last executing test programs: 2m25.637920007s ago: executing program 3 (id=40): r0 = io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.369435662s ago: executing program 3 (id=41): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0029008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2m25.264108994s ago: executing program 3 (id=42): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x4400c800) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendto$inet6(r3, &(0x7f00000001c0)="399498", 0x3, 0x3b40, 0x0, 0x0) 2m24.017014543s ago: executing program 3 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r5, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 2m22.775745322s ago: executing program 3 (id=49): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.966354725s ago: executing program 3 (id=50): set_mempolicy(0x8006, &(0x7f0000000040)=0x8, 0x7) r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="003e8c61678e7395da1be2d56f9b8ddb23711a7fb5a4e63fb0d6c466b1e6aa43e6f9dca0fec33a3ba8e268988ecc6ae38b4d8a429801e0a761e211579d334d9b972146b6074d754228313db11d1129275395aa2b525b05b8c6d73b5cda283ae332fe3cce08109f0fcd6d"], 0x1, 0x2cb, &(0x7f00000003c0)="$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") bind$can_raw(r0, &(0x7f0000000000), 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x40, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(0x0, 0x205, 0x44680) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=0x0], 0x1c}}, 0x4004854) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) ioperm(0x0, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 2m6.685237223s ago: executing program 32 (id=50): set_mempolicy(0x8006, &(0x7f0000000040)=0x8, 0x7) r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="003e8c61678e7395da1be2d56f9b8ddb23711a7fb5a4e63fb0d6c466b1e6aa43e6f9dca0fec33a3ba8e268988ecc6ae38b4d8a429801e0a761e211579d334d9b972146b6074d754228313db11d1129275395aa2b525b05b8c6d73b5cda283ae332fe3cce08109f0fcd6d"], 0x1, 0x2cb, &(0x7f00000003c0)="$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") bind$can_raw(r0, &(0x7f0000000000), 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x40, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(0x0, 0x205, 0x44680) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=0x0], 0x1c}}, 0x4004854) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) ioperm(0x0, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 22.719869955s ago: executing program 2 (id=449): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) semget$private(0x0, 0x20000000102, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, 0x0, 0x0) socket(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc40) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 21.528861194s ago: executing program 2 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r4, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 20.329142403s ago: executing program 2 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) setresgid(0x0, 0x0, 0xee01) 20.147953535s ago: executing program 2 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17.312414949s ago: executing program 2 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) faccessat(0xffffffffffffff9c, 0x0, 0x150) openat$random(0xffffffffffffff9c, 0x0, 0x202, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 17.107741173s ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 14.204999178s ago: executing program 1 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x40810}}], 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010329bd7000fcdbdf250d000000"], 0x14}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) 13.060251166s ago: executing program 1 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 12.763031101s ago: executing program 1 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) 12.628268953s ago: executing program 1 (id=490): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x4400c800) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendto$inet6(r3, &(0x7f00000001c0)="399498", 0x3, 0x3b40, 0x0, 0x0) 11.397314682s ago: executing program 1 (id=495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfdef) 8.782633793s ago: executing program 1 (id=503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)}, {&(0x7f0000000380)="66130392a0f78a09e8937198e44522909757aeaa1f64e9c54b63d95a7c99a8164df245815e4ab642f71eab08b5791191fbbec1f3d9dd26f88ee3ea6b419f16253045f6d7d37f6d185c63c25f316b00e33e0b237551a582474095339668fa19c5602f705580a57dee0d5dcb33bc066578b864249998b106720adc647c636c883416d00ffb378e411c9d9de09f4f3240fd4337c8a5d946f1e0da5e9eac1c02525085c4895db614d87f1e7ed144ae1fae7d439c62a6", 0xb4}], 0x2, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xa8}}], 0x1, 0x40000) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 8.489540167s ago: executing program 4 (id=507): symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.460650084s ago: executing program 4 (id=508): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 6.101937964s ago: executing program 4 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 5.828842449s ago: executing program 4 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='ext4_es_lookup_extent_enter\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 5.700792041s ago: executing program 0 (id=515): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3.580504664s ago: executing program 5 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x100}}) 2.705668248s ago: executing program 4 (id=519): symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.353510533s ago: executing program 5 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) socket$netlink(0x10, 0x3, 0x14) 2.280545815s ago: executing program 0 (id=521): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.658279094s ago: executing program 33 (id=473): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.426261958s ago: executing program 5 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r4, 0x0, 0x0, 0xc8) 1.175245282s ago: executing program 0 (id=524): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 343.228354ms ago: executing program 5 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 256.608896ms ago: executing program 0 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020100f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 204.182277ms ago: executing program 5 (id=527): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 172.987487ms ago: executing program 4 (id=528): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 158.280108ms ago: executing program 0 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) mq_open(&(0x7f0000001fc0)='e\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_\xf3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\xdb\xed\xb5\tP\x1f~\x91V\x9d\xc2\x8b\xc1\xc3\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3C_8\x99\xd8>[\xa1\x91\x05\xe9uT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a,\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00'/908, 0x800, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e300e0b5d13927474e9f4d00000000000000000000000000000000005108034b8b198e789560164231d2efb41f1facb4dc1b76a5c63f4dfea1a42dc19a0d4f612e2872c3dd022becf441f516a949bde15a4b265dae7d63d9c5b876"], 0x50) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7094f09702c06f00b4fd11d7397fb47adc86a9dfdfa099dffe088afc08bd167164c3c28d40726d0a435d1032280cdef48e90f3"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) 28.455259ms ago: executing program 5 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000001800000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c000700200000"], 0xc4}}, 0x4008800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, 0x0, 0x0, 0x810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r8 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 0 (id=531): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): ut [ 71.209209][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.216125][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 71.223753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.226490][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 71.234230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.245704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.250702][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 71.258179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.271063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.275805][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.285568][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.324842][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.360911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.368992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.379400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.388418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.397802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.417492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.427484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.437740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.446637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.455214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.464561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.473415][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.480538][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.488365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.497843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.506451][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.513604][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.522834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.532547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.579295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.601820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.614305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.631204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.640033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.660009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.670844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.678381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.687553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.707799][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.727536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.740022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.756569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.768750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.778372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.787630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.796791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.806209][ T4191] device veth0_vlan entered promiscuous mode [ 71.818868][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.846662][ T4191] device veth1_vlan entered promiscuous mode [ 71.903505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.919111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.929789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.939502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.959533][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.977997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.986858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.027441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.036006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.067282][ T4182] device veth0_vlan entered promiscuous mode [ 72.079968][ T4191] device veth0_macvtap entered promiscuous mode [ 72.088603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.097507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.106296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.115507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.124484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.133270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.142760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.158698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.167535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.182524][ T4182] device veth1_vlan entered promiscuous mode [ 72.192482][ T4191] device veth1_macvtap entered promiscuous mode [ 72.232576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.242834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.251553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.259519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.268204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.277219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.285768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.294052][ T4192] device veth0_vlan entered promiscuous mode [ 72.304639][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.321876][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.339843][ T4184] device veth0_vlan entered promiscuous mode [ 72.351256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.360017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.369439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.378370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.388151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.396357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.404516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.413410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.423095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.431550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.445300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.453958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.465455][ T4182] device veth0_macvtap entered promiscuous mode [ 72.476075][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.485355][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.494325][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.503503][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.525595][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.536494][ T4182] device veth1_macvtap entered promiscuous mode [ 72.549573][ T4184] device veth1_vlan entered promiscuous mode [ 72.568124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.577034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.585671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.594767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.618951][ T4192] device veth1_vlan entered promiscuous mode [ 72.669069][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.683158][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.696948][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.737763][ T4192] device veth0_macvtap entered promiscuous mode [ 72.754958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.763836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.774858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.784627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.796977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.805713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.816723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.824876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.834409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.848325][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.860007][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.873166][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.884262][ T4192] device veth1_macvtap entered promiscuous mode [ 72.894214][ T4184] device veth0_macvtap entered promiscuous mode [ 72.906655][ T4184] device veth1_macvtap entered promiscuous mode [ 72.922534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.930848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.939020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.947602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.956754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.969627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.978078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.992916][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001741][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013593][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023339][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.055480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.076814][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.088345][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.099543][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.110649][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.123697][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.144567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.154019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.164856][ T4183] device veth0_vlan entered promiscuous mode [ 73.176717][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.186773][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.209334][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.220177][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.231925][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.242671][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.254221][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.267338][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.272074][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 73.277543][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.292738][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.295960][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 73.301555][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.316429][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 73.326746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.326746][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 73.341149][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 73.341786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.357147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.368184][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.378870][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.388936][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.399680][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.409760][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.421809][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.433831][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.443849][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.454620][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.467145][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.477888][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.488001][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.498511][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511179][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.537531][ T4183] device veth1_vlan entered promiscuous mode [ 73.545614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.554037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.562816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.572092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.581329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.635445][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648556][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.659319][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669250][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.679871][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.700774][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.707084][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.708780][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.750289][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.758259][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.789636][ T4183] device veth0_macvtap entered promiscuous mode [ 73.796631][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.821528][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.835926][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.839948][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.845804][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.888732][ T4183] device veth1_macvtap entered promiscuous mode [ 73.926899][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.936200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.949937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.951781][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.985623][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.997002][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007357][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.017927][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.027777][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.038795][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054950][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.067580][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.084832][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.109307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.118347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.132510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.158006][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.180494][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.190702][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.196557][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.211344][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.222577][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.228236][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.233888][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.276213][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.287167][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.314816][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.337517][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.353663][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.362961][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.387977][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.411496][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424926][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.436142][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.457806][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.509962][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.550240][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.668509][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.687487][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.897526][ T4307] process 'syz.0.1' launched '/dev/fd/3' with NULL argv: empty string added [ 74.994655][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.552032][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 75.558502][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.561589][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.565468][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 75.579407][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 75.586177][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 75.594766][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.630470][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.640133][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.650594][ T4248] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.698813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.707403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.910542][ T4248] usb 1-1: Using ep0 maxpacket: 16 [ 75.943085][ T26] audit: type=1326 audit(1753266108.263:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x0 [ 76.040607][ T4248] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 76.052159][ T4248] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 76.093372][ T4248] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 76.104580][ T4248] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 76.114467][ T4248] usb 1-1: config 6 has no interface number 0 [ 76.124160][ T4248] usb 1-1: config 6 has no interface number 1 [ 76.130665][ T4248] usb 1-1: config 6 has no interface number 2 [ 76.137030][ T4248] usb 1-1: config 6 has no interface number 3 [ 76.145100][ T4248] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 76.160816][ T26] audit: type=1326 audit(1753266108.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.192498][ T4248] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 76.203817][ T26] audit: type=1326 audit(1753266108.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.227107][ T4248] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 76.238830][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 76.251207][ T26] audit: type=1326 audit(1753266108.503:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.273591][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 76.284711][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 76.296862][ T26] audit: type=1326 audit(1753266108.503:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.306077][ T4248] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 76.319670][ T26] audit: type=1326 audit(1753266108.503:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.362619][ T4248] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 76.383988][ T26] audit: type=1326 audit(1753266108.503:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.385419][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 76.450770][ T4248] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 76.472113][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 76.496444][ T4248] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 76.528283][ T4248] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 76.549870][ T4248] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 76.575978][ T4248] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 76.607406][ T4248] usb 1-1: config 6 interface 4 has no altsetting 0 [ 76.628665][ T4248] usb 1-1: config 6 interface 86 has no altsetting 0 [ 76.654835][ T4248] usb 1-1: config 6 interface 191 has no altsetting 0 [ 76.691969][ T26] audit: type=1326 audit(1753266109.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.718755][ T4323] tipc: Started in network mode [ 76.746440][ T4323] tipc: Node identity a294eeac96d, cluster identity 4711 [ 76.748136][ T26] audit: type=1326 audit(1753266109.063:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.754483][ T4323] tipc: Enabled bearer , priority 0 [ 76.785093][ T4324] device syzkaller0 entered promiscuous mode [ 76.819042][ T26] audit: type=1326 audit(1753266109.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 76.841481][ T4320] tipc: Resetting bearer [ 76.848285][ T4319] tipc: Resetting bearer [ 76.860680][ T4248] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 76.882335][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.891095][ T4248] usb 1-1: Product: syz [ 76.892468][ T4319] tipc: Disabling bearer [ 76.895288][ T4248] usb 1-1: Manufacturer: syz [ 76.895305][ T4248] usb 1-1: SerialNumber: syz [ 77.042647][ T4318] infiniband syz!: set active [ 77.047831][ T4318] infiniband syz!: added team_slave_0 [ 77.069610][ T4318] infiniband syz!: Couldn't open port 1 [ 77.143454][ T4318] RDS/IB: syz!: added [ 77.148213][ T4318] smc: adding ib device syz! with port count 1 [ 77.199865][ T4318] smc: ib device syz! port 1 has pnetid [ 77.261435][ T4340] mmap: syz.3.11 (4340) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.765905][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.775092][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.788138][ T4337] 8021q: VLANs not supported on hsr0 [ 77.928633][ T4346] loop4: detected capacity change from 0 to 2048 [ 78.066404][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 78.123003][ T4346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.14: bg 0: block 234: padding at end of block bitmap is not set [ 78.323676][ T4248] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 78.351847][ T4248] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 78.369416][ T4248] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 78.408168][ T4360] IPv6: Can't replace route, no match found [ 78.437510][ T4366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 78.461143][ T4366] 8021q: VLANs not supported on vcan0 [ 78.573029][ T4369] loop1: detected capacity change from 0 to 512 [ 78.699514][ T4374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.700099][ T4369] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 78.744057][ T4369] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.829229][ T4382] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 79.014511][ T4390] loop2: detected capacity change from 0 to 1024 [ 79.026911][ T4390] ======================================================= [ 79.026911][ T4390] WARNING: The mand mount option has been deprecated and [ 79.026911][ T4390] and is ignored by this kernel. Remove the mand [ 79.026911][ T4390] option from the mount to silence this warning. [ 79.026911][ T4390] ======================================================= [ 79.224567][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.235639][ T4390] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.024106][ T13] cfg80211: failed to load regulatory.db [ 81.538795][ T4403] sched: RT throttling activated [ 81.645567][ T4410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.688816][ T4410] loop1: detected capacity change from 0 to 512 [ 82.278308][ T4413] loop2: detected capacity change from 0 to 512 [ 82.353651][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 82.371430][ T4410] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.506342][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 82.506356][ T26] audit: type=1326 audit(1753266114.823:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 82.585370][ T4413] EXT4-fs (loop2): Ignoring removed orlov option [ 82.627562][ T26] audit: type=1326 audit(1753266114.863:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 82.672021][ T4413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.703718][ T4413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.33: bg 0: block 248: padding at end of block bitmap is not set [ 82.757969][ T4413] Quota error (device loop2): write_blk: dquota write failed [ 82.822464][ T4413] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.870590][ T26] audit: type=1326 audit(1753266114.863:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 82.898351][ T4413] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.33: Failed to acquire dquot type 1 [ 82.923126][ T26] audit: type=1326 audit(1753266114.863:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 82.949159][ T26] audit: type=1326 audit(1753266114.863:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 82.958321][ T4433] tipc: Started in network mode [ 82.976573][ T4413] EXT4-fs (loop2): 1 truncate cleaned up [ 83.000276][ T4413] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 83.015286][ T26] audit: type=1326 audit(1753266114.863:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 83.060748][ T4433] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.076769][ T4433] tipc: Enabled bearer , priority 10 [ 83.093310][ T26] audit: type=1326 audit(1753266114.863:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 83.190084][ T26] audit: type=1326 audit(1753266114.863:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c87919a9 code=0x7ffc0000 [ 83.234224][ T4440] loop3: detected capacity change from 0 to 256 [ 83.313390][ T4440] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.111670][ T1108] tipc: Node number set to 2886997162 [ 86.513074][ T4497] loop3: detected capacity change from 0 to 512 [ 86.651131][ T4501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52'. [ 87.224759][ T4511] tipc: Started in network mode [ 87.229701][ T4511] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.271379][ T4511] tipc: Enabled bearer , priority 10 [ 87.383148][ T4513] loop2: detected capacity change from 0 to 512 [ 87.466640][ T4513] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.56: casefold flag without casefold feature [ 87.482655][ T4513] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.56: couldn't read orphan inode 15 (err -117) [ 87.506157][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 87.799216][ T4517] loop1: detected capacity change from 0 to 256 [ 87.872465][ T4517] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.903469][ T13] tipc: Node number set to 2886997162 [ 91.041984][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 91.094909][ T4551] tipc: Started in network mode [ 91.099843][ T4551] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.126734][ T4554] loop1: detected capacity change from 0 to 1024 [ 91.142909][ T4551] tipc: Enabled bearer , priority 10 [ 91.211666][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 91.287566][ T4554] EXT4-fs (loop1): inline encryption not supported [ 91.295218][ T4554] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.392567][ T4554] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 91.711376][ T4569] capability: warning: `syz.0.72' uses deprecated v2 capabilities in a way that may be insecure [ 92.157319][ T1326] tipc: Node number set to 2886997162 [ 94.148587][ T4591] loop1: detected capacity change from 0 to 256 [ 94.243701][ T4591] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.738660][ T4607] tipc: Started in network mode [ 95.790478][ T4607] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.797845][ T4607] tipc: Enabled bearer , priority 10 [ 95.823202][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 95.823225][ T26] audit: type=1326 audit(1753266128.143:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 95.896187][ T26] audit: type=1326 audit(1753266128.143:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 96.013488][ T26] audit: type=1326 audit(1753266128.143:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 96.160170][ T26] audit: type=1326 audit(1753266128.143:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 96.187778][ T26] audit: type=1326 audit(1753266128.143:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 96.246123][ T26] audit: type=1326 audit(1753266128.173:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 97.241926][ T4264] tipc: Node number set to 2886997162 [ 98.652586][ T4643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.364289][ T4664] tipc: Enabling of bearer rejected, already enabled [ 104.024172][ T4698] loop1: detected capacity change from 0 to 256 [ 104.345529][ T4698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.675379][ T4709] tipc: Enabling of bearer rejected, already enabled [ 105.114536][ T4714] loop2: detected capacity change from 0 to 256 [ 105.128458][ T4712] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 105.455875][ T4714] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.575840][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 107.107771][ T4742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.181394][ T4742] loop2: detected capacity change from 0 to 512 [ 107.627466][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 107.645717][ T4742] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.026341][ T4750] tipc: Enabling of bearer rejected, already enabled [ 108.578445][ T4759] loop2: detected capacity change from 0 to 512 [ 109.553084][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 110.007020][ T4759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.019725][ T4759] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.107594][ T4759] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.121: corrupted inode contents [ 110.310441][ T4759] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.121: mark_inode_dirty error [ 110.324269][ T4759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.121: bg 0: block 328: padding at end of block bitmap is not set [ 112.009785][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 112.061091][ T4701] chnl_net:caif_netlink_parms(): no params data found [ 112.214380][ T7] Process accounting resumed [ 112.224560][ T26] audit: type=1326 audit(1753266144.543:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 112.340457][ T26] audit: type=1326 audit(1753266144.583:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 112.363137][ T26] audit: type=1326 audit(1753266144.583:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 112.386319][ T26] audit: type=1326 audit(1753266144.583:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 112.775926][ T4791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.097895][ T26] audit: type=1326 audit(1753266144.583:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 113.310797][ T26] audit: type=1326 audit(1753266144.583:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 113.377308][ T4701] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.541362][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.822179][ T4701] device bridge_slave_0 entered promiscuous mode [ 113.953984][ T26] audit: type=1326 audit(1753266144.583:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 114.194167][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.224269][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 114.231086][ T26] audit: type=1326 audit(1753266144.583:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 114.260372][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.268521][ T26] audit: type=1326 audit(1753266144.583:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 114.310827][ T4701] device bridge_slave_1 entered promiscuous mode [ 114.323989][ T26] audit: type=1326 audit(1753266144.593:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 114.414164][ T4701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.441753][ T4701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.905461][ T4809] tipc: Enabling of bearer rejected, already enabled [ 115.854237][ T4820] loop4: detected capacity change from 0 to 256 [ 115.874934][ T4701] team0: Port device team_slave_0 added [ 115.917830][ T4820] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.071840][ T4815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.515402][ T4701] team0: Port device team_slave_1 added [ 116.697829][ T4815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.726567][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.743941][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.801544][ T4701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.864463][ T4815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.906950][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.923600][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.001563][ T4701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.035063][ T4829] macvtap0: refused to change device tx_queue_len [ 117.130771][ T4815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.178224][ T4701] device hsr_slave_0 entered promiscuous mode [ 117.243411][ T4701] device hsr_slave_1 entered promiscuous mode [ 117.250235][ T4701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.266850][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 117.266863][ T26] audit: type=1326 audit(1753266149.583:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.308132][ T4701] Cannot create hsr debugfs directory [ 117.374035][ T26] audit: type=1326 audit(1753266149.633:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.396883][ T26] audit: type=1326 audit(1753266149.633:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.419198][ T26] audit: type=1326 audit(1753266149.633:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.451904][ T26] audit: type=1326 audit(1753266149.633:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.562316][ T26] audit: type=1326 audit(1753266149.633:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.587302][ T26] audit: type=1326 audit(1753266149.633:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.631077][ T26] audit: type=1326 audit(1753266149.633:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 117.848018][ T26] audit: type=1326 audit(1753266149.633:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 118.262514][ T26] audit: type=1326 audit(1753266149.633:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 118.356863][ T4815] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.402707][ T4815] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.449982][ T4815] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.489421][ T4843] loop4: detected capacity change from 0 to 256 [ 118.510281][ T4815] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.588266][ T4843] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.692333][ T4701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.764899][ T4701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.786200][ T4701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.822357][ T4701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.124747][ T4857] tipc: Enabling of bearer rejected, already enabled [ 119.391985][ T4701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.848035][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.221156][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.354770][ T4701] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.530586][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.539507][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.569246][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.576432][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.591475][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.600525][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.609231][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.616364][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.631296][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.691839][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.703371][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.756779][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.378403][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.482161][ T4701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.537671][ T4701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.551941][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.564272][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.578476][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.588199][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.597733][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.609197][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.625541][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.647157][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.561433][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.592034][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.649960][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.663492][ T4895] tipc: Enabling of bearer rejected, already enabled [ 124.170759][ T4902] loop2: detected capacity change from 0 to 512 [ 125.319314][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.336338][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.466220][ T4902] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 125.484095][ T4902] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.906610][ T4701] device veth0_vlan entered promiscuous mode [ 125.966258][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.993656][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.047246][ T26] audit: type=1326 audit(1753266158.343:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.064425][ T4701] device veth1_vlan entered promiscuous mode [ 126.120164][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.128617][ T26] audit: type=1326 audit(1753266158.353:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.156240][ T26] audit: type=1326 audit(1753266158.353:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.169198][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.179390][ T26] audit: type=1326 audit(1753266158.353:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.225189][ T26] audit: type=1326 audit(1753266158.353:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.251811][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.280202][ T26] audit: type=1326 audit(1753266158.353:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.367822][ T4918] loop1: detected capacity change from 0 to 256 [ 126.382218][ T26] audit: type=1326 audit(1753266158.353:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.446909][ T26] audit: type=1326 audit(1753266158.353:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.485882][ T4918] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.576050][ T26] audit: type=1326 audit(1753266158.353:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 126.753629][ T26] audit: type=1326 audit(1753266158.353:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 127.462745][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.488641][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.541156][ T4701] device veth0_macvtap entered promiscuous mode [ 127.592842][ T4701] device veth1_macvtap entered promiscuous mode [ 127.664948][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.699359][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.568545][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.579192][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.589416][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.600068][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.610109][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.650006][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.697678][ T4948] loop2: detected capacity change from 0 to 256 [ 128.704856][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.715972][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.726456][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.737084][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.760222][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.837125][ T4948] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.904533][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.934096][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.944144][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.955341][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.965317][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.975894][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.986469][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.037789][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.125714][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.208958][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.290844][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.344366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.385804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.445399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.604155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.738392][ T4701] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.813923][ T4701] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.868796][ T4701] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.878308][ T4701] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.856430][ T4964] syz.1.175 uses obsolete (PF_INET,SOCK_PACKET) [ 131.275630][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.303483][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.313907][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.326010][ T4970] netlink: 'syz.0.177': attribute type 13 has an invalid length. [ 131.355377][ T4970] gretap0: refused to change device tx_queue_len [ 131.364435][ T4970] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.388065][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.426372][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.478619][ T4972] loop1: detected capacity change from 0 to 256 [ 131.693694][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.465493][ T4972] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.705819][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712165][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.814769][ T4982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.182'. [ 132.912692][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 132.912705][ T26] audit: type=1326 audit(1753266165.233:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 132.966385][ T4990] tipc: Enabling of bearer rejected, already enabled [ 133.063685][ T26] audit: type=1326 audit(1753266165.273:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 133.175952][ T26] audit: type=1326 audit(1753266165.273:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 133.222713][ T26] audit: type=1326 audit(1753266165.273:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 134.293835][ T4998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.573755][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.186'. [ 134.616260][ T26] audit: type=1326 audit(1753266165.283:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 134.810043][ T26] audit: type=1326 audit(1753266165.283:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 134.873631][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 134.918606][ T26] audit: type=1326 audit(1753266165.283:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 134.941615][ T26] audit: type=1326 audit(1753266165.283:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 134.964528][ T26] audit: type=1326 audit(1753266165.283:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5af95d310 code=0x7ffc0000 [ 134.988964][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 134.999059][ T26] audit: type=1326 audit(1753266165.293:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa5af9601d7 code=0x7ffc0000 [ 136.805219][ T5026] loop4: detected capacity change from 0 to 1024 [ 136.896072][ T5029] tipc: Enabling of bearer rejected, already enabled [ 136.914998][ T5030] tipc: Started in network mode [ 136.919924][ T5030] tipc: Node identity ac141423, cluster identity 4711 [ 136.958329][ T5030] tipc: New replicast peer: 255.255.255.255 [ 136.983847][ T5030] tipc: Enabled bearer , priority 10 [ 137.235234][ T5026] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.373507][ T4228] tipc: Node number set to 2886997027 [ 138.394645][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 138.394660][ T26] audit: type=1326 audit(1753266170.713:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.537946][ T26] audit: type=1326 audit(1753266170.773:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.691198][ T26] audit: type=1326 audit(1753266170.773:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.792878][ T26] audit: type=1326 audit(1753266170.773:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.837681][ T26] audit: type=1326 audit(1753266170.773:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.861763][ T26] audit: type=1326 audit(1753266170.803:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.900255][ T26] audit: type=1326 audit(1753266170.803:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 138.923914][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 138.993455][ T26] audit: type=1326 audit(1753266170.803:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 139.073012][ T26] audit: type=1326 audit(1753266170.803:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 139.799471][ T26] audit: type=1326 audit(1753266170.803:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.5.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 139.863976][ T5068] tipc: Enabling of bearer rejected, already enabled [ 142.337368][ T5079] loop8: detected capacity change from 0 to 16384 [ 142.560879][ T5084] loop5: detected capacity change from 0 to 512 [ 143.243485][ T4248] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 143.276584][ T5088] loop1: detected capacity change from 0 to 256 [ 143.302137][ T4248] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 143.327103][ T4248] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 143.361598][ T4248] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 143.384684][ T5088] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.462223][ T5084] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 143.481176][ T5084] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.710897][ T5079] loop_set_status: loop8 () has still dirty pages (nrpages=178) [ 144.023794][ T26] audit: type=1326 audit(1753266176.343:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 144.151643][ T26] audit: type=1326 audit(1753266176.403:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 144.305090][ T26] audit: type=1326 audit(1753266176.403:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 144.407608][ T26] audit: type=1326 audit(1753266176.403:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 144.525188][ T26] audit: type=1326 audit(1753266176.403:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 144.786365][ T5115] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.836628][ T26] audit: type=1326 audit(1753266176.423:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 145.068726][ T26] audit: type=1326 audit(1753266176.423:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 145.387587][ T26] audit: type=1326 audit(1753266176.423:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 145.416133][ T5115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.640466][ T26] audit: type=1326 audit(1753266176.423:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 147.186652][ T26] audit: type=1326 audit(1753266176.423:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 147.395438][ T5146] tipc: Enabled bearer , priority 0 [ 147.428041][ T5146] device syzkaller0 entered promiscuous mode [ 147.525877][ T5152] syz.1.231[5152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.525993][ T5152] syz.1.231[5152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.575314][ T5146] tipc: Resetting bearer [ 147.659969][ T5140] loop4: detected capacity change from 0 to 512 [ 148.012724][ T5145] tipc: Resetting bearer [ 148.041603][ T5145] tipc: Disabling bearer [ 149.210989][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 149.228735][ T5140] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.318459][ T5166] loop1: detected capacity change from 0 to 256 [ 149.411359][ T5166] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.485342][ T5171] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.485342][ T5171] program syz.0.238 not setting count and/or reply_len properly [ 149.658191][ T5172] hub 6-0:1.0: USB hub found [ 149.682631][ T5172] hub 6-0:1.0: 1 port detected [ 150.451607][ T5175] syz.0.239[5175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.451796][ T5175] syz.0.239[5175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.610829][ T5179] smc: net device bond0 applied user defined pnetid SYZ0 [ 150.683976][ T5185] loop4: detected capacity change from 0 to 1024 [ 150.763194][ T5185] EXT4-fs (loop4): Ignoring removed nobh option [ 150.769526][ T5185] EXT4-fs (loop4): Ignoring removed bh option [ 150.820579][ T5185] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.851332][ T5185] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 152.019616][ T5205] capability: warning: `syz.1.250' uses 32-bit capabilities (legacy support in use) [ 152.541980][ T5217] loop1: detected capacity change from 0 to 512 [ 153.309421][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 153.327377][ T5217] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.462499][ T5226] loop2: detected capacity change from 0 to 256 [ 153.558830][ T5226] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.616698][ T5255] loop2: detected capacity change from 0 to 512 [ 155.701734][ T5245] Zero length message leads to an empty skb [ 155.816440][ T5261] loop4: detected capacity change from 0 to 512 [ 155.957429][ T5255] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.263: corrupted in-inode xattr [ 156.150181][ T5261] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 156.169469][ T5261] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.426548][ T5255] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.263: couldn't read orphan inode 15 (err -117) [ 156.508454][ T5255] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,prjquota,auto_da_alloc,nobarrier,noblock_validity,sb=0x000000000000066d,,errors=continue. Quota mode: writeback. [ 156.540661][ T5255] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.263: Directory hole found for htree leaf block 0 [ 156.630669][ T5199] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 156.889098][ T5270] syz.2.263[5270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.889192][ T5270] syz.2.263[5270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.186427][ T5274] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.285546][ T5277] tipc: Enabling of bearer rejected, already enabled [ 160.128762][ T5285] loop5: detected capacity change from 0 to 256 [ 160.140508][ T5283] loop1: detected capacity change from 0 to 1024 [ 160.205423][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 160.205437][ T26] audit: type=1326 audit(1753266192.523:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 160.235650][ T26] audit: type=1326 audit(1753266192.533:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 160.270643][ T26] audit: type=1326 audit(1753266192.553:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 160.327473][ T5283] EXT4-fs (loop1): Ignoring removed orlov option [ 160.619672][ T5285] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.882880][ T5283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e01c, mo2=0000] [ 160.915107][ T26] audit: type=1326 audit(1753266192.553:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 160.937993][ T5283] System zones: 0-1, 3-12 [ 160.959037][ T5283] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #3: block 1: comm syz.1.275: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.066396][ T5283] Quota error (device loop1): write_blk: dquota write failed [ 161.127327][ T5283] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 161.163814][ T26] audit: type=1326 audit(1753266192.553:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 161.190467][ T26] audit: type=1326 audit(1753266192.583:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 161.216248][ T5283] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.275: Failed to acquire dquot type 0 [ 161.234691][ T5283] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.275: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.345960][ T26] audit: type=1326 audit(1753266192.583:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 161.368551][ T26] audit: type=1326 audit(1753266192.583:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb6f49079a9 code=0x7ffc0000 [ 161.432028][ T5283] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.275: Invalid inode bitmap blk 0 in block_group 0 [ 161.444539][ T5283] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 161.446746][ T5283] EXT4-fs (loop1): 1 orphan inode deleted [ 161.446771][ T5283] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; bsdgroups,orlov,grpjquota=,init_itable=0x0000000000000006,debug,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 161.450727][ T4271] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.453243][ T4271] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 0 [ 162.173242][ T5306] loop2: detected capacity change from 0 to 1024 [ 162.424581][ T5311] loop4: detected capacity change from 0 to 1024 [ 163.436163][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.614473][ T5311] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 163.731393][ T5311] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 163.814072][ T5326] tipc: Enabling of bearer rejected, already enabled [ 164.313108][ T5344] tipc: Enabled bearer , priority 0 [ 164.351638][ T5344] device syzkaller0 entered promiscuous mode [ 164.592485][ T5352] loop2: detected capacity change from 0 to 512 [ 165.471293][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 165.471309][ T26] audit: type=1326 audit(1753266197.793:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 165.519632][ T5344] tipc: Resetting bearer [ 165.572445][ T5343] tipc: Resetting bearer [ 165.631321][ T5343] tipc: Disabling bearer [ 165.637364][ T26] audit: type=1326 audit(1753266197.823:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 165.723843][ T26] audit: type=1326 audit(1753266197.823:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 165.866337][ T26] audit: type=1326 audit(1753266197.873:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 165.890088][ T26] audit: type=1326 audit(1753266197.873:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 167.058565][ T5352] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 167.076979][ T5352] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.251608][ T5369] loop1: detected capacity change from 0 to 512 [ 167.271820][ T5368] tipc: Enabling of bearer rejected, already enabled [ 167.375834][ T5373] syz.2.300[5373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.375948][ T5373] syz.2.300[5373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.455045][ T5369] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.476782][ T5369] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.298: bad orphan inode 13 [ 167.561657][ T5369] ext4_test_bit(bit=12, block=18) = 1 [ 167.570739][ T5369] is_bad_inode(inode)=0 [ 167.587469][ T5378] loop5: detected capacity change from 0 to 512 [ 167.594772][ T5369] NEXT_ORPHAN(inode)=2130706432 [ 167.599681][ T5369] max_ino=32 [ 167.626000][ T5369] i_nlink=1 [ 167.639687][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.800784][ T5378] EXT4-fs (loop5): orphan cleanup on readonly fs [ 167.816785][ T5386] loop4: detected capacity change from 0 to 512 [ 167.822114][ T5378] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.301: bg 0: block 248: padding at end of block bitmap is not set [ 167.851072][ T5378] Quota error (device loop5): write_blk: dquota write failed [ 167.858548][ T5378] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 167.875176][ T5378] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.301: Failed to acquire dquot type 1 [ 167.890347][ T5378] EXT4-fs (loop5): 1 truncate cleaned up [ 167.896467][ T5378] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.935343][ T5378] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 167.968500][ T5386] EXT4-fs (loop4): too many log groups per flexible block group [ 168.007266][ T5386] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 168.028559][ T5378] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 168.070884][ T5386] EXT4-fs (loop4): mount failed [ 168.139021][ T5397] loop1: detected capacity change from 0 to 1024 [ 168.258138][ T5397] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.367018][ T5387] loop2: detected capacity change from 0 to 32768 [ 168.376065][ T5401] loop5: detected capacity change from 0 to 512 [ 168.436930][ T5406] tipc: Enabling of bearer rejected, already enabled [ 168.499002][ T5387] loop2: p1 p2 p3 < p5 p6 > [ 168.547890][ T5401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.308: bg 0: block 288: padding at end of block bitmap is not set [ 168.608167][ T5387] loop2: p1 size 242222080 extends beyond EOD, truncated [ 168.613789][ T5408] loop4: detected capacity change from 0 to 256 [ 168.624416][ T5401] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 168.651815][ T5401] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.308: attempt to clear invalid blocks 1024 len 1 [ 168.705634][ T5387] loop2: p2 start 4294967295 is beyond EOD, truncated [ 168.814899][ T5408] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.831667][ T5401] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.308: invalid indirect mapped block 1819239214 (level 0) [ 168.903894][ T5401] EXT4-fs (loop5): 1 truncate cleaned up [ 169.306086][ T5401] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.961074][ T5420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.317'. [ 169.975086][ T4423] udevd[4423]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 169.988492][ T5142] udevd[5142]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 170.010912][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 170.030768][ T5420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 170.038899][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 170.247126][ T26] audit: type=1326 audit(1753266202.563:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5425 comm="syz.5.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 170.337154][ T26] audit: type=1326 audit(1753266202.593:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5425 comm="syz.5.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 170.406039][ T26] audit: type=1326 audit(1753266202.593:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5425 comm="syz.5.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 170.666021][ T5442] netlink: 404 bytes leftover after parsing attributes in process `syz.1.322'. [ 170.709437][ T5443] tipc: Enabled bearer , priority 10 [ 171.275080][ T5456] loop5: detected capacity change from 0 to 512 [ 171.932473][ T5456] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 171.951511][ T5456] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.155186][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.263083][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.318935][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.341026][ T5462] device bridge_slave_0 left promiscuous mode [ 172.382319][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.503306][ T5462] device bridge_slave_1 left promiscuous mode [ 172.520803][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.588329][ T5462] bond0: (slave bond_slave_0): Releasing backup interface [ 172.664547][ T5462] bond0: (slave bond_slave_1): Releasing backup interface [ 172.725846][ T5462] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 172.750056][ T5462] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 172.768284][ T5490] loop2: detected capacity change from 0 to 512 [ 172.786765][ T5462] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 172.813285][ T5462] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 172.866188][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.871053][ T5462] infiniband syz!: set down [ 172.885053][ T5462] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 172.892464][ T5490] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.894642][ T5462] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 172.941967][ T5490] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.338: corrupted inode contents [ 172.994655][ T5462] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 173.014586][ T5462] team0: Port device team_slave_0 removed [ 173.033561][ T5490] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #4: comm syz.2.338: mark_inode_dirty error [ 173.058338][ T5490] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.338: corrupted inode contents [ 173.073739][ T5490] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.338: mark_inode_dirty error [ 173.085536][ T5462] team0: Port device team_slave_1 removed [ 173.094563][ T5490] __quota_error: 2 callbacks suppressed [ 173.094580][ T5490] Quota error (device loop2): write_blk: dquota write failed [ 173.101470][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.116654][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.126900][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.126908][ T5490] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 173.134707][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.154521][ T5490] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.338: Failed to acquire dquot type 1 [ 173.179172][ T5476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.334'. [ 173.300377][ T5488] tipc: Enabling of bearer rejected, already enabled [ 173.562323][ T5503] tipc: Enabling of bearer rejected, already enabled [ 173.741366][ T5509] loop1: detected capacity change from 0 to 512 [ 174.136651][ T5509] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 174.155790][ T5509] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.403012][ T5515] loop5: detected capacity change from 0 to 256 [ 174.527743][ T5515] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.822513][ T5528] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 174.830960][ T5528] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 175.919966][ T5561] tipc: Enabling of bearer rejected, already enabled [ 176.050821][ T26] audit: type=1326 audit(1753266208.363:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.102663][ T26] audit: type=1326 audit(1753266208.363:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.191574][ T26] audit: type=1326 audit(1753266208.363:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.310438][ T26] audit: type=1326 audit(1753266208.363:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.369455][ T26] audit: type=1326 audit(1753266208.363:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.461309][ T26] audit: type=1326 audit(1753266208.373:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.490454][ T26] audit: type=1326 audit(1753266208.493:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.592338][ T26] audit: type=1326 audit(1753266208.493:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 176.653894][ T5583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.359'. [ 176.784355][ T5586] loop4: detected capacity change from 0 to 512 [ 177.207483][ T5586] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 177.225708][ T5586] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.760607][ T5602] netlink: 'syz.5.363': attribute type 10 has an invalid length. [ 177.820710][ T5604] tipc: Enabling of bearer rejected, already enabled [ 178.075536][ T5619] 9p: Unknown access argument [ 178.143306][ T5616] block device autoloading is deprecated and will be removed. [ 178.196255][ T5624] loop5: detected capacity change from 0 to 256 [ 178.306293][ T5624] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.439372][ T5633] 9pnet: Could not find request transport: 0xffffffffffffffff [ 178.653910][ T26] audit: type=1326 audit(1753266210.973:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 178.843232][ T5640] loop0: detected capacity change from 0 to 512 [ 179.647172][ T5639] tipc: Enabled bearer , priority 0 [ 179.907458][ T5634] loop1: detected capacity change from 0 to 512 [ 179.982230][ T5644] device syzkaller0 entered promiscuous mode [ 180.072060][ T5640] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 180.089857][ T5640] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.119976][ T26] audit: type=1326 audit(1753266210.993:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.279399][ T26] audit: type=1326 audit(1753266210.993:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.304856][ T5638] tipc: Resetting bearer [ 180.370441][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 180.385710][ T26] audit: type=1326 audit(1753266210.993:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.409497][ T26] audit: type=1326 audit(1753266211.003:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.435359][ T26] audit: type=1326 audit(1753266211.963:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.458452][ T26] audit: type=1326 audit(1753266211.963:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 180.473140][ T5634] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.373642][ T26] audit: type=1326 audit(1753266211.963:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 181.420794][ T5660] loop0: detected capacity change from 0 to 256 [ 181.450441][ T5638] tipc: Disabling bearer [ 181.554844][ T5660] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.595531][ T26] audit: type=1326 audit(1753266211.963:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 181.617990][ T26] audit: type=1326 audit(1753266211.963:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.5.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 184.153545][ T5673] loop2: detected capacity change from 0 to 256 [ 184.224160][ T5675] tipc: Enabling of bearer rejected, already enabled [ 184.259808][ T5680] loop0: detected capacity change from 0 to 1024 [ 184.297415][ T5673] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.386131][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.891762][ T5692] loop5: detected capacity change from 0 to 512 [ 184.986166][ T5676] crypto_alloc_aead failed rc=-2 [ 185.615801][ T5692] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 185.633751][ T5692] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.223866][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 187.375842][ T5722] loop5: detected capacity change from 0 to 256 [ 187.446279][ T5722] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.490425][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 187.640747][ T1111] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 187.685140][ T1111] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 187.689010][ T5720] loop0: detected capacity change from 0 to 8192 [ 187.710485][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.080526][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 188.080542][ T26] audit: type=1800 audit(1753266220.383:253): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.394" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 188.414597][ T26] audit: type=1326 audit(1753266220.733:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 188.483569][ T5734] tipc: Enabled bearer , priority 0 [ 188.510424][ T26] audit: type=1326 audit(1753266220.773:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 188.536034][ T5735] device syzkaller0 entered promiscuous mode [ 188.620448][ T1111] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.621199][ T5734] tipc: Resetting bearer [ 188.636119][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.731607][ T26] audit: type=1326 audit(1753266220.773:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 188.765039][ T1111] usb 2-1: Product: syz [ 188.888624][ T1111] usb 2-1: Manufacturer: syz [ 188.966385][ T1111] usb 2-1: SerialNumber: syz [ 189.148404][ T26] audit: type=1326 audit(1753266220.773:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 189.358107][ T26] audit: type=1326 audit(1753266220.793:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 189.434325][ T26] audit: type=1326 audit(1753266220.793:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 189.468529][ T5733] tipc: Resetting bearer [ 189.520967][ T5733] tipc: Disabling bearer [ 189.568819][ T5740] loop4: detected capacity change from 0 to 256 [ 189.623836][ T5740] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.626993][ T26] audit: type=1326 audit(1753266220.793:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 189.637579][ T5742] tipc: Enabling of bearer rejected, already enabled [ 189.780665][ T1111] usb 2-1: 0:2 : does not exist [ 189.880582][ T26] audit: type=1326 audit(1753266220.793:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 189.960364][ T26] audit: type=1326 audit(1753266220.793:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5af95e9a9 code=0x7ffc0000 [ 190.074108][ T1111] usb 2-1: USB disconnect, device number 2 [ 190.112293][ T5748] loop0: detected capacity change from 0 to 1024 [ 190.176365][ T5748] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 190.314397][ T5748] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 190.343877][ T5138] udevd[5138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.381097][ T5750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.671331][ T5755] loop1: detected capacity change from 0 to 512 [ 191.013690][ T5750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.110719][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 191.113813][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 191.116962][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 191.134591][ T5755] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.186350][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 192.224837][ T5750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.290509][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 192.424744][ T5774] loop2: detected capacity change from 0 to 256 [ 192.502781][ T5750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.539610][ T5774] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.748556][ T5750] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.764998][ T5750] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.800821][ T5750] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.586960][ T5750] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.717248][ T5786] loop4: detected capacity change from 0 to 512 [ 193.799214][ T5793] hub 9-0:1.0: USB hub found [ 193.804281][ T5793] hub 9-0:1.0: 1 port detected [ 193.811825][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.044165][ T5799] loop1: detected capacity change from 0 to 2048 [ 194.054180][ T5795] loop2: detected capacity change from 0 to 4096 [ 194.120127][ T5797] loop5: detected capacity change from 0 to 8192 [ 194.140686][ T5795] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 194.175825][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.182203][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210467][ T5799] EXT4-fs (loop1): Ignoring removed nobh option [ 194.253936][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 194.253951][ T26] audit: type=1800 audit(1753266226.573:293): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.417" name="file2" dev="loop5" ino=1048593 res=0 errno=0 [ 194.330138][ T5799] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 194.377992][ T5795] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 195.706651][ T5814] loop0: detected capacity change from 0 to 256 [ 198.147162][ T5822] tipc: Enabling of bearer rejected, already enabled [ 198.359747][ T5814] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.066268][ T5831] loop5: detected capacity change from 0 to 512 [ 199.669579][ T26] audit: type=1326 audit(1753266231.983:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.779860][ T26] audit: type=1326 audit(1753266231.983:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.807805][ T26] audit: type=1326 audit(1753266232.093:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.830645][ T26] audit: type=1326 audit(1753266232.093:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.855551][ T5833] tipc: Enabled bearer , priority 0 [ 199.869133][ T5833] device syzkaller0 entered promiscuous mode [ 199.878895][ T26] audit: type=1326 audit(1753266232.093:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.948993][ T26] audit: type=1326 audit(1753266232.093:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.976107][ T26] audit: type=1326 audit(1753266232.093:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 199.987253][ T5833] tipc: Resetting bearer [ 199.999575][ T5831] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 200.023143][ T5831] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.038597][ T26] audit: type=1326 audit(1753266232.123:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 200.063806][ T26] audit: type=1326 audit(1753266232.123:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 200.180786][ T5845] loop2: detected capacity change from 0 to 1024 [ 200.236179][ T26] audit: type=1326 audit(1753266232.123:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 200.268732][ T5832] tipc: Resetting bearer [ 200.316735][ T5832] tipc: Disabling bearer [ 200.326881][ T5845] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.391208][ T5848] tipc: New replicast peer: 255.255.255.255 [ 200.422346][ T5848] tipc: Enabled bearer , priority 10 [ 200.450429][ T5845] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,sysvgroups,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,auto_da_alloc,norecovery,max_batch_time=0x0000000000000005,,errors=continue. Quota mode: none. [ 201.801847][ T5860] loop1: detected capacity change from 0 to 764 [ 201.856752][ T5865] loop0: detected capacity change from 0 to 256 [ 202.997254][ T5865] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.072535][ T5860] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 203.201272][ T5871] loop5: detected capacity change from 0 to 256 [ 203.215595][ T5860] Symlink component flag not implemented [ 203.264167][ T5860] Symlink component flag not implemented (7) [ 203.290340][ T5871] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.176387][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 204.269840][ T5884] tipc: Enabling of bearer rejected, already enabled [ 204.386094][ T4248] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 204.464880][ T5888] loop2: detected capacity change from 0 to 128 [ 204.666120][ T4248] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 204.691722][ T4248] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 204.700198][ T4248] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 204.806539][ T5896] loop0: detected capacity change from 0 to 512 [ 205.121020][ T5896] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 205.139109][ T5896] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.451626][ T5895] tipc: Enabled bearer , priority 0 [ 205.501611][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 205.501626][ T26] audit: type=1326 audit(1753266237.813:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 205.570464][ T26] audit: type=1326 audit(1753266237.813:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8796319a9 code=0x7ffc0000 [ 206.864008][ T5903] tipc: Disabling bearer [ 207.047668][ T5918] sg_write: data in/out 219/120 bytes for SCSI command 0x0-- guessing data in; [ 207.047668][ T5918] program syz.0.453 not setting count and/or reply_len properly [ 207.878701][ T5923] loop1: detected capacity change from 0 to 512 [ 207.892421][ T5927] loop0: detected capacity change from 0 to 256 [ 207.931015][ T5925] tipc: Enabling of bearer rejected, already enabled [ 208.062787][ T5927] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.110222][ T5923] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.150473][ T5923] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.261807][ T5923] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.455: corrupted inode contents [ 208.340031][ T5923] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.455: mark_inode_dirty error [ 208.361311][ T5923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.455: bg 0: block 328: padding at end of block bitmap is not set [ 209.099314][ T26] audit: type=1326 audit(1753266241.413:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 209.172018][ T5952] tipc: Enabled bearer , priority 0 [ 209.201723][ T5952] device syzkaller0 entered promiscuous mode [ 209.242717][ T26] audit: type=1326 audit(1753266241.453:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 209.295651][ T5957] loop1: detected capacity change from 0 to 256 [ 209.319373][ T5952] tipc: Resetting bearer [ 209.336410][ T5951] tipc: Resetting bearer [ 209.354931][ T5957] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.389278][ T26] audit: type=1326 audit(1753266241.453:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 209.619327][ T5951] tipc: Disabling bearer [ 210.015436][ T26] audit: type=1326 audit(1753266241.453:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 210.748904][ T26] audit: type=1326 audit(1753266241.473:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 210.792896][ T5968] sctp: [Deprecated]: syz.0.469 (pid 5968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.792896][ T5968] Use struct sctp_sack_info instead [ 210.846793][ T26] audit: type=1326 audit(1753266241.483:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 210.961192][ T26] audit: type=1326 audit(1753266241.483:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 210.998445][ T26] audit: type=1326 audit(1753266241.483:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 211.068352][ T26] audit: type=1326 audit(1753266241.483:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 211.145293][ T5972] tipc: Enabling of bearer rejected, already enabled [ 211.160598][ T26] audit: type=1326 audit(1753266241.483:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 211.208830][ T5970] loop0: detected capacity change from 0 to 2048 [ 211.245977][ T26] audit: type=1326 audit(1753266241.493:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 211.330407][ T5970] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,,errors=continue. Quota mode: none. [ 211.344264][ T26] audit: type=1326 audit(1753266241.493:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f602438d83c code=0x7ffc0000 [ 211.368913][ T26] audit: type=1326 audit(1753266241.493:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f602438d774 code=0x7ffc0000 [ 211.391423][ T26] audit: type=1326 audit(1753266241.493:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f602438d774 code=0x7ffc0000 [ 211.529578][ T5980] loop2: detected capacity change from 0 to 1024 [ 211.546940][ T5984] loop0: detected capacity change from 0 to 256 [ 211.605985][ T5986] netlink: 256 bytes leftover after parsing attributes in process `syz.1.476'. [ 211.626773][ T5980] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 211.655097][ T5984] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.727743][ T5980] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 212.549534][ T5995] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 212.679107][ T5997] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 212.857734][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 212.970089][ T6009] loop4: detected capacity change from 0 to 256 [ 213.052420][ T6009] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.407421][ T6018] tipc: Enabling of bearer rejected, already enabled [ 215.796786][ T6040] loop1: detected capacity change from 0 to 256 [ 215.856480][ T6042] loop5: detected capacity change from 0 to 1024 [ 215.927681][ T6042] EXT4-fs (loop5): Ignoring removed bh option [ 215.936476][ T6042] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 215.948892][ T6040] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.998477][ T6042] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 216.590360][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 216.590380][ T26] audit: type=1326 audit(1753266248.873:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 216.950161][ T26] audit: type=1326 audit(1753266248.873:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.315711][ T26] audit: type=1326 audit(1753266250.633:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.399266][ T26] audit: type=1326 audit(1753266250.663:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.488547][ T26] audit: type=1326 audit(1753266250.673:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.559003][ T26] audit: type=1326 audit(1753266250.673:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.695428][ T26] audit: type=1326 audit(1753266250.673:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.720765][ T26] audit: type=1326 audit(1753266250.673:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.743844][ T26] audit: type=1326 audit(1753266250.673:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 218.766162][ T26] audit: type=1326 audit(1753266250.673:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cde9309a9 code=0x7ffc0000 [ 219.856005][ T6087] loop0: detected capacity change from 0 to 256 [ 219.949074][ T6087] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.996754][ T6089] tipc: Enabled bearer , priority 0 [ 220.026215][ T6089] device syzkaller0 entered promiscuous mode [ 220.114539][ T6089] tipc: Resetting bearer [ 220.160771][ T6088] tipc: Resetting bearer [ 220.187675][ T6088] tipc: Disabling bearer [ 222.271606][ T6102] loop5: detected capacity change from 0 to 512 [ 222.369739][ T6102] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 222.466446][ T6108] loop0: detected capacity change from 0 to 512 [ 222.579925][ T6113] loop4: detected capacity change from 0 to 1024 [ 222.798824][ T6117] netlink: 96 bytes leftover after parsing attributes in process `syz.5.516'. [ 222.991076][ T6113] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.105464][ T6124] loop0: detected capacity change from 0 to 512 [ 225.698262][ T6124] EXT4-fs: failed to create workqueue [ 225.703812][ T6124] EXT4-fs (loop0): mount failed [ 226.239888][ T5980] Set syz1 is full, maxelem 65536 reached [ 226.259784][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 226.259799][ T26] audit: type=1326 audit(1753266258.573:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.597165][ T26] audit: type=1326 audit(1753266258.913:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.647878][ T26] audit: type=1326 audit(1753266258.943:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.689481][ T26] audit: type=1326 audit(1753266258.943:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.729467][ T26] audit: type=1326 audit(1753266258.943:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.877598][ T26] audit: type=1326 audit(1753266258.953:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 226.981342][ T6142] tipc: Enabled bearer , priority 0 [ 227.089319][ T26] audit: type=1326 audit(1753266259.373:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 227.389244][ T26] audit: type=1326 audit(1753266259.373:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438b9a9 code=0x7ffc0000 [ 227.661721][ T1111] Bluetooth: hci2: command 0x0406 tx timeout [ 227.912028][ T6135] tipc: Disabling bearer [ 228.233319][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 228.292690][ T6162] netlink: 64 bytes leftover after parsing attributes in process `syz.5.530'. [ 228.701134][ T27] INFO: task udevd:4174 blocked for more than 144 seconds. [ 228.708415][ T27] Not tainted 5.15.189-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.846213][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.956631][ T27] task:udevd state:D stack:26184 pid: 4174 ppid: 3561 flags:0x00004002 [ 229.080568][ T6173] loop0: detected capacity change from 0 to 512 [ 229.432742][ T27] Call Trace: [ 229.436874][ T27] [ 229.564044][ T27] __schedule+0x11b8/0x43b0 [ 229.757094][ T27] ? unwind_get_return_address+0x49/0x80 [ 230.005983][ T27] ? rcu_lock_acquire+0x30/0x30 [ 230.220951][ T27] ? __mutex_lock_common+0xc6c/0x2390 [ 230.498246][ T27] ? release_firmware_map_entry+0x190/0x190 [ 230.635766][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 230.646469][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 230.651873][ T27] ? __mutex_trylock_common+0x80/0x250 [ 230.657381][ T27] ? rcu_lock_release+0x20/0x20 [ 230.729792][ T27] schedule+0x11b/0x1e0 [ 230.813459][ T27] schedule_preempt_disabled+0xf/0x20 [ 230.972654][ T27] __mutex_lock_common+0xc71/0x2390 [ 231.084644][ T27] ? uevent_show+0x17a/0x330 [ 231.089312][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 231.133819][ T27] mutex_lock_nested+0x17/0x20 [ 231.138659][ T27] uevent_show+0x17a/0x330 [ 231.171946][ T27] dev_attr_show+0x50/0xb0 [ 231.176650][ T27] ? device_get_ownership+0xa0/0xa0 [ 231.200344][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 231.205382][ T27] seq_read_iter+0x49b/0xd50 [ 231.210030][ T27] vfs_read+0x725/0xcf0 [ 231.253530][ T27] ? kernel_read+0x1e0/0x1e0 [ 231.258204][ T27] ? __context_tracking_exit+0x4c/0x80 [ 231.283577][ T27] ? __fdget_pos+0x2c6/0x370 [ 231.288241][ T27] ksys_read+0x14d/0x250 [ 231.313500][ T27] ? vfs_write+0xd00/0xd00 [ 231.317989][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 231.346086][ T27] do_syscall_64+0x4c/0xa0 [ 231.362624][ T27] ? clear_bhb_loop+0x30/0x80 [ 231.367363][ T27] ? clear_bhb_loop+0x30/0x80 [ 231.400074][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.420453][ T27] RIP: 0033:0x7f5353566407 [ 231.424947][ T27] RSP: 002b:00007fff842b4f10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 231.467131][ T27] RAX: ffffffffffffffda RBX: 00007f5353478880 RCX: 00007f5353566407 [ 231.478985][ T27] RDX: 0000000000001000 RSI: 000055c4f16e8950 RDI: 0000000000000008 [ 231.494516][ T27] RBP: 00007f53536aeff0 R08: 0000000000000000 R09: 0000000000000000 [ 231.505170][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 231.517841][ T27] R13: 00007f53536aeea0 R14: 0000000000000000 R15: 000055c4f16e0f30 [ 231.529090][ T27] [ 231.575050][ T27] [ 231.575050][ T27] Showing all locks held in the system: [ 231.610417][ T27] 1 lock held by khungtaskd/27: [ 231.615314][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 231.644271][ T27] 2 locks held by getty/3956: [ 231.654469][ T27] #0: ffff88807e508098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 231.692124][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 231.721989][ T27] 4 locks held by udevd/4174: [ 231.726740][ T27] #0: ffff88802949b418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 231.776918][ T27] #1: ffff88801b962488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 231.786800][ T27] #2: ffff88805c29bda0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 231.802922][ T27] #3: ffff88802af84220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 231.817344][ T27] 6 locks held by kworker/1:5/4248: [ 231.826566][ T27] #0: ffff8880177f7938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 231.843115][ T27] #1: ffffc9000323fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 231.859058][ T27] #2: ffff88814840b220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0 [ 231.870739][ T27] #3: ffff88802af84220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 231.880054][ T27] #4: ffff88807c0941a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 231.895443][ T27] #5: ffffffff8bfccbf0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xe7/0x320 [ 231.908998][ T27] 2 locks held by kworker/1:7/4296: [ 231.920168][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 231.939504][ T27] #1: ffffc9000334fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 231.959845][ T27] 5 locks held by kworker/u4:11/4485: [ 231.965490][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 231.980070][ T27] #1: ffffc9000450fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 231.990275][ T27] #2: ffffffff8d22a2d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 231.999713][ T27] #3: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x149/0x390 [ 232.010019][ T27] #4: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 232.020994][ T27] 1 lock held by syz.3.50/4497: [ 232.025852][ T27] #0: ffff88814840b220 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x16b/0x790 [ 232.034949][ T27] 2 locks held by udevd/5138: [ 232.039637][ T27] #0: ffff88805fd60118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 232.051930][ T27] #1: ffff88801f51b468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 232.061152][ T27] 1 lock held by syz.1.503/6082: [ 232.066104][ T27] #0: ffff88814840b220 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x16b/0x790 [ 232.075174][ T27] 3 locks held by syz.5.530/6161: [ 232.080213][ T27] #0: ffff88807a940ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 232.090028][ T27] #1: ffff88807a940078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 232.099643][ T27] #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 232.109717][ T27] 5 locks held by syz-executor/6165: [ 232.115063][ T27] #0: ffffffff8d22a2d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 232.124544][ T27] #1: ffffffff8d017890 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x165/0x240 [ 232.134450][ T27] #2: ffffffff8d017a50 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x19d/0x240 [ 232.144459][ T27] #3: ffff888076448fe8 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0xee/0x590 [ 232.156341][ T27] #4: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x149/0x4b0 [ 232.165990][ T27] 1 lock held by syz.0.531/6173: [ 232.171242][ T27] #0: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 232.182299][ T27] [ 232.184637][ T27] ============================================= [ 232.184637][ T27] [ 232.193440][ T27] NMI backtrace for cpu 0 [ 232.197786][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 232.205782][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.215852][ T27] Call Trace: [ 232.219154][ T27] [ 232.222101][ T27] dump_stack_lvl+0x168/0x230 [ 232.226804][ T27] ? show_regs_print_info+0x20/0x20 [ 232.232020][ T27] ? load_image+0x3b0/0x3b0 [ 232.236568][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 232.241697][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 232.246651][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 232.252817][ T27] ? _printk+0xcc/0x110 [ 232.256993][ T27] ? load_image+0x3b0/0x3b0 [ 232.261518][ T27] ? load_image+0x3b0/0x3b0 [ 232.266048][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 232.272143][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 232.278247][ T27] watchdog+0xe0f/0xe50 [ 232.282446][ T27] kthread+0x436/0x520 [ 232.286557][ T27] ? hungtask_pm_notify+0x40/0x40 [ 232.291596][ T27] ? kthread_blkcg+0xd0/0xd0 [ 232.296203][ T27] ret_from_fork+0x1f/0x30 [ 232.300653][ T27] [ 232.304864][ T27] Sending NMI from CPU 0 to CPUs 1: [ 232.310112][ C1] NMI backtrace for cpu 1 [ 232.310121][ C1] CPU: 1 PID: 5138 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 232.310149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.310158][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 232.310178][ C1] Code: 48 8b 3d c0 ac f1 0b 48 89 de 5b e9 77 99 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 94 ab 8a 7e 65 8b 15 95 ab 8a 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 [ 232.310191][ C1] RSP: 0018:ffffc900045ef970 EFLAGS: 00000293 [ 232.310205][ C1] RAX: ffffffff813565d5 RBX: 000000005912e200 RCX: ffff888027631dc0 [ 232.310216][ C1] RDX: 0000000080000000 RSI: 000000000000002e RDI: 0000000000000040 [ 232.310225][ C1] RBP: 0000000000000000 R08: ffff88805b698480 R09: 000000000020000d [ 232.310235][ C1] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffffc900045ef9f8 [ 232.310251][ C1] R13: 0000000000000001 R14: 000000000000002e R15: ffff888016841780 [ 232.310262][ C1] FS: 00007f5353478880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 232.310276][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.310286][ C1] CR2: 00007f5352b21000 CR3: 0000000054812000 CR4: 00000000003506e0 [ 232.310300][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.310316][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.310326][ C1] Call Trace: [ 232.310331][ C1] [ 232.310336][ C1] __phys_addr+0x95/0x170 [ 232.310358][ C1] ? qlink_free+0x37/0x80 [ 232.310379][ C1] memcg_slab_free_hook+0x89/0x1f0 [ 232.310397][ C1] ? qlink_free+0x37/0x80 [ 232.310414][ C1] ___cache_free+0x63/0x120 [ 232.310429][ C1] qlist_free_all+0x35/0x90 [ 232.310448][ C1] kasan_quarantine_reduce+0x150/0x160 [ 232.310468][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 232.310484][ C1] ? mark_lock+0x94/0x320 [ 232.310504][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 232.310521][ C1] ? verify_lock_unused+0x140/0x140 [ 232.310540][ C1] ? kasan_record_aux_stack+0xb8/0x100 [ 232.310558][ C1] ? task_work_run+0x125/0x1a0 [ 232.310576][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 232.310606][ C1] ? slab_pre_alloc_hook+0x27/0xc0 [ 232.310631][ C1] ? __might_sleep+0xf0/0xf0 [ 232.310643][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 232.310660][ C1] ? __might_sleep+0xf0/0xf0 [ 232.310673][ C1] slab_post_alloc_hook+0x4c/0x380 [ 232.310686][ C1] ? should_failslab+0x5/0x20 [ 232.310699][ C1] ? getname_flags+0xb5/0x500 [ 232.310712][ C1] kmem_cache_alloc+0x100/0x290 [ 232.310731][ C1] getname_flags+0xb5/0x500 [ 232.310746][ C1] do_sys_openat2+0xcf/0x4a0 [ 232.310762][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 232.310778][ C1] ? do_sys_open+0xe0/0xe0 [ 232.310793][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 232.310810][ C1] ? lock_chain_count+0x20/0x20 [ 232.310825][ C1] ? vtime_user_exit+0x2dc/0x400 [ 232.310840][ C1] __x64_sys_openat+0x135/0x160 [ 232.310857][ C1] do_syscall_64+0x4c/0xa0 [ 232.310872][ C1] ? clear_bhb_loop+0x30/0x80 [ 232.310885][ C1] ? clear_bhb_loop+0x30/0x80 [ 232.310897][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.310914][ C1] RIP: 0033:0x7f53535d4c3a [ 232.310925][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 232.310937][ C1] RSP: 002b:00007fff842bbff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 232.310950][ C1] RAX: ffffffffffffffda RBX: 00007fff842bc030 RCX: 00007f53535d4c3a [ 232.310960][ C1] RDX: 0000000000090800 RSI: 00007fff842bc430 RDI: 00000000ffffff9c [ 232.310969][ C1] RBP: 0000000000000007 R08: 000055c4f16d87b0 R09: 0000000000000000 [ 232.310978][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055c4f1763440 [ 232.310986][ C1] R13: 00007fff842bcc30 R14: 00007fff842bc830 R15: 00007fff842bc430 [ 232.311003][ C1] [ 232.313469][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 232.697786][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 232.705770][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.715824][ T27] Call Trace: [ 232.719106][ T27] [ 232.722037][ T27] dump_stack_lvl+0x168/0x230 [ 232.726817][ T27] ? show_regs_print_info+0x20/0x20 [ 232.732013][ T27] ? load_image+0x3b0/0x3b0 [ 232.736522][ T27] panic+0x2c9/0x7f0 [ 232.740411][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 232.746048][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 232.750556][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 232.756107][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 232.762258][ T27] watchdog+0xe4e/0xe50 [ 232.766421][ T27] kthread+0x436/0x520 [ 232.770485][ T27] ? hungtask_pm_notify+0x40/0x40 [ 232.775509][ T27] ? kthread_blkcg+0xd0/0xd0 [ 232.780097][ T27] ret_from_fork+0x1f/0x30 [ 232.784518][ T27] [ 232.787879][ T27] Kernel Offset: disabled [ 232.792221][ T27] Rebooting in 86400 seconds..