_loop+0x30/0x80 [ 213.631214][ T27] ? clear_bhb_loop+0x30/0x80 [ 213.642699][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.666905][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.684355][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.702324][ T27] RIP: 0033:0x7f5659651929 [ 213.723940][ T27] RSP: 002b:00007f56574b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 213.746697][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.775056][ T27] RAX: ffffffffffffffda RBX: 00007f5659878fa0 RCX: 00007f5659651929 [ 213.795073][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.816273][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.835730][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.857491][ T27] RBP: 00007f5659878fa0 R08: 0000000000000000 R09: 0000000000000000 [ 213.884031][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.894380][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.910691][ T27] R13: 0000000000000000 R14: 00007f5659878fa0 R15: 00007fff3083b9f8 [ 213.919950][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.920420][ T27] [ 213.934485][ T27] [ 213.934485][ T27] Showing all locks held in the system: [ 213.942800][ T27] 3 locks held by kworker/0:0/7: [ 213.948203][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 213.950121][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.958635][ T27] #1: ffffc90000cc7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 213.958688][ T27] #2: ffff888076de4240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x271/0x3240 [ 213.958741][ T27] 3 locks held by kworker/1:0/21: [ 213.958751][ T27] #0: ffff88802af10d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 213.958796][ T27] #1: ffffc90000db7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 213.984349][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.994772][ T27] #2: [ 214.031284][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.043944][ T27] ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1520 [ 214.055025][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.062491][ T27] 1 lock held by khungtaskd/27: [ 214.067337][ T27] #0: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 214.078290][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.081125][ T27] 4 locks held by kworker/u4:3/548: [ 214.091885][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 214.098505][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.111002][ T27] #1: ffffc9000341fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 214.132166][ T27] #2: ffffffff8d21ecd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 214.149965][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.162334][ T27] #3: ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0xbf/0x490 [ 214.178312][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.191148][ T27] 1 lock held by dhcpcd/3840: [ 214.200944][ T27] #0: ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 214.216516][ T27] 2 locks held by getty/3936: [ 214.221413][ T27] #0: ffff88802bb6f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 214.231834][ T27] #1: ffffc90002ce62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 214.242301][ T27] 1 lock held by syz-executor/4171: [ 214.247520][ T27] #0: ffff88807ebfc0e0 (&type->s_umount_key#51){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 214.258543][ T27] 2 locks held by kworker/1:9/4292: [ 214.264054][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 215.261056][ T27] #1: ffffc90002f9fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 215.274055][ T27] 3 locks held by kworker/0:7/4293: [ 215.279767][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 215.743004][ T6071] loop5: detected capacity change from 0 to 40427 [ 215.847617][ T27] #1: ffffc90002effd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 215.909826][ T27] #2: ffff88804e99b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x271/0x3240 [ 215.964324][ T27] 1 lock held by syz.4.15/4317: [ 215.993883][ T27] #0: ffff88807ebfc0e0 (&type->s_umount_key#51){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 216.050640][ T27] 3 locks held by kworker/0:8/4737: [ 216.079478][ T27] #0: ffff88802af10d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 216.144470][ T27] #1: ffffc9000310fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 216.214757][ T27] #2: ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1520 [ 216.255038][ T27] 2 locks held by kworker/u4:18/5062: [ 216.260434][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 216.270386][ T27] #1: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 216.279768][ T27] 1 lock held by syz.0.386/5676: [ 216.371290][ T27] #0: ffff88807ebfc0e0 (&type->s_umount_key#51){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 216.430595][ T27] 1 lock held by syz-executor/5775: [ 216.461102][ T27] #0: ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x974/0xe60 [ 216.521830][ T27] 1 lock held by syz-executor/5864: [ 216.549692][ T27] #0: ffffffff8d22a948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x974/0xe60 [ 216.602305][ T27] 4 locks held by syz.5.465/6070: [ 216.637663][ T27] 2 locks held by syz.5.465/6071: [ 216.665512][ T27] #0: ffff88801fec3118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 216.723968][ T27] #1: ffff88801ff1f468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 216.776123][ T27] [ 216.788103][ T27] ============================================= [ 216.788103][ T27] [ 216.840405][ T27] NMI backtrace for cpu 0 [ 216.844760][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.185-syzkaller #0 [ 216.852744][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.862796][ T27] Call Trace: [ 216.866073][ T27] [ 216.868996][ T27] dump_stack_lvl+0x168/0x230 [ 216.873679][ T27] ? release_firmware_map_entry+0x190/0x190 [ 216.879569][ T27] ? show_regs_print_info+0x20/0x20 [ 216.884764][ T27] ? load_image+0x3b0/0x3b0 [ 216.889257][ T27] ? preempt_schedule_irq+0xd0/0x150 [ 216.894538][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 216.899817][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 216.904930][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 216.909863][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 216.916009][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.921642][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 216.926848][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 216.932913][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 216.938890][ T27] watchdog+0xe0f/0xe50 [ 216.943053][ T27] kthread+0x436/0x520 [ 216.947113][ T27] ? hungtask_pm_notify+0x40/0x40 [ 216.952131][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.956714][ T27] ret_from_fork+0x1f/0x30 [ 216.961133][ T27] [ 216.965117][ T27] Sending NMI from CPU 0 to CPUs 1: [ 216.970339][ C1] NMI backtrace for cpu 1 [ 216.970348][ C1] CPU: 1 PID: 6070 Comm: syz.5.465 Not tainted 5.15.185-syzkaller #0 [ 216.970363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.970371][ C1] RIP: 0010:__lock_acquire+0x143/0x7c60 [ 216.970393][ C1] Code: 77 30 44 89 f0 4c 8d 7c c3 08 4c 89 f8 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 ff e8 47 4e 61 00 49 b8 00 00 00 00 00 fc ff df <4d> 8b 3f 4d 85 ff 75 2b c7 44 24 68 00 00 00 00 48 89 df 44 89 f6 [ 216.970411][ C1] RSP: 0018:ffffc90002fff3c0 EFLAGS: 00000046 [ 216.970424][ C1] RAX: 1ffff11004054e34 RBX: ffff8880202a7198 RCX: 1ffff920005ffe9c [ 216.970435][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880202a7198 [ 216.970445][ C1] RBP: ffffc90002fff610 R08: dffffc0000000000 R09: 0000000000000001 [ 216.970455][ C1] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: 0000000000000001 [ 216.970465][ C1] R13: ffff888022e5d940 R14: 0000000000000000 R15: ffff8880202a71a0 [ 216.970475][ C1] FS: 00007f0f0361b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 216.970488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.970497][ C1] CR2: 0000200000d8a030 CR3: 000000005f6f1000 CR4: 00000000003506e0 [ 216.970510][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.970518][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.970527][ C1] Call Trace: [ 216.970532][ C1] [ 216.970537][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 216.970558][ C1] ? mark_lock+0x94/0x320 [ 216.970574][ C1] ? verify_lock_unused+0x140/0x140 [ 216.970591][ C1] ? mark_lock+0x94/0x320 [ 216.970606][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 216.970626][ C1] lock_acquire+0x197/0x3f0 [ 216.970641][ C1] ? queue_stack_map_push_elem+0x16c/0x5e0 [ 216.970674][ C1] ? mutex_unlock+0x10/0x10 [ 216.970689][ C1] ? read_lock_is_recursive+0x10/0x10 [ 216.970704][ C1] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 216.970721][ C1] ? refcount_dec_and_test+0x4f/0x70 [ 216.970736][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 216.970752][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 216.970769][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 216.970784][ C1] ? queue_stack_map_push_elem+0x16c/0x5e0 [ 216.970799][ C1] ? _raw_spin_lock+0x40/0x40 [ 216.970817][ C1] queue_stack_map_push_elem+0x16c/0x5e0 [ 216.970835][ C1] ? rcu_lock_release+0x5/0x20 [ 216.970850][ C1] ? queue_stack_map_delete_elem+0x10/0x10 [ 216.970863][ C1] ? __cant_sleep+0x210/0x210 [ 216.970879][ C1] bpf_prog_216c997a1f42e404+0x37/0xb14 [ 216.970891][ C1] bpf_trace_run2+0x15b/0x2d0 [ 216.970902][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 216.970912][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 216.970924][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 216.970939][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 216.970950][ C1] __bpf_trace_kfree+0x6e/0x90 [ 216.970964][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 216.970976][ C1] kfree+0x25f/0x2a0 [ 216.970990][ C1] ? import_iovec+0x6f/0xa0 [ 216.971004][ C1] ___sys_recvmsg+0x1be/0x4f0 [ 216.971019][ C1] ? __sys_recvmsg+0x250/0x250 [ 216.971038][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 216.971054][ C1] ? __might_fault+0xbc/0x110 [ 216.971070][ C1] ? __might_fault+0xb3/0x110 [ 216.971085][ C1] do_recvmmsg+0x344/0x7a0 [ 216.971100][ C1] ? __sys_recvmmsg+0x280/0x280 [ 216.971118][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 216.971137][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 216.971150][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 216.971164][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 216.971180][ C1] do_syscall_64+0x4c/0xa0 [ 216.971192][ C1] ? clear_bhb_loop+0x30/0x80 [ 216.971204][ C1] ? clear_bhb_loop+0x30/0x80 [ 216.971217][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.971233][ C1] RIP: 0033:0x7f0f057d4929 [ 216.971245][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.971257][ C1] RSP: 002b:00007f0f0361b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 216.971270][ C1] RAX: ffffffffffffffda RBX: 00007f0f059fc080 RCX: 00007f0f057d4929 [ 216.971281][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 216.971290][ C1] RBP: 00007f0f05856b39 R08: 0000000000000000 R09: 0000000000000000 [ 216.971299][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 216.971307][ C1] R13: 0000000000000001 R14: 00007f0f059fc080 R15: 00007ffc8e06c768 [ 216.971322][ C1] [ 216.999861][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 217.413719][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.185-syzkaller #0 [ 217.421674][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.431714][ T27] Call Trace: [ 217.434973][ T27] [ 217.437883][ T27] dump_stack_lvl+0x168/0x230 [ 217.442541][ T27] ? show_regs_print_info+0x20/0x20 [ 217.447714][ T27] ? load_image+0x3b0/0x3b0 [ 217.452194][ T27] panic+0x2c9/0x7f0 [ 217.456064][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 217.461671][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 217.466149][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 217.471671][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 217.477807][ T27] watchdog+0xe4e/0xe50 [ 217.481946][ T27] kthread+0x436/0x520 [ 217.485990][ T27] ? hungtask_pm_notify+0x40/0x40 [ 217.490992][ T27] ? kthread_blkcg+0xd0/0xd0 [ 217.495577][ T27] ret_from_fork+0x1f/0x30 [ 217.499974][ T27] [ 217.503175][ T27] Kernel Offset: disabled [ 217.507495][ T27] Rebooting in 86400 seconds..