last executing test programs: 2m3.985411064s ago: executing program 3 (id=4): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m3.860575678s ago: executing program 3 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x4c46c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x14, r6, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 2m3.375900646s ago: executing program 3 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x4c46c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x14, r7, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34004804}, 0x1) close(r0) 2m3.374991849s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e0", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_clone(0x10000000, &(0x7f0000000200)="7df0e6979ec9a553426bc13f5d431a84ee273f13d815e038bc44bee8107226e6988db88f17", 0x25, &(0x7f0000000300), 0x0, &(0x7f0000000380)="6289c20cf53ff0023977142ee41c11e81c06ef63512adc") r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7, 0x0, 0x78}, {0x6}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x16, 0x0, [{0x1, 0x6, 0x2, 0x3}, {0x5b14, 0x5, 0xff, 0x101}, {0x3ff, 0x4, 0x8, 0x3}, {0xff, 0xc, 0x7, 0x4}, {0xb, 0x8, 0x1, 0x80000000}, {0xe309, 0x2, 0x2, 0x23f231cb}, {0x3, 0x3, 0x2, 0x86}, {0x8, 0xb4, 0x0, 0x4}, {0x80, 0x0, 0xc, 0x3}, {0x3, 0x1, 0x14, 0x1}, {0xb, 0xc, 0x5, 0x5}, {0x400, 0x2a, 0xf9, 0xd3b}, {0xc3, 0x0, 0x4, 0x3}, {0xc3e7, 0xd, 0x8, 0x33}, {0x8, 0x8, 0x17, 0x40000}, {0xba, 0x9, 0x8, 0x9}, {0x2, 0x3c, 0x8a, 0xa22}, {0x4, 0xfd, 0x7}, {0x4, 0x86, 0xfe, 0x9}, {0xff6, 0x4, 0xd2, 0x9aa5a0a}, {0x81, 0x3, 0x63, 0x5}, {0x5, 0xf7, 0x9}, {0x0, 0x40, 0x1, 0x5}, {0xff, 0x80, 0x9, 0x1}, {0x81, 0x7, 0x0, 0xd}, {0x800, 0x4, 0xff, 0x5f01}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0xfa, 0x7, 0x6}, {0x3, 0xc5, 0x5, 0x101}, {0x9, 0xa, 0x3, 0x5}, {0x7f, 0x4, 0x5, 0x3}, {0x400, 0xa, 0x9, 0xd3aa}, {0x3000, 0x2, 0x1, 0x1000}, {0x6, 0xb, 0x5, 0x20000}, {0x6, 0x3, 0xe, 0x2}, {0x17c, 0x10, 0x9, 0x3}, {0x4, 0x2, 0x80, 0x5}, {0x9, 0x7, 0x1, 0xd}, {0x5, 0x9, 0x9, 0x4}, {0x7f, 0x44, 0x6}, {0x9, 0x9, 0xfd, 0x10}, {0x1, 0x3, 0x8, 0x3}, {0xd0b, 0x7, 0x7, 0xa}, {0x7, 0x9, 0xfb, 0x4}, {0x52f, 0x4, 0xf8, 0x5}, {0x1, 0x80, 0x0, 0x3}, {0x6, 0xff, 0x9, 0x3}, {0x40, 0x7, 0x6, 0x8}, {0x1, 0x81, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x7ff}, {0x8000, 0x3, 0x8, 0x1}, {0x3, 0x7f, 0x2, 0x400}, {0x1, 0x9, 0x7, 0x8}, {0x4, 0xe, 0x2, 0x66}, {0x6, 0x9, 0x6}, {0x3, 0x4, 0x6, 0x7}, {0x6, 0x1, 0x14, 0x9}, {0x100, 0x2, 0xb, 0x1}, {0xd, 0x7, 0xc, 0x9}, {0x4, 0x7, 0x8, 0x9}, {0x1ff, 0x9, 0x7, 0x7}, {0x1ff, 0xff, 0x3, 0x9}, {0x5, 0x40, 0xf7, 0x4dbe}, {0x3, 0x4, 0x5, 0x3}], {0x3}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x523) kcmp(r9, 0x0, 0xc, r4, r3) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 2m2.991524313s ago: executing program 32 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x4c46c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x14, r7, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34004804}, 0x1) close(r0) 2m1.908419658s ago: executing program 4 (id=16): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m1.807135195s ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 2m1.447782259s ago: executing program 0 (id=18): socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m1.275490046s ago: executing program 0 (id=19): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x200, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20008010) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.247040262s ago: executing program 4 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m0.914310972s ago: executing program 33 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m0.89997823s ago: executing program 0 (id=22): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r2, 0xffffffffffffffff, 0xee01) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000001840), 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) 1m58.641881883s ago: executing program 0 (id=27): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m57.67002548s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) truncate(&(0x7f0000000240)='./file1\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC=r6], 0x1, 0x17d, &(0x7f00000004c0)="$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") getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 1m57.335307756s ago: executing program 0 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1m57.318215273s ago: executing program 2 (id=36): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) 1m56.949811312s ago: executing program 34 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1m56.382456191s ago: executing program 2 (id=38): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m56.247823249s ago: executing program 2 (id=39): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1m56.183917811s ago: executing program 2 (id=40): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_pidfd_open(0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m56.100082982s ago: executing program 2 (id=41): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m55.751570519s ago: executing program 2 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0", 0xb, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_clone(0x10000000, &(0x7f0000000200)="7df0e6979ec9a553426bc13f5d431a84ee273f13d815e038bc44bee8107226e6988db88f17", 0x25, &(0x7f0000000300), 0x0, &(0x7f0000000380)="6289c20cf53ff0023977142ee41c11e81c06ef63512adc") r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7, 0x0, 0x78}, {0x6}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x16, 0x0, [{0x1, 0x6, 0x2, 0x3}, {0x5b14, 0x5, 0xff, 0x101}, {0x3ff, 0x4, 0x8, 0x3}, {0xff, 0xc, 0x7, 0x4}, {0xb, 0x8, 0x1, 0x80000000}, {0xe309, 0x2, 0x2, 0x23f231cb}, {0x3, 0x3, 0x2, 0x86}, {0x8, 0xb4, 0x0, 0x4}, {0x80, 0x0, 0xc, 0x3}, {0x3, 0x1, 0x14, 0x1}, {0xb, 0xc, 0x5, 0x5}, {0x400, 0x2a, 0xf9, 0xd3b}, {0xc3, 0x0, 0x4, 0x3}, {0xc3e7, 0xd, 0x8, 0x33}, {0x8, 0x8, 0x17, 0x40000}, {0xba, 0x9, 0x8, 0x9}, {0x2, 0x3c, 0x8a, 0xa22}, {0x4, 0xfd, 0x7}, {0x4, 0x86, 0xfe, 0x9}, {0xff6, 0x4, 0xd2, 0x9aa5a0a}, {0x81, 0x3, 0x63, 0x5}, {0x5, 0xf7, 0x9}, {0x0, 0x40, 0x1, 0x5}, {0xff, 0x80, 0x9, 0x1}, {0x81, 0x7, 0x0, 0xd}, {0x800, 0x4, 0xff, 0x5f01}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0xfa, 0x7, 0x6}, {0x3, 0xc5, 0x5, 0x101}, {0x9, 0xa, 0x3, 0x5}, {0x7f, 0x4, 0x5, 0x3}, {0x400, 0xa, 0x9, 0xd3aa}, {0x3000, 0x2, 0x1, 0x1000}, {0x6, 0xb, 0x5, 0x20000}, {0x6, 0x3, 0xe, 0x2}, {0x17c, 0x10, 0x9, 0x3}, {0x4, 0x2, 0x80, 0x5}, {0x9, 0x7, 0x1, 0xd}, {0x5, 0x9, 0x9, 0x4}, {0x7f, 0x44, 0x6}, {0x9, 0x9, 0xfd, 0x10}, {0x1, 0x3, 0x8, 0x3}, {0xd0b, 0x7, 0x7, 0xa}, {0x7, 0x9, 0xfb, 0x4}, {0x52f, 0x4, 0xf8, 0x5}, {0x1, 0x80, 0x0, 0x3}, {0x6, 0xff, 0x9, 0x3}, {0x40, 0x7, 0x6, 0x8}, {0x1, 0x81, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x7ff}, {0x8000, 0x3, 0x8, 0x1}, {0x3, 0x7f, 0x2, 0x400}, {0x1, 0x9, 0x7, 0x8}, {0x4, 0xe, 0x2, 0x66}, {0x6, 0x9, 0x6}, {0x3, 0x4, 0x6, 0x7}, {0x6, 0x1, 0x14, 0x9}, {0x100, 0x2, 0xb, 0x1}, {0xd, 0x7, 0xc, 0x9}, {0x4, 0x7, 0x8, 0x9}, {0x1ff, 0x9, 0x7, 0x7}, {0x1ff, 0xff, 0x3, 0x9}, {0x5, 0x40, 0xf7, 0x4dbe}, {0x3, 0x4, 0x5, 0x3}], {0x3}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x523) kcmp(r9, 0x0, 0xc, r4, r3) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1m55.510944154s ago: executing program 35 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0", 0xb, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_clone(0x10000000, &(0x7f0000000200)="7df0e6979ec9a553426bc13f5d431a84ee273f13d815e038bc44bee8107226e6988db88f17", 0x25, &(0x7f0000000300), 0x0, &(0x7f0000000380)="6289c20cf53ff0023977142ee41c11e81c06ef63512adc") r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7, 0x0, 0x78}, {0x6}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x16, 0x0, [{0x1, 0x6, 0x2, 0x3}, {0x5b14, 0x5, 0xff, 0x101}, {0x3ff, 0x4, 0x8, 0x3}, {0xff, 0xc, 0x7, 0x4}, {0xb, 0x8, 0x1, 0x80000000}, {0xe309, 0x2, 0x2, 0x23f231cb}, {0x3, 0x3, 0x2, 0x86}, {0x8, 0xb4, 0x0, 0x4}, {0x80, 0x0, 0xc, 0x3}, {0x3, 0x1, 0x14, 0x1}, {0xb, 0xc, 0x5, 0x5}, {0x400, 0x2a, 0xf9, 0xd3b}, {0xc3, 0x0, 0x4, 0x3}, {0xc3e7, 0xd, 0x8, 0x33}, {0x8, 0x8, 0x17, 0x40000}, {0xba, 0x9, 0x8, 0x9}, {0x2, 0x3c, 0x8a, 0xa22}, {0x4, 0xfd, 0x7}, {0x4, 0x86, 0xfe, 0x9}, {0xff6, 0x4, 0xd2, 0x9aa5a0a}, {0x81, 0x3, 0x63, 0x5}, {0x5, 0xf7, 0x9}, {0x0, 0x40, 0x1, 0x5}, {0xff, 0x80, 0x9, 0x1}, {0x81, 0x7, 0x0, 0xd}, {0x800, 0x4, 0xff, 0x5f01}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0xfa, 0x7, 0x6}, {0x3, 0xc5, 0x5, 0x101}, {0x9, 0xa, 0x3, 0x5}, {0x7f, 0x4, 0x5, 0x3}, {0x400, 0xa, 0x9, 0xd3aa}, {0x3000, 0x2, 0x1, 0x1000}, {0x6, 0xb, 0x5, 0x20000}, {0x6, 0x3, 0xe, 0x2}, {0x17c, 0x10, 0x9, 0x3}, {0x4, 0x2, 0x80, 0x5}, {0x9, 0x7, 0x1, 0xd}, {0x5, 0x9, 0x9, 0x4}, {0x7f, 0x44, 0x6}, {0x9, 0x9, 0xfd, 0x10}, {0x1, 0x3, 0x8, 0x3}, {0xd0b, 0x7, 0x7, 0xa}, {0x7, 0x9, 0xfb, 0x4}, {0x52f, 0x4, 0xf8, 0x5}, {0x1, 0x80, 0x0, 0x3}, {0x6, 0xff, 0x9, 0x3}, {0x40, 0x7, 0x6, 0x8}, {0x1, 0x81, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x7ff}, {0x8000, 0x3, 0x8, 0x1}, {0x3, 0x7f, 0x2, 0x400}, {0x1, 0x9, 0x7, 0x8}, {0x4, 0xe, 0x2, 0x66}, {0x6, 0x9, 0x6}, {0x3, 0x4, 0x6, 0x7}, {0x6, 0x1, 0x14, 0x9}, {0x100, 0x2, 0xb, 0x1}, {0xd, 0x7, 0xc, 0x9}, {0x4, 0x7, 0x8, 0x9}, {0x1ff, 0x9, 0x7, 0x7}, {0x1ff, 0xff, 0x3, 0x9}, {0x5, 0x40, 0xf7, 0x4dbe}, {0x3, 0x4, 0x5, 0x3}], {0x3}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x523) kcmp(r9, 0x0, 0xc, r4, r3) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1m28.047517859s ago: executing program 1 (id=141): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x80) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) mlockall(0x2) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sync() 1m27.575714208s ago: executing program 1 (id=148): io_uring_setup(0x4724, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008894) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff000000001000000085000000ba00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m26.472059521s ago: executing program 1 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m19.312897499s ago: executing program 1 (id=178): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x24c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2e, 0x807, 0xff) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r5, &(0x7f0000002200)={0x50, 0x0, r7, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, r8, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r5, &(0x7f0000008380)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87173065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075aebd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c5710600000000000000cc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59954d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a411eba79ea870e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd00", 0x2000, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x8, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r9, 0x400000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x20000) socket$netlink(0x10, 0x3, 0x0) 1m17.090208017s ago: executing program 1 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001}, 0x3c) 1m16.845750499s ago: executing program 1 (id=187): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.718175838s ago: executing program 36 (id=187): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 21.050726766s ago: executing program 8 (id=309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x310e011, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') keyctl$setperm(0x5, r6, 0x52b242d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000000)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x34}, 0x48, r6) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) 19.956436965s ago: executing program 8 (id=311): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000020000"], 0x108}}], 0x2, 0xc040) 18.709160575s ago: executing program 8 (id=318): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) 17.842560123s ago: executing program 8 (id=321): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x444001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) 13.638942985s ago: executing program 9 (id=339): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000020000"], 0x108}}], 0x2, 0xc040) 12.169933446s ago: executing program 9 (id=341): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.327235423s ago: executing program 9 (id=344): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 10.462790843s ago: executing program 5 (id=347): ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x5b0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10.203184338s ago: executing program 7 (id=348): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xe0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101", @ANYRES32], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000001b80)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x100fff, @mcast2, 0x14}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}}], 0x2, 0x4000000) 8.806189517s ago: executing program 6 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) 7.755968692s ago: executing program 6 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) 7.397907487s ago: executing program 5 (id=351): socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xc, 0xfffffffffffffffe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) 7.333539693s ago: executing program 9 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff000000200700007ef0af2cb0e29b8e5b4f48324447716400"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0xc, &(0x7f0000000180)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r7, &(0x7f0000000d40)=""/43, 0x2b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r7, 0x0, 0x20, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00\xeb\xaav4\x00\x00s:\x92Y\xc90\xfeY\x00\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) 7.322990678s ago: executing program 7 (id=353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b0000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001}, 0x3c) 7.133668712s ago: executing program 5 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) fallocate(r1, 0x4b, 0x6bee, 0x10) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x8000, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYBLOB="9e531b34482a690cba62d611fdb8da20b7f9ccd99b6e76acad3914d6fb491e", @ANYRES8=r3, @ANYRES8, @ANYRESOCT=r7, @ANYRESDEC, @ANYRES8=0x0, @ANYRES16=r1], 0x25, 0x34c, &(0x7f0000001740)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/146, 0x92) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) 6.883945725s ago: executing program 7 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.554344604s ago: executing program 9 (id=356): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.786769941s ago: executing program 7 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, 0x0, 0x0, 0x5412, 0x0, 0x0) 3.426132914s ago: executing program 7 (id=358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.422287839s ago: executing program 5 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r1, &(0x7f0000000180)=""/243, 0xf3) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x20000}, &(0x7f0000ffe000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x6, 'macsec0\x00', {0x2a4}, 0x9}) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x20a002) 2.97996351s ago: executing program 8 (id=360): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.410118296s ago: executing program 5 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.155043224s ago: executing program 5 (id=362): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 723.838532ms ago: executing program 6 (id=363): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000006400)='./file0\x00', 0x0, 0x1000) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0xfffffffffffffffc, 0x80, {0x3, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7e3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 689.771637ms ago: executing program 8 (id=364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00=\x00'/14], 0x50) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r7, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000c501"]) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 544.996419ms ago: executing program 6 (id=365): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b0000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 344.031759ms ago: executing program 6 (id=366): socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c000100"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 297.518769ms ago: executing program 7 (id=367): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) 97.169538ms ago: executing program 9 (id=368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 0s ago: executing program 6 (id=369): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x7}}, {0x4}}]}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 68.876403][ T5816] cgroup: Unknown subsys name 'net' [ 68.999922][ T5816] cgroup: Unknown subsys name 'cpuset' [ 69.008661][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.420945][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.410999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417620][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.999143][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.009612][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.017483][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.027613][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.035731][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.092796][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.102591][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.123466][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.131404][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.139125][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.147661][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.157328][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.165446][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.172868][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.180717][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.189435][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.191589][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.197321][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.204617][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.225398][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.256262][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.267244][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.275176][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.283838][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.291969][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.722177][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 74.972971][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.026313][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 75.044168][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.051743][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.059696][ T5826] bridge_slave_0: entered allmulticast mode [ 75.067173][ T5826] bridge_slave_0: entered promiscuous mode [ 75.079873][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.087093][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.094295][ T5826] bridge_slave_1: entered allmulticast mode [ 75.101717][ T5826] bridge_slave_1: entered promiscuous mode [ 75.180038][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.241895][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.279963][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.386010][ T5826] team0: Port device team_slave_0 added [ 75.428555][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.435717][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.443011][ T5831] bridge_slave_0: entered allmulticast mode [ 75.450610][ T5831] bridge_slave_0: entered promiscuous mode [ 75.461237][ T5826] team0: Port device team_slave_1 added [ 75.472475][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.483588][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.491226][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.498513][ T5842] bridge_slave_0: entered allmulticast mode [ 75.506103][ T5842] bridge_slave_0: entered promiscuous mode [ 75.513923][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.521240][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.528477][ T5842] bridge_slave_1: entered allmulticast mode [ 75.535539][ T5842] bridge_slave_1: entered promiscuous mode [ 75.543111][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.550471][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.557719][ T5831] bridge_slave_1: entered allmulticast mode [ 75.564771][ T5831] bridge_slave_1: entered promiscuous mode [ 75.690207][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.697504][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.723507][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.750070][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.757732][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.764906][ T5833] bridge_slave_0: entered allmulticast mode [ 75.772333][ T5833] bridge_slave_0: entered promiscuous mode [ 75.783093][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.795456][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.805817][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.813029][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.839005][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.855154][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.862505][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.869900][ T5833] bridge_slave_1: entered allmulticast mode [ 75.877131][ T5833] bridge_slave_1: entered promiscuous mode [ 75.887470][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.913212][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.012089][ T5842] team0: Port device team_slave_0 added [ 76.031472][ T5831] team0: Port device team_slave_0 added [ 76.052660][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.064761][ T5842] team0: Port device team_slave_1 added [ 76.099070][ T5831] team0: Port device team_slave_1 added [ 76.110964][ T5826] hsr_slave_0: entered promiscuous mode [ 76.117690][ T5826] hsr_slave_1: entered promiscuous mode [ 76.128397][ T5835] Bluetooth: hci0: command tx timeout [ 76.139936][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.147209][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.154450][ T5830] bridge_slave_0: entered allmulticast mode [ 76.161798][ T5830] bridge_slave_0: entered promiscuous mode [ 76.171586][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.215637][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.223075][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.230452][ T5830] bridge_slave_1: entered allmulticast mode [ 76.238058][ T5830] bridge_slave_1: entered promiscuous mode [ 76.256154][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.263523][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.286808][ T5148] Bluetooth: hci2: command tx timeout [ 76.289530][ T5838] Bluetooth: hci3: command tx timeout [ 76.295110][ T5835] Bluetooth: hci1: command tx timeout [ 76.301045][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.319045][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.326009][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.352267][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.364175][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.366814][ T5835] Bluetooth: hci4: command tx timeout [ 76.371239][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.402431][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.459271][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.466231][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.492503][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.517431][ T5833] team0: Port device team_slave_0 added [ 76.558181][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.569954][ T5833] team0: Port device team_slave_1 added [ 76.578337][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.625561][ T5830] team0: Port device team_slave_0 added [ 76.674793][ T5830] team0: Port device team_slave_1 added [ 76.735646][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.743834][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.770247][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.787692][ T5842] hsr_slave_0: entered promiscuous mode [ 76.794037][ T5842] hsr_slave_1: entered promiscuous mode [ 76.800728][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 76.806529][ T5842] Cannot create hsr debugfs directory [ 76.849961][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.857199][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.883135][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.908496][ T5831] hsr_slave_0: entered promiscuous mode [ 76.914853][ T5831] hsr_slave_1: entered promiscuous mode [ 76.921361][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 76.927736][ T5831] Cannot create hsr debugfs directory [ 76.940484][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.947581][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.973659][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.986877][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.993834][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.019853][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.129892][ T5833] hsr_slave_0: entered promiscuous mode [ 77.138007][ T5833] hsr_slave_1: entered promiscuous mode [ 77.144751][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 77.150557][ T5833] Cannot create hsr debugfs directory [ 77.195271][ T5830] hsr_slave_0: entered promiscuous mode [ 77.201729][ T5830] hsr_slave_1: entered promiscuous mode [ 77.208245][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 77.213984][ T5830] Cannot create hsr debugfs directory [ 77.660422][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.673605][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.684279][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.702856][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.762747][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.782901][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.794750][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.817977][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.895744][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.907606][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.919016][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.942834][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.033359][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.044286][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.056324][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.069031][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.197330][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.207065][ T5835] Bluetooth: hci0: command tx timeout [ 78.211557][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.223442][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.234576][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.255560][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.370735][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.378149][ T5835] Bluetooth: hci3: command tx timeout [ 78.383558][ T5835] Bluetooth: hci1: command tx timeout [ 78.387164][ T5838] Bluetooth: hci2: command tx timeout [ 78.410723][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.441599][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.450165][ T5148] Bluetooth: hci4: command tx timeout [ 78.468820][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.476250][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.513574][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.520862][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.534912][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.561404][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.573380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.580606][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.616144][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.623398][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.641667][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.648893][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.664727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.671954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.702876][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.758218][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.787957][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.832580][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.839960][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.896068][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.903318][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.939999][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.986088][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.993337][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.015781][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.048154][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.055384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.162982][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.431618][ T5826] veth0_vlan: entered promiscuous mode [ 79.492921][ T5826] veth1_vlan: entered promiscuous mode [ 79.625777][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.643671][ T5826] veth0_macvtap: entered promiscuous mode [ 79.655700][ T5826] veth1_macvtap: entered promiscuous mode [ 79.672548][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.732915][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.750352][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.779986][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.830713][ T5830] veth0_vlan: entered promiscuous mode [ 79.853266][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.920841][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.961880][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.972405][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982347][ T5830] veth1_vlan: entered promiscuous mode [ 79.999722][ T5833] veth0_vlan: entered promiscuous mode [ 80.008795][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.076096][ T5833] veth1_vlan: entered promiscuous mode [ 80.175987][ T5831] veth0_vlan: entered promiscuous mode [ 80.189256][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.209148][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.239528][ T5830] veth0_macvtap: entered promiscuous mode [ 80.254151][ T5842] veth0_vlan: entered promiscuous mode [ 80.271252][ T5830] veth1_macvtap: entered promiscuous mode [ 80.288680][ T5148] Bluetooth: hci0: command tx timeout [ 80.292658][ T5831] veth1_vlan: entered promiscuous mode [ 80.303005][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.317132][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.322178][ T5833] veth0_macvtap: entered promiscuous mode [ 80.355200][ T5842] veth1_vlan: entered promiscuous mode [ 80.383522][ T5833] veth1_macvtap: entered promiscuous mode [ 80.414151][ T5831] veth0_macvtap: entered promiscuous mode [ 80.424283][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.427797][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.448518][ T5148] Bluetooth: hci2: command tx timeout [ 80.456925][ T5838] Bluetooth: hci3: command tx timeout [ 80.462439][ T5148] Bluetooth: hci1: command tx timeout [ 80.466448][ T5831] veth1_macvtap: entered promiscuous mode [ 80.527386][ T5148] Bluetooth: hci4: command tx timeout [ 80.530829][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.554704][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.575082][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.607835][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.619300][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633956][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.644275][ T5945] loop2: detected capacity change from 0 to 512 [ 80.646396][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.665426][ T5945] EXT4-fs: Ignoring removed nobh option [ 80.678988][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.692086][ T5945] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.734901][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.748387][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.765266][ T5945] EXT4-fs error (device loop2): ext4_do_update_inode:5629: inode #3: comm syz.2.3: corrupted inode contents [ 80.778987][ T5945] EXT4-fs (loop2): Remounting filesystem read-only [ 80.796204][ T5945] Quota error (device loop2): write_blk: dquota write failed [ 80.796850][ T5842] veth0_macvtap: entered promiscuous mode [ 80.804961][ T5945] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 80.815922][ T5842] veth1_macvtap: entered promiscuous mode [ 80.827835][ T5945] EXT4-fs (loop2): 1 truncate cleaned up [ 80.834494][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835865][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.858473][ T5945] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.869007][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.899510][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912488][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.945600][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.954945][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984749][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.004851][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.211407][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.259797][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.757325][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.765334][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.795741][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.825729][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.826969][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.842312][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.852336][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.976414][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.986472][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.004869][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.046111][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.068059][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.223626][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.245400][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.366818][ T5148] Bluetooth: hci0: command tx timeout [ 82.377173][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.393281][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.527114][ T5148] Bluetooth: hci1: command tx timeout [ 82.528466][ T5838] Bluetooth: hci3: command tx timeout [ 82.532563][ T5835] Bluetooth: hci2: command tx timeout [ 82.599244][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.607701][ T5835] Bluetooth: hci4: command tx timeout [ 82.627830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.653946][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.668984][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.039014][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.162606][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.180698][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.192912][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.218496][ T5955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.308481][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.356663][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 83.377233][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 83.384658][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.400829][ T5955] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 83.418797][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.431527][ T5955] usb 2-1: config 0 has no interface number 0 [ 83.444852][ T5955] usb 2-1: config 0 interface 12 has no altsetting 0 [ 83.453091][ T43] usb 3-1: Product: syz [ 83.457663][ T43] usb 3-1: Manufacturer: syz [ 83.462528][ T43] usb 3-1: SerialNumber: syz [ 83.470801][ T5955] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 83.485021][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.496141][ T43] usb 3-1: config 0 descriptor?? [ 83.519659][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.525233][ T5955] usb 2-1: Product: syz [ 83.565401][ T5955] usb 2-1: Manufacturer: syz [ 83.749005][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.758078][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.772370][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.784741][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.793013][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.809745][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.841866][ T5955] usb 2-1: SerialNumber: syz [ 83.885055][ T5955] usb 2-1: config 0 descriptor?? [ 83.953082][ T5955] f81534 2-1:0.12: required endpoints missing [ 83.992471][ T5986] ======================================================= [ 83.992471][ T5986] WARNING: The mand mount option has been deprecated and [ 83.992471][ T5986] and is ignored by this kernel. Remove the mand [ 83.992471][ T5986] option from the mount to silence this warning. [ 83.992471][ T5986] ======================================================= [ 84.079087][ T13] bridge_slave_1: left allmulticast mode [ 84.103840][ T13] bridge_slave_1: left promiscuous mode [ 84.112988][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.138457][ T13] bridge_slave_0: left allmulticast mode [ 84.152316][ T13] bridge_slave_0: left promiscuous mode [ 84.159948][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15'. [ 84.175885][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.721752][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.743550][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.755773][ T13] bond0 (unregistering): Released all slaves [ 85.151579][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 85.205267][ T43] usb 3-1: USB disconnect, device number 2 [ 85.444384][ T13] hsr_slave_0: left promiscuous mode [ 85.452585][ T13] hsr_slave_1: left promiscuous mode [ 85.471362][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.506722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.535783][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.558822][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.624458][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.631795][ T13] veth1_macvtap: left promiscuous mode [ 85.636929][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.645847][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.646947][ T13] veth0_macvtap: left promiscuous mode [ 85.675819][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.679814][ T13] veth1_vlan: left promiscuous mode [ 85.688662][ T13] veth0_vlan: left promiscuous mode [ 85.697364][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.906700][ T5835] Bluetooth: hci1: command tx timeout [ 86.665334][ T5845] usb 2-1: USB disconnect, device number 2 [ 86.814442][ T1211] cfg80211: failed to load regulatory.db [ 87.001380][ T6018] loop0: detected capacity change from 0 to 40427 [ 87.077009][ T6018] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 87.101925][ T6018] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.169218][ T6018] F2FS-fs (loop0): invalid crc value [ 87.274378][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 87.368681][ T6018] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 87.409157][ T6018] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.424246][ T6018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.621505][ T13] team0 (unregistering): Port device team_slave_1 removed [ 87.684976][ T5831] syz-executor: attempt to access beyond end of device [ 87.684976][ T5831] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.717210][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 87.717237][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.717255][ T5831] Call Trace: [ 87.717264][ T5831] [ 87.717273][ T5831] dump_stack_lvl+0x189/0x250 [ 87.717307][ T5831] ? preempt_schedule_thunk+0x16/0x30 [ 87.717336][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.717366][ T5831] ? __pfx_queue_work_on+0x10/0x10 [ 87.717389][ T5831] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 87.717413][ T5831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.717451][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 87.717489][ T5831] f2fs_write_end_io+0x886/0xb60 [ 87.717528][ T5831] __submit_merged_bio+0x27a/0x6a0 [ 87.717565][ T5831] __submit_merged_write_cond+0x255/0x530 [ 87.717601][ T5831] f2fs_write_data_pages+0x261d/0x3000 [ 87.717659][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.717729][ T5831] ? check_path+0x21/0x40 [ 87.717756][ T5831] ? check_noncircular+0xe0/0x160 [ 87.717847][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.717867][ T5831] do_writepages+0x32e/0x550 [ 87.717907][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 87.717933][ T5831] filemap_fdatawrite+0x199/0x240 [ 87.717961][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 87.718045][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 87.718070][ T5831] f2fs_sync_dirty_inodes+0x31f/0x830 [ 87.718109][ T5831] f2fs_write_checkpoint+0x93e/0x2440 [ 87.718128][ T5831] ? stack_depot_save_flags+0x41b/0x860 [ 87.718182][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 87.718245][ T5831] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 87.718265][ T5831] ? kfree+0x19a/0x6d0 [ 87.718302][ T5831] kill_f2fs_super+0x2cc/0x6d0 [ 87.718330][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 87.718370][ T5831] ? shrinker_free+0x2ce/0x3e0 [ 87.718398][ T5831] deactivate_locked_super+0xbc/0x130 [ 87.718423][ T5831] cleanup_mnt+0x425/0x4c0 [ 87.718442][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.718467][ T5831] task_work_run+0x1d4/0x260 [ 87.718489][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 87.718512][ T5831] ? exit_to_user_mode_loop+0x55/0x4f0 [ 87.718538][ T5831] exit_to_user_mode_loop+0xff/0x4f0 [ 87.718558][ T5831] ? rcu_is_watching+0x15/0xb0 [ 87.718588][ T5831] do_syscall_64+0x2e9/0xfa0 [ 87.718612][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.718630][ T5831] ? clear_bhb_loop+0x60/0xb0 [ 87.718651][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.718668][ T5831] RIP: 0033:0x7f645e3909f7 [ 87.718690][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 87.718705][ T5831] RSP: 002b:00007ffc860fb6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.718725][ T5831] RAX: 0000000000000000 RBX: 00007f645e411d7d RCX: 00007f645e3909f7 [ 87.718737][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc860fb7b0 [ 87.718747][ T5831] RBP: 00007ffc860fb7b0 R08: 0000000000000000 R09: 0000000000000000 [ 87.718758][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc860fc840 [ 87.718775][ T5831] R13: 00007f645e411d7d R14: 0000000000015602 R15: 00007ffc860fc880 [ 87.718806][ T5831] [ 87.718881][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 87.738628][ T5835] Bluetooth: hci4: command tx timeout [ 88.016894][ T5838] Bluetooth: hci1: command tx timeout [ 88.075092][ T13] team0 (unregistering): Port device team_slave_0 removed [ 88.557616][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.864432][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 89.201919][ T1211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.357081][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.368987][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 89.374808][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.378985][ T1211] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 89.392506][ T5983] bridge_slave_0: entered allmulticast mode [ 89.400049][ T1211] usb 2-1: config 0 has no interface number 0 [ 89.409975][ T5983] bridge_slave_0: entered promiscuous mode [ 89.411647][ T1211] usb 2-1: config 0 interface 12 has no altsetting 0 [ 89.440751][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.452412][ T1211] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 89.460372][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.465659][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.479485][ T1211] usb 2-1: Product: syz [ 89.483685][ T1211] usb 2-1: Manufacturer: syz [ 89.488641][ T5983] bridge_slave_1: entered allmulticast mode [ 89.496864][ T1211] usb 2-1: SerialNumber: syz [ 89.518282][ T1211] usb 2-1: config 0 descriptor?? [ 89.524052][ T5983] bridge_slave_1: entered promiscuous mode [ 89.548235][ T1211] f81534 2-1:0.12: required endpoints missing [ 89.673385][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.685794][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.697348][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.708276][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.720036][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.772667][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.789051][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.974516][ T5983] team0: Port device team_slave_0 added [ 90.016421][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.046797][ T5838] Bluetooth: hci4: command tx timeout [ 90.107982][ T5983] team0: Port device team_slave_1 added [ 90.126734][ T5838] Bluetooth: hci1: command tx timeout [ 90.174722][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.240118][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.248000][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.275117][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.304420][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 90.326024][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.340577][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.347802][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.376038][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.467822][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.657881][ T5983] hsr_slave_0: entered promiscuous mode [ 90.679195][ T5983] hsr_slave_1: entered promiscuous mode [ 90.693934][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 90.707634][ T5983] Cannot create hsr debugfs directory [ 90.862818][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.872550][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.896897][ T6022] bridge_slave_0: entered allmulticast mode [ 90.904809][ T6022] bridge_slave_0: entered promiscuous mode [ 91.030747][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.043594][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.053885][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.063292][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.072136][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.080140][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.088837][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.096512][ T6022] bridge_slave_1: entered allmulticast mode [ 91.105208][ T6022] bridge_slave_1: entered promiscuous mode [ 91.268589][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.328190][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.361248][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 91.405362][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435181][ T6022] team0: Port device team_slave_0 added [ 91.490700][ T6022] team0: Port device team_slave_1 added [ 91.532574][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.610232][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.617352][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.643528][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.678112][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.700253][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.718136][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.759060][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.807299][ T5838] Bluetooth: hci2: command tx timeout [ 91.850391][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.861373][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.870278][ T6090] bridge_slave_0: entered allmulticast mode [ 91.878918][ T6090] bridge_slave_0: entered promiscuous mode [ 91.948386][ T5890] usb 2-1: USB disconnect, device number 3 [ 92.013906][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.055108][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.142475][ T6150] loop1: detected capacity change from 0 to 16 [ 92.154677][ T6150] erofs: Unknown parameter '18446744073709551615' [ 92.187173][ T5838] Bluetooth: hci4: command tx timeout [ 92.207479][ T5838] Bluetooth: hci1: command tx timeout [ 92.718873][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.728101][ T6090] bridge_slave_1: entered allmulticast mode [ 92.736031][ T6090] bridge_slave_1: entered promiscuous mode [ 92.955414][ T6022] hsr_slave_0: entered promiscuous mode [ 92.973959][ T6022] hsr_slave_1: entered promiscuous mode [ 92.984491][ T6022] debugfs: 'hsr0' already exists in 'hsr' [ 92.992306][ T6022] Cannot create hsr debugfs directory [ 93.074839][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.102159][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.183588][ T5838] Bluetooth: hci0: command tx timeout [ 93.229104][ T6090] team0: Port device team_slave_0 added [ 93.239004][ T6090] team0: Port device team_slave_1 added [ 93.343136][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.350378][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.376878][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.387985][ T5983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.445144][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.452414][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.478973][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.490834][ T5983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.539222][ T5983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.551677][ T5983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.592516][ T6126] chnl_net:caif_netlink_parms(): no params data found [ 93.632747][ T13] bridge_slave_1: left allmulticast mode [ 93.639226][ T13] bridge_slave_1: left promiscuous mode [ 93.645001][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.655931][ T13] bridge_slave_0: left allmulticast mode [ 93.662785][ T13] bridge_slave_0: left promiscuous mode [ 93.668883][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.681151][ T13] bridge_slave_1: left allmulticast mode [ 93.687110][ T13] bridge_slave_1: left promiscuous mode [ 93.692922][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.703599][ T13] bridge_slave_0: left allmulticast mode [ 93.709578][ T13] bridge_slave_0: left promiscuous mode [ 93.715357][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.887005][ T5838] Bluetooth: hci2: command tx timeout [ 94.043131][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.054785][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.066142][ T13] bond0 (unregistering): Released all slaves [ 94.206850][ T5838] Bluetooth: hci4: command tx timeout [ 94.268254][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.279145][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.290099][ T13] bond0 (unregistering): Released all slaves [ 94.339129][ T6090] hsr_slave_0: entered promiscuous mode [ 94.347619][ T6090] hsr_slave_1: entered promiscuous mode [ 94.359697][ T6090] debugfs: 'hsr0' already exists in 'hsr' [ 94.371078][ T6090] Cannot create hsr debugfs directory [ 94.584048][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.593377][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.601214][ T6126] bridge_slave_0: entered allmulticast mode [ 94.609369][ T6126] bridge_slave_0: entered promiscuous mode [ 94.650248][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.662249][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.671517][ T6126] bridge_slave_1: entered allmulticast mode [ 94.679227][ T6126] bridge_slave_1: entered promiscuous mode [ 94.768975][ T6022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.800010][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.820902][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.833114][ T6022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.851344][ T6022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.049644][ T6022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.180007][ T6126] team0: Port device team_slave_0 added [ 95.243821][ T13] hsr_slave_0: left promiscuous mode [ 95.253086][ T13] hsr_slave_1: left promiscuous mode [ 95.259782][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.263076][ T5838] Bluetooth: hci0: command tx timeout [ 95.273488][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.287844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.295375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.311621][ T13] hsr_slave_0: left promiscuous mode [ 95.317889][ T13] hsr_slave_1: left promiscuous mode [ 95.324059][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.331590][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.344066][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.351666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.394928][ T13] veth1_macvtap: left promiscuous mode [ 95.400694][ T13] veth0_macvtap: left promiscuous mode [ 95.406479][ T13] veth1_vlan: left promiscuous mode [ 95.417047][ T13] veth0_vlan: left promiscuous mode [ 95.425372][ T13] veth1_macvtap: left promiscuous mode [ 95.431107][ T13] veth0_macvtap: left promiscuous mode [ 95.439118][ T13] veth1_vlan: left promiscuous mode [ 95.444567][ T13] veth0_vlan: left promiscuous mode [ 95.862695][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.892660][ T13] team0 (unregistering): Port device team_slave_0 removed [ 95.979792][ T5838] Bluetooth: hci2: command tx timeout [ 96.381332][ T13] team0 (unregistering): Port device team_slave_1 removed [ 96.411929][ T13] team0 (unregistering): Port device team_slave_0 removed [ 96.664153][ T6126] team0: Port device team_slave_1 added [ 96.809289][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.836711][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.866427][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.880888][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.888227][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.915655][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.064886][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.213102][ T6126] hsr_slave_0: entered promiscuous mode [ 97.221480][ T6126] hsr_slave_1: entered promiscuous mode [ 97.229495][ T6126] debugfs: 'hsr0' already exists in 'hsr' [ 97.236397][ T6126] Cannot create hsr debugfs directory [ 97.326771][ T5838] Bluetooth: hci0: command tx timeout [ 97.694332][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.797782][ T6090] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 97.823607][ T6090] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 97.841636][ T6090] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 97.882781][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.890065][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.938742][ T6090] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.003478][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.010763][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.057162][ T5838] Bluetooth: hci2: command tx timeout [ 98.977282][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.084093][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.192420][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.217307][ T6126] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 99.244578][ T6126] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 99.269086][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.279560][ T6126] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 99.293790][ T6126] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 99.329798][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.407064][ T5838] Bluetooth: hci0: command tx timeout [ 99.446514][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.495974][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.503252][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.553166][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.560444][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.611559][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.705204][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.770234][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.777497][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.844341][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.868012][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.875229][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.784143][ T13] bridge_slave_1: left allmulticast mode [ 100.796719][ T13] bridge_slave_1: left promiscuous mode [ 100.802543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.837070][ T13] bridge_slave_0: left allmulticast mode [ 100.842837][ T13] bridge_slave_0: left promiscuous mode [ 100.853557][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.157556][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.168523][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.181724][ T13] bond0 (unregistering): Released all slaves [ 101.210853][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.354080][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.398978][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.406222][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.416998][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.424166][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.609191][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.662571][ T13] hsr_slave_0: left promiscuous mode [ 101.678943][ T13] hsr_slave_1: left promiscuous mode [ 101.685179][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.701377][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.710632][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.727608][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.772208][ T13] veth1_macvtap: left promiscuous mode [ 101.778443][ T13] veth0_macvtap: left promiscuous mode [ 101.784252][ T13] veth1_vlan: left promiscuous mode [ 101.790095][ T13] veth0_vlan: left promiscuous mode [ 102.097134][ T6306] loop1: detected capacity change from 0 to 256 [ 102.169914][ T6306] FAT-fs (loop1): Directory bread(block 64) failed [ 102.187008][ T6306] FAT-fs (loop1): Directory bread(block 65) failed [ 102.193655][ T6306] FAT-fs (loop1): Directory bread(block 66) failed [ 102.218550][ T6306] FAT-fs (loop1): Directory bread(block 67) failed [ 102.225193][ T6306] FAT-fs (loop1): Directory bread(block 68) failed [ 102.250510][ T6306] FAT-fs (loop1): Directory bread(block 69) failed [ 102.260102][ T6306] FAT-fs (loop1): Directory bread(block 70) failed [ 102.267930][ T6306] FAT-fs (loop1): Directory bread(block 71) failed [ 102.287562][ T6306] FAT-fs (loop1): Directory bread(block 72) failed [ 102.294164][ T6306] FAT-fs (loop1): Directory bread(block 73) failed [ 102.585957][ T13] team0 (unregistering): Port device team_slave_1 removed [ 102.633151][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.397274][ T5983] veth0_vlan: entered promiscuous mode [ 103.627490][ T5983] veth1_vlan: entered promiscuous mode [ 103.781824][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.841902][ T5983] veth0_macvtap: entered promiscuous mode [ 103.889349][ T5983] veth1_macvtap: entered promiscuous mode [ 104.042129][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.095302][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.180954][ T3574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.229629][ T3574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.269603][ T3574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.306382][ T3574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.366385][ T6022] veth0_vlan: entered promiscuous mode [ 104.435425][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.489440][ T6022] veth1_vlan: entered promiscuous mode [ 104.574647][ T6238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.593376][ T6238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.684448][ T6152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.695742][ T6152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.732898][ T6022] veth0_macvtap: entered promiscuous mode [ 104.880376][ T6022] veth1_macvtap: entered promiscuous mode [ 105.078440][ T6090] veth0_vlan: entered promiscuous mode [ 105.140117][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.164001][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.226457][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.253943][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.289388][ T6090] veth1_vlan: entered promiscuous mode [ 105.321296][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.343367][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.561927][ T6126] veth0_vlan: entered promiscuous mode [ 106.554064][ T6126] veth1_vlan: entered promiscuous mode [ 106.653786][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.679417][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.713494][ T6090] veth0_macvtap: entered promiscuous mode [ 106.885966][ T6090] veth1_macvtap: entered promiscuous mode [ 106.896061][ T6126] veth0_macvtap: entered promiscuous mode [ 106.906984][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.929757][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.956099][ T6126] veth1_macvtap: entered promiscuous mode [ 107.056111][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.088278][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.128869][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.172031][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.188150][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.197429][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.225047][ T6394] loop6: detected capacity change from 0 to 512 [ 107.242289][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.243066][ T6394] EXT4-fs: Ignoring removed nobh option [ 107.285617][ T6034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.296452][ T6034] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.331028][ T6034] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.360669][ T6034] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.362645][ T6394] EXT4-fs error (device loop6): ext4_do_update_inode:5629: inode #3: comm syz.6.21: corrupted inode contents [ 107.398615][ T6034] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.407929][ T6394] EXT4-fs (loop6): Remounting filesystem read-only [ 107.422278][ T6394] Quota error (device loop6): write_blk: dquota write failed [ 107.447909][ T6394] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 107.461832][ T6394] EXT4-fs (loop6): 1 truncate cleaned up [ 107.469909][ T6394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.486387][ T6394] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.785786][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.223438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.266621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.414199][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.479347][ T6022] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.627690][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.730520][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.746520][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.769111][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.776533][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.799217][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 108.820798][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.832334][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.878665][ T10] usb 2-1: Product: syz [ 108.889296][ T10] usb 2-1: Manufacturer: syz [ 108.923304][ T10] usb 2-1: SerialNumber: syz [ 108.944882][ T10] usb 2-1: config 0 descriptor?? [ 109.181935][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.162268][ T6460] loop7: detected capacity change from 0 to 16 [ 110.173683][ T6460] erofs: Unknown parameter '18446744073709551615' [ 111.035525][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 111.072776][ T10] usb 2-1: USB disconnect, device number 4 [ 113.842917][ T6496] pim6reg1: entered promiscuous mode [ 113.849361][ T6496] pim6reg1: entered allmulticast mode [ 113.895547][ T6517] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.246972][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 115.407519][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 115.436192][ T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 115.455521][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.499899][ T24] usb 8-1: Product: syz [ 115.519993][ T24] usb 8-1: Manufacturer: syz [ 115.535333][ T24] usb 8-1: SerialNumber: syz [ 115.563021][ T24] usb 8-1: config 0 descriptor?? [ 115.847558][ T24] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.556253][ T24] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.604518][ T24] usb 8-1: USB disconnect, device number 2 [ 118.129293][ T6644] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.006780][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 121.179935][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 121.212971][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.236657][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.276692][ T10] usb 8-1: Product: syz [ 121.286953][ T10] usb 8-1: Manufacturer: syz [ 121.296258][ T10] usb 8-1: SerialNumber: syz [ 121.335274][ T10] usb 8-1: config 0 descriptor?? [ 121.449976][ T6704] loop5: detected capacity change from 0 to 16 [ 121.459668][ T6704] erofs: Unknown parameter '18446744073709551615' [ 122.020656][ T10] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.467832][ T6728] overlay: Unknown parameter '000000' [ 123.561006][ T10] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.589523][ T10] usb 8-1: USB disconnect, device number 3 [ 124.353856][ T6744] loop6: detected capacity change from 0 to 40427 [ 124.398030][ T6744] F2FS-fs (loop6): invalid crc value [ 124.584907][ T6744] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.601120][ T6744] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 124.859350][ T6022] syz-executor: attempt to access beyond end of device [ 124.859350][ T6022] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 124.874602][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 124.874630][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.874642][ T6022] Call Trace: [ 124.874650][ T6022] [ 124.874659][ T6022] dump_stack_lvl+0x189/0x250 [ 124.874708][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.874737][ T6022] ? __pfx_queue_work_on+0x10/0x10 [ 124.874762][ T6022] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 124.874785][ T6022] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 124.874818][ T6022] f2fs_handle_critical_error+0x37c/0x540 [ 124.874849][ T6022] f2fs_write_end_io+0x886/0xb60 [ 124.874884][ T6022] __submit_merged_bio+0x27a/0x6a0 [ 124.874914][ T6022] __submit_merged_write_cond+0x255/0x530 [ 124.874944][ T6022] f2fs_write_data_pages+0x261d/0x3000 [ 124.874996][ T6022] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.875061][ T6022] ? __page_cache_release+0x8a6/0xbb0 [ 124.875091][ T6022] ? folios_put_refs+0x584/0x670 [ 124.875124][ T6022] ? __lock_acquire+0xab9/0xd20 [ 124.875164][ T6022] ? do_raw_spin_lock+0x121/0x290 [ 124.875194][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 124.875211][ T6022] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.875228][ T6022] do_writepages+0x32e/0x550 [ 124.875262][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 124.875284][ T6022] filemap_fdatawrite+0x199/0x240 [ 124.875307][ T6022] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 124.875382][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 124.875404][ T6022] f2fs_sync_dirty_inodes+0x31f/0x830 [ 124.875440][ T6022] f2fs_write_checkpoint+0x93e/0x2440 [ 124.875457][ T6022] ? __lock_acquire+0xab9/0xd20 [ 124.875509][ T6022] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 124.875589][ T6022] kill_f2fs_super+0x2cc/0x6d0 [ 124.875614][ T6022] ? __pfx_kill_f2fs_super+0x10/0x10 [ 124.875652][ T6022] ? shrinker_free+0x2ce/0x3e0 [ 124.875675][ T6022] deactivate_locked_super+0xbc/0x130 [ 124.875696][ T6022] cleanup_mnt+0x425/0x4c0 [ 124.875714][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.875739][ T6022] task_work_run+0x1d4/0x260 [ 124.875761][ T6022] ? __pfx_task_work_run+0x10/0x10 [ 124.875784][ T6022] ? exit_to_user_mode_loop+0x55/0x4f0 [ 124.875810][ T6022] exit_to_user_mode_loop+0xff/0x4f0 [ 124.875829][ T6022] ? rcu_is_watching+0x15/0xb0 [ 124.875858][ T6022] do_syscall_64+0x2e9/0xfa0 [ 124.875881][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.875896][ T6022] ? clear_bhb_loop+0x60/0xb0 [ 124.875917][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.875933][ T6022] RIP: 0033:0x7f0c1cd909f7 [ 124.875956][ T6022] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 124.875970][ T6022] RSP: 002b:00007ffe2be2c3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.875991][ T6022] RAX: 0000000000000000 RBX: 00007f0c1ce11d7d RCX: 00007f0c1cd909f7 [ 124.876002][ T6022] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2be2c460 [ 124.876012][ T6022] RBP: 00007ffe2be2c460 R08: 0000000000000000 R09: 0000000000000000 [ 124.876021][ T6022] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2be2d4f0 [ 124.876032][ T6022] R13: 00007f0c1ce11d7d R14: 000000000001e775 R15: 00007ffe2be2d530 [ 124.876066][ T6022] [ 124.876073][ T6022] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 125.206732][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 125.206758][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.206769][ T6022] Call Trace: [ 125.206777][ T6022] [ 125.206785][ T6022] dump_stack_lvl+0x189/0x250 [ 125.206822][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.206851][ T6022] ? __pfx_queue_work_on+0x10/0x10 [ 125.206876][ T6022] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 125.206901][ T6022] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.206937][ T6022] f2fs_handle_critical_error+0x37c/0x540 [ 125.206974][ T6022] f2fs_write_end_io+0x886/0xb60 [ 125.207014][ T6022] __submit_merged_bio+0x27a/0x6a0 [ 125.207049][ T6022] __submit_merged_write_cond+0x255/0x530 [ 125.207086][ T6022] f2fs_write_data_pages+0x261d/0x3000 [ 125.207140][ T6022] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.207211][ T6022] ? __page_cache_release+0x8a6/0xbb0 [ 125.207246][ T6022] ? folios_put_refs+0x584/0x670 [ 125.207284][ T6022] ? __lock_acquire+0xab9/0xd20 [ 125.207318][ T6022] ? do_raw_spin_lock+0x121/0x290 [ 125.207351][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 125.207378][ T6022] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.207399][ T6022] do_writepages+0x32e/0x550 [ 125.207437][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 125.207462][ T6022] filemap_fdatawrite+0x199/0x240 [ 125.207490][ T6022] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 125.207571][ T6022] ? do_raw_spin_unlock+0x122/0x240 [ 125.207596][ T6022] f2fs_sync_dirty_inodes+0x31f/0x830 [ 125.207634][ T6022] f2fs_write_checkpoint+0x93e/0x2440 [ 125.207654][ T6022] ? __lock_acquire+0xab9/0xd20 [ 125.207709][ T6022] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 125.207792][ T6022] kill_f2fs_super+0x2cc/0x6d0 [ 125.207821][ T6022] ? __pfx_kill_f2fs_super+0x10/0x10 [ 125.207860][ T6022] ? shrinker_free+0x2ce/0x3e0 [ 125.207887][ T6022] deactivate_locked_super+0xbc/0x130 [ 125.207910][ T6022] cleanup_mnt+0x425/0x4c0 [ 125.207929][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.207956][ T6022] task_work_run+0x1d4/0x260 [ 125.207980][ T6022] ? __pfx_task_work_run+0x10/0x10 [ 125.208007][ T6022] ? exit_to_user_mode_loop+0x55/0x4f0 [ 125.208036][ T6022] exit_to_user_mode_loop+0xff/0x4f0 [ 125.208059][ T6022] ? rcu_is_watching+0x15/0xb0 [ 125.208094][ T6022] do_syscall_64+0x2e9/0xfa0 [ 125.208120][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.208139][ T6022] ? clear_bhb_loop+0x60/0xb0 [ 125.208164][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.208183][ T6022] RIP: 0033:0x7f0c1cd909f7 [ 125.208201][ T6022] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.208217][ T6022] RSP: 002b:00007ffe2be2c3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.208237][ T6022] RAX: 0000000000000000 RBX: 00007f0c1ce11d7d RCX: 00007f0c1cd909f7 [ 125.208251][ T6022] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2be2c460 [ 125.208263][ T6022] RBP: 00007ffe2be2c460 R08: 0000000000000000 R09: 0000000000000000 [ 125.208275][ T6022] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2be2d4f0 [ 125.208288][ T6022] R13: 00007f0c1ce11d7d R14: 000000000001e775 R15: 00007ffe2be2d530 [ 125.208324][ T6022] [ 125.208331][ T6022] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 125.432512][ T6758] loop7: detected capacity change from 0 to 512 [ 125.570514][ T6758] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 125.769470][ T6760] loop7: detected capacity change from 0 to 1024 [ 125.831011][ T6760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.950856][ T6090] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.069504][ T6767] loop7: detected capacity change from 0 to 512 [ 126.081694][ T6767] msdos: Bad value for 'nfs' [ 126.666701][ T6774] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.673899][ T6774] overlayfs: failed to set xattr on upper [ 126.679728][ T6774] overlayfs: ...falling back to redirect_dir=nofollow. [ 126.686768][ T6774] overlayfs: ...falling back to index=off. [ 126.692629][ T6774] overlayfs: ...falling back to uuid=null. [ 126.854275][ T6775] overlay: filesystem on ./bus not supported as upperdir [ 128.376823][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 128.562460][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.611101][ T43] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 128.681146][ T43] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.726127][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.778545][ T43] usb 9-1: Product: syz [ 128.795436][ T43] usb 9-1: Manufacturer: syz [ 128.816634][ T43] usb 9-1: SerialNumber: syz [ 128.828153][ T6805] loop7: detected capacity change from 0 to 512 [ 128.857684][ T6805] EXT4-fs: Ignoring removed nobh option [ 128.896818][ T43] cdc_mbim 9-1:1.0: skipping garbage [ 129.079281][ T6790] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 129.142840][ T6805] EXT4-fs error (device loop7): ext4_do_update_inode:5629: inode #3: comm syz.7.184: corrupted inode contents [ 129.215589][ T6805] EXT4-fs (loop7): Remounting filesystem read-only [ 129.275977][ T6805] Quota error (device loop7): write_blk: dquota write failed [ 129.286222][ T6805] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 129.296983][ T6805] EXT4-fs (loop7): 1 truncate cleaned up [ 129.304704][ T6805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.318824][ T6805] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.946146][ T6790] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 130.004905][ T43] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 130.039946][ T43] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 130.139150][ T6090] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.197167][ T43] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 130.227596][ T43] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 130.270011][ T43] wwan wwan0: port wwan0mbim0 attached [ 130.496601][ T6827] tipc: Failed to remove unknown binding: 66,1,1/0:1513106742/1513106744 [ 130.512595][ T6827] tipc: Failed to remove unknown binding: 66,1,1/0:1513106742/1513106744 [ 131.220527][ T6833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.050909][ T43] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 0a:a0:85:0f:1f:eb [ 132.177867][ T43] usb 9-1: USB disconnect, device number 2 [ 132.258071][ T43] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 132.867472][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873922][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.442533][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 134.118108][ T6853] loop8: detected capacity change from 0 to 1024 [ 134.135537][ T6857] loop6: detected capacity change from 0 to 512 [ 134.163808][ T6857] EXT4-fs: Ignoring removed nobh option [ 134.815149][ T6857] EXT4-fs error (device loop6): ext4_do_update_inode:5629: inode #3: comm syz.6.199: corrupted inode contents [ 134.857870][ T6857] EXT4-fs (loop6): Remounting filesystem read-only [ 134.910473][ T6857] Quota error (device loop6): write_blk: dquota write failed [ 134.920762][ T6853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.932693][ T6857] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 134.965262][ T6857] EXT4-fs (loop6): 1 truncate cleaned up [ 134.982377][ T6853] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.023590][ T6871] loop7: detected capacity change from 0 to 256 [ 135.058010][ T6857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.067716][ T6871] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000001777777777777777777777' [ 135.136298][ T6857] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.489083][ T30] audit: type=1326 audit(1762386449.749:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.556815][ T30] audit: type=1326 audit(1762386449.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.656657][ T30] audit: type=1326 audit(1762386449.769:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.746656][ T30] audit: type=1326 audit(1762386449.769:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.866847][ T30] audit: type=1326 audit(1762386449.769:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.948165][ T30] audit: type=1326 audit(1762386449.769:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 136.978858][ T6022] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.001058][ T6126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.011907][ T30] audit: type=1326 audit(1762386449.779:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 137.106099][ T30] audit: type=1326 audit(1762386449.779:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.7.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2758f6c9 code=0x7ffc0000 [ 137.995351][ T6920] loop8: detected capacity change from 0 to 1024 [ 139.061075][ T6920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.087064][ T6920] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.210024][ T6920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.220713][ T6126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.895663][ T6965] loop5: detected capacity change from 0 to 8192 [ 144.303717][ T6986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.761981][ T7000] loop6: detected capacity change from 0 to 512 [ 144.817669][ T7000] EXT4-fs: Ignoring removed nobh option [ 144.901045][ T7000] EXT4-fs error (device loop6): ext4_do_update_inode:5629: inode #3: comm syz.6.233: corrupted inode contents [ 145.007815][ T7000] EXT4-fs (loop6): Remounting filesystem read-only [ 145.069621][ T7000] __quota_error: 14 callbacks suppressed [ 145.069643][ T7000] Quota error (device loop6): write_blk: dquota write failed [ 145.184573][ T7000] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 145.223909][ T7000] EXT4-fs (loop6): 1 truncate cleaned up [ 145.268950][ T7000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.285483][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.294359][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.305429][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.314096][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.323239][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.369876][ T7000] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.528615][ T7012] loop7: detected capacity change from 0 to 8192 [ 146.613566][ T7012] FAT-fs (loop7): bogus sectors per cluster 7 [ 146.674972][ T7012] FAT-fs (loop7): Can't find a valid FAT filesystem [ 146.833885][ T7032] loop8: detected capacity change from 0 to 16 [ 146.845020][ T7032] erofs: Unknown parameter '18446744073709551615' [ 147.408398][ T5838] Bluetooth: hci5: command tx timeout [ 147.698208][ T6022] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.955624][ T7017] chnl_net:caif_netlink_parms(): no params data found [ 148.378121][ T7055] loop7: detected capacity change from 0 to 128 [ 148.725635][ T7065] Zero length message leads to an empty skb [ 149.078541][ T7073] process 'syz.6.245' launched './file1' with NULL argv: empty string added [ 149.498560][ T5838] Bluetooth: hci5: command tx timeout [ 149.632499][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.673914][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.737704][ T7017] bridge_slave_0: entered allmulticast mode [ 149.797180][ T7017] bridge_slave_0: entered promiscuous mode [ 149.819007][ T7074] bridge0: port 3(syz_tun) entered blocking state [ 149.825712][ T7074] bridge0: port 3(syz_tun) entered disabled state [ 149.832766][ T7074] syz_tun: entered allmulticast mode [ 149.840864][ T7074] syz_tun: entered promiscuous mode [ 149.846929][ T7074] bridge0: port 3(syz_tun) entered blocking state [ 149.853664][ T7074] bridge0: port 3(syz_tun) entered forwarding state [ 149.905380][ T7081] loop8: detected capacity change from 0 to 1024 [ 150.041841][ T7081] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.202311][ T6126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.261916][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.325469][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.363590][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.394139][ T7017] bridge_slave_1: entered allmulticast mode [ 151.299160][ T7017] bridge_slave_1: entered promiscuous mode [ 151.556459][ T7102] loop6: detected capacity change from 0 to 512 [ 151.578919][ T7102] EXT4-fs: Ignoring removed nobh option [ 151.746258][ T7102] EXT4-fs error (device loop6): ext4_do_update_inode:5629: inode #3: comm syz.6.250: corrupted inode contents [ 151.804678][ T7102] EXT4-fs (loop6): Remounting filesystem read-only [ 151.838095][ T7102] Quota error (device loop6): write_blk: dquota write failed [ 151.845643][ T7102] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 151.893800][ T7102] EXT4-fs (loop6): 1 truncate cleaned up [ 151.908608][ T7102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.956816][ T7102] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.034862][ T5835] Bluetooth: hci5: command tx timeout [ 152.774936][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.104075][ T7017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.170075][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.349159][ T6022] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.397204][ T7017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.046999][ T5835] Bluetooth: hci5: command tx timeout [ 154.794780][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.230472][ T7017] team0: Port device team_slave_0 added [ 155.285277][ T7017] team0: Port device team_slave_1 added [ 155.432049][ T7134] loop6: detected capacity change from 0 to 256 [ 155.503115][ T7134] exfat: Unknown parameter 'FmAe?wH~k|ce:aF]$cas%N:{ S֯bPw?8ԏ0x000000000000000000000000000000000000003' [ 155.576032][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.608322][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.915109][ T7017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.443545][ T7127] loop5: detected capacity change from 0 to 40427 [ 156.504387][ T7127] F2FS-fs (loop5): Image doesn't support compression [ 156.527418][ T7127] F2FS-fs (loop5): build fault injection rate: 684 [ 156.533977][ T7127] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 156.615465][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.636999][ T7127] F2FS-fs (loop5): invalid crc value [ 156.653158][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.767778][ T7017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.953599][ T7127] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.973675][ T7127] F2FS-fs (loop5): Start checkpoint disabled! [ 156.999641][ T7127] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 157.038271][ T7127] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 158.367245][ T13] bridge_slave_1: left allmulticast mode [ 158.376392][ T13] bridge_slave_1: left promiscuous mode [ 158.412243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.441952][ T13] bridge_slave_0: left allmulticast mode [ 158.449283][ T13] bridge_slave_0: left promiscuous mode [ 158.469358][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.497771][ T7200] loop8: detected capacity change from 0 to 128 [ 162.551499][ T7200] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 162.615530][ T7200] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.641803][ T7200] ext2 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.694449][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.741292][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.759711][ T13] bond0 (unregistering): Released all slaves [ 162.979434][ T3574] kworker/u8:7: attempt to access beyond end of device [ 162.979434][ T3574] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.017452][ T3574] CPU: 0 UID: 0 PID: 3574 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 163.017481][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.017494][ T3574] Workqueue: writeback wb_workfn (flush-7:5) [ 163.017525][ T3574] Call Trace: [ 163.017533][ T3574] [ 163.017542][ T3574] dump_stack_lvl+0x189/0x250 [ 163.017577][ T3574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.017606][ T3574] ? __pfx_queue_work_on+0x10/0x10 [ 163.017631][ T3574] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 163.017657][ T3574] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.017694][ T3574] f2fs_handle_critical_error+0x37c/0x540 [ 163.017731][ T3574] f2fs_write_end_io+0x886/0xb60 [ 163.017768][ T3574] __submit_merged_bio+0x27a/0x6a0 [ 163.017804][ T3574] __submit_merged_write_cond+0x255/0x530 [ 163.017840][ T3574] f2fs_write_data_pages+0x261d/0x3000 [ 163.017856][ T3574] ? kasan_quarantine_put+0xdd/0x220 [ 163.017919][ T3574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.017954][ T3574] ? trace_cfg80211_return_bss+0x7a/0x1f0 [ 163.018060][ T3574] ? unwind_next_frame+0xa5/0x2390 [ 163.018083][ T3574] ? unwind_next_frame+0x19ae/0x2390 [ 163.018112][ T3574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.018133][ T3574] do_writepages+0x32e/0x550 [ 163.018165][ T3574] ? reacquire_held_locks+0x127/0x1d0 [ 163.018192][ T3574] ? writeback_sb_inodes+0x3bc/0x1950 [ 163.018225][ T3574] __writeback_single_inode+0x143/0x12d0 [ 163.018250][ T3574] ? do_raw_spin_unlock+0x122/0x240 [ 163.018276][ T3574] writeback_sb_inodes+0x984/0x1950 [ 163.018332][ T3574] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 163.018401][ T3574] ? rcu_is_watching+0x15/0xb0 [ 163.018440][ T3574] wb_writeback+0x43b/0xaf0 [ 163.018473][ T3574] ? queue_io+0x3b1/0x590 [ 163.018499][ T3574] ? __pfx_wb_writeback+0x10/0x10 [ 163.018526][ T3574] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.018552][ T3574] wb_workfn+0x409/0xef0 [ 163.018584][ T3574] ? __pfx_wb_workfn+0x10/0x10 [ 163.018608][ T3574] ? __lock_acquire+0xab9/0xd20 [ 163.018639][ T3574] ? process_one_work+0x868/0x15d0 [ 163.018670][ T3574] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.018697][ T3574] ? process_one_work+0x868/0x15d0 [ 163.018719][ T3574] process_one_work+0x94a/0x15d0 [ 163.018741][ T3574] ? __lock_acquire+0xab9/0xd20 [ 163.018788][ T3574] ? __pfx_process_one_work+0x10/0x10 [ 163.018827][ T3574] ? assign_work+0x3a1/0x410 [ 163.018857][ T3574] worker_thread+0x9b0/0xee0 [ 163.018912][ T3574] kthread+0x711/0x8a0 [ 163.018934][ T3574] ? __pfx_worker_thread+0x10/0x10 [ 163.018958][ T3574] ? __pfx_kthread+0x10/0x10 [ 163.018979][ T3574] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.019007][ T3574] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.019030][ T3574] ? __pfx_kthread+0x10/0x10 [ 163.019049][ T3574] ret_from_fork+0x599/0xb30 [ 163.019076][ T3574] ? __pfx_ret_from_fork+0x10/0x10 [ 163.019111][ T3574] ? __switch_to_asm+0x39/0x70 [ 163.019129][ T3574] ? __switch_to_asm+0x33/0x70 [ 163.019146][ T3574] ? __pfx_kthread+0x10/0x10 [ 163.019165][ T3574] ret_from_fork_asm+0x1a/0x30 [ 163.019204][ T3574] [ 163.019707][ T3574] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 163.022333][ T7017] hsr_slave_0: entered promiscuous mode [ 163.346338][ T7017] hsr_slave_1: entered promiscuous mode [ 163.463752][ T6126] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.797026][ T7209] xt_CONNSECMARK: invalid mode: 0 [ 164.352909][ T7222] loop7: detected capacity change from 0 to 512 [ 165.154078][ T7222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.196900][ T7222] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.964058][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 166.082701][ T5953] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 166.154103][ T6090] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.237159][ T13] hsr_slave_0: left promiscuous mode [ 166.237160][ T5953] usb 9-1: Using ep0 maxpacket: 32 [ 166.277674][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.316690][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.326862][ T13] hsr_slave_1: left promiscuous mode [ 166.333069][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.348320][ T5953] usb 9-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 166.355278][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.375330][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.391392][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.405849][ T5953] usb 9-1: config 0 descriptor?? [ 166.406631][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.574354][ T13] veth1_macvtap: left promiscuous mode [ 166.622822][ T13] veth0_macvtap: left promiscuous mode [ 166.659672][ T13] veth1_vlan: left promiscuous mode [ 166.719623][ T13] veth0_vlan: left promiscuous mode [ 167.423357][ T5953] logitech-hidpp-device 0003:046D:C082.0001: unknown main item tag 0x0 [ 167.441297][ T5953] logitech-hidpp-device 0003:046D:C082.0001: unknown main item tag 0x0 [ 167.590078][ T5953] logitech-hidpp-device 0003:046D:C082.0001: unknown main item tag 0x0 [ 167.598506][ T5953] logitech-hidpp-device 0003:046D:C082.0001: unknown main item tag 0x0 [ 167.607041][ T5953] logitech-hidpp-device 0003:046D:C082.0001: unknown main item tag 0x0 [ 167.627104][ T5953] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.8-1/input0 [ 167.651018][ T5953] usb 9-1: USB disconnect, device number 3 [ 167.966987][ T5912] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 168.006925][ T7262] fido_id[7262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 168.146695][ T5912] usb 8-1: Using ep0 maxpacket: 32 [ 168.159613][ T5912] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 168.176746][ T5912] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 168.211383][ T5912] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.242079][ T5912] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 168.268784][ T5912] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 168.278023][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.297097][ T5912] usb 8-1: Product: syz [ 168.306950][ T5912] usb 8-1: Manufacturer: syz [ 168.311676][ T5912] usb 8-1: SerialNumber: syz [ 168.342466][ T5912] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 168.362434][ T5912] imon 8-1:155.0: unable to initialize intf0, err -19 [ 168.372444][ T5912] imon:imon_probe: failed to initialize context! [ 168.387371][ T5912] imon 8-1:155.0: unable to register, err -19 [ 168.463601][ T7257] loop5: detected capacity change from 0 to 40427 [ 168.528863][ T7266] loop8: detected capacity change from 0 to 16 [ 168.540265][ T7266] erofs: Unknown parameter '18446744073709551615' [ 168.694418][ T7257] F2FS-fs (loop5): Invalid log_blocksize (0), supports only 12 [ 168.861405][ T7257] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 169.146693][ T7257] F2FS-fs (loop5): invalid crc value [ 169.313356][ T7257] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.334527][ T7273] loop8: detected capacity change from 0 to 1024 [ 169.357495][ T7257] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 169.412115][ T7257] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.433110][ T7273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.462849][ T13] team0 (unregistering): Port device team_slave_1 removed [ 169.472292][ T7257] syz.5.281: attempt to access beyond end of device [ 169.472292][ T7257] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 169.524280][ T13] team0 (unregistering): Port device team_slave_0 removed [ 169.539081][ T7280] loop6: detected capacity change from 0 to 256 [ 169.561778][ T7257] syz.5.281: attempt to access beyond end of device [ 169.561778][ T7257] loop5: rw=2049, sector=77960, nr_sectors = 376 limit=40427 [ 169.563477][ T7273] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.284: Allocating blocks 497-513 which overlap fs metadata [ 169.616354][ T7257] syz.5.281: attempt to access beyond end of device [ 169.616354][ T7257] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 169.635822][ T7280] FAT-fs (loop6): Directory bread(block 64) failed [ 169.657092][ T7272] EXT4-fs (loop8): pa ffff88807767a488: logic 1, phys. 193, len 20 [ 169.665274][ T7272] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 1, pa_free 2 [ 169.679543][ T7280] FAT-fs (loop6): Directory bread(block 65) failed [ 169.697719][ T7280] FAT-fs (loop6): Directory bread(block 66) failed [ 169.715544][ T5983] syz-executor: attempt to access beyond end of device [ 169.715544][ T5983] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.715935][ T7280] FAT-fs (loop6): Directory bread(block 67) failed [ 169.738603][ T7280] FAT-fs (loop6): Directory bread(block 68) failed [ 169.745159][ T7280] FAT-fs (loop6): Directory bread(block 69) failed [ 169.753594][ T7280] FAT-fs (loop6): Directory bread(block 70) failed [ 169.760678][ T7280] FAT-fs (loop6): Directory bread(block 71) failed [ 169.766301][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 169.766327][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.766339][ T5983] Call Trace: [ 169.766347][ T5983] [ 169.766355][ T5983] dump_stack_lvl+0x189/0x250 [ 169.766393][ T5983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.766421][ T5983] ? __pfx_queue_work_on+0x10/0x10 [ 169.766445][ T5983] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 169.766469][ T5983] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.766507][ T5983] f2fs_handle_critical_error+0x37c/0x540 [ 169.766544][ T5983] f2fs_write_end_io+0x886/0xb60 [ 169.766588][ T5983] __submit_merged_bio+0x27a/0x6a0 [ 169.766624][ T5983] __submit_merged_write_cond+0x255/0x530 [ 169.766660][ T5983] f2fs_write_data_pages+0x261d/0x3000 [ 169.766720][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.766755][ T5983] ? is_bpf_text_address+0x292/0x2b0 [ 169.766775][ T5983] ? is_bpf_text_address+0x26/0x2b0 [ 169.766829][ T5983] ? stack_trace_save+0x9c/0xe0 [ 169.766850][ T5983] ? __pfx_stack_trace_save+0x10/0x10 [ 169.766908][ T5983] ? __lock_acquire+0xab9/0xd20 [ 169.766952][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.766971][ T5983] do_writepages+0x32e/0x550 [ 169.767012][ T5983] ? do_raw_spin_unlock+0x122/0x240 [ 169.767038][ T5983] filemap_fdatawrite+0x199/0x240 [ 169.767065][ T5983] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 169.767150][ T5983] ? do_raw_spin_unlock+0x122/0x240 [ 169.767181][ T5983] f2fs_sync_dirty_inodes+0x31f/0x830 [ 169.767217][ T5983] f2fs_write_checkpoint+0x93e/0x2440 [ 169.767235][ T5983] ? __lock_acquire+0xab9/0xd20 [ 169.767286][ T5983] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 169.767369][ T5983] kill_f2fs_super+0x2cc/0x6d0 [ 169.767398][ T5983] ? __pfx_kill_f2fs_super+0x10/0x10 [ 169.767440][ T5983] ? shrinker_free+0x2ce/0x3e0 [ 169.767467][ T5983] deactivate_locked_super+0xbc/0x130 [ 169.767491][ T5983] cleanup_mnt+0x425/0x4c0 [ 169.767510][ T5983] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.767539][ T5983] task_work_run+0x1d4/0x260 [ 169.767563][ T5983] ? __pfx_task_work_run+0x10/0x10 [ 169.767589][ T5983] ? exit_to_user_mode_loop+0x55/0x4f0 [ 169.767618][ T5983] exit_to_user_mode_loop+0xff/0x4f0 [ 169.767641][ T5983] ? rcu_is_watching+0x15/0xb0 [ 169.767674][ T5983] do_syscall_64+0x2e9/0xfa0 [ 169.767705][ T5983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.767724][ T5983] ? clear_bhb_loop+0x60/0xb0 [ 169.767748][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.767766][ T5983] RIP: 0033:0x7fbba51909f7 [ 169.767784][ T5983] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 169.767802][ T5983] RSP: 002b:00007ffca28f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.767822][ T5983] RAX: 0000000000000000 RBX: 00007fbba5211d7d RCX: 00007fbba51909f7 [ 169.767835][ T5983] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca28f80e0 [ 169.767846][ T5983] RBP: 00007ffca28f80e0 R08: 0000000000000000 R09: 0000000000000000 [ 169.767858][ T5983] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca28f9170 [ 169.767870][ T5983] R13: 00007fbba5211d7d R14: 00000000000296a7 R15: 00007ffca28f91b0 [ 169.767906][ T5983] [ 169.788221][ T5983] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 169.802338][ T7280] FAT-fs (loop6): Directory bread(block 72) failed [ 170.104021][ T7280] FAT-fs (loop6): Directory bread(block 73) failed [ 170.189255][ T6126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.309129][ T7280] syz.6.285: attempt to access beyond end of device [ 170.309129][ T7280] loop6: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 170.341572][ T7280] syz.6.285: attempt to access beyond end of device [ 170.341572][ T7280] loop6: rw=2049, sector=1288, nr_sectors = 32 limit=256 [ 170.361953][ T7280] syz.6.285: attempt to access beyond end of device [ 170.361953][ T7280] loop6: rw=2049, sector=1352, nr_sectors = 32 limit=256 [ 170.382686][ T7280] syz.6.285: attempt to access beyond end of device [ 170.382686][ T7280] loop6: rw=2049, sector=1448, nr_sectors = 32 limit=256 [ 170.396814][ T7280] syz.6.285: attempt to access beyond end of device [ 170.396814][ T7280] loop6: rw=2049, sector=1512, nr_sectors = 32 limit=256 [ 170.423270][ T7280] syz.6.285: attempt to access beyond end of device [ 170.423270][ T7280] loop6: rw=2049, sector=1576, nr_sectors = 32 limit=256 [ 170.704881][ T7286] loop5: detected capacity change from 0 to 1024 [ 170.733193][ T5910] usb 8-1: USB disconnect, device number 4 [ 170.795075][ T7286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.136944][ T7282] netlink: 'syz.8.287': attribute type 12 has an invalid length. [ 171.200327][ T7286] overlay: filesystem on ./file0 not supported as upperdir [ 171.589311][ T7017] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 171.665993][ T7017] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 171.713179][ T7302] 9pnet_fd: Insufficient options for proto=fd [ 171.731270][ T7302] 9pnet_fd: Insufficient options for proto=fd [ 171.745914][ T7017] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 171.847440][ T7017] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 172.002652][ T7291] loop7: detected capacity change from 0 to 40427 [ 172.585494][ T7291] F2FS-fs (loop7): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 172.625421][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 172.636694][ T7291] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 172.670717][ T7291] F2FS-fs (loop7): invalid crc value [ 172.783679][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.806710][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 172.818837][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 172.865566][ T5897] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.870009][ T7291] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 172.889139][ T7017] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.902885][ T5983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.924906][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.946888][ T7291] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 172.952178][ T5897] usb 7-1: Product: syz [ 172.960857][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.968072][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.975696][ T7291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 172.994512][ T5897] usb 7-1: Manufacturer: syz [ 173.029809][ T5897] usb 7-1: SerialNumber: syz [ 173.058636][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.063809][ T5897] usb 7-1: config 0 descriptor?? [ 173.065835][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.108058][ T30] audit: type=1804 audit(1762386486.359:24): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.289" name="/newroot/46/file2/bus" dev="loop7" ino=14 res=1 errno=0 [ 173.138826][ T7313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 173.228166][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 173.228194][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.228204][ T6090] Call Trace: [ 173.228211][ T6090] [ 173.228219][ T6090] dump_stack_lvl+0x189/0x250 [ 173.228255][ T6090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.228283][ T6090] ? __pfx_queue_work_on+0x10/0x10 [ 173.228305][ T6090] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 173.228328][ T6090] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.228361][ T6090] f2fs_handle_critical_error+0x37c/0x540 [ 173.228394][ T6090] f2fs_write_end_io+0x886/0xb60 [ 173.228432][ T6090] __submit_merged_bio+0x27a/0x6a0 [ 173.228466][ T6090] __submit_merged_write_cond+0x255/0x530 [ 173.228504][ T6090] f2fs_write_data_pages+0x261d/0x3000 [ 173.228521][ T6090] ? __lock_acquire+0xab9/0xd20 [ 173.228580][ T6090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.228645][ T6090] ? __mod_zone_page_state+0xd7/0x140 [ 173.228684][ T6090] ? folios_put_refs+0x58b/0x670 [ 173.228717][ T6090] ? __pfx_folios_put_refs+0x10/0x10 [ 173.228746][ T6090] ? rcu_is_watching+0x15/0xb0 [ 173.228783][ T6090] ? __lock_acquire+0xab9/0xd20 [ 173.228825][ T6090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.228845][ T6090] do_writepages+0x32e/0x550 [ 173.228884][ T6090] ? do_raw_spin_unlock+0x122/0x240 [ 173.228909][ T6090] filemap_fdatawrite+0x199/0x240 [ 173.228937][ T6090] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 173.229013][ T6090] ? do_raw_spin_unlock+0x122/0x240 [ 173.229038][ T6090] f2fs_sync_dirty_inodes+0x31f/0x830 [ 173.229073][ T6090] f2fs_write_checkpoint+0x93e/0x2440 [ 173.229091][ T6090] ? stack_depot_save_flags+0x40/0x860 [ 173.229137][ T6090] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.229197][ T6090] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 173.229216][ T6090] ? kfree+0x19a/0x6d0 [ 173.229253][ T6090] kill_f2fs_super+0x2cc/0x6d0 [ 173.229279][ T6090] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.229316][ T6090] ? shrinker_free+0x2ce/0x3e0 [ 173.229343][ T6090] deactivate_locked_super+0xbc/0x130 [ 173.229368][ T6090] cleanup_mnt+0x425/0x4c0 [ 173.229388][ T6090] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.229416][ T6090] task_work_run+0x1d4/0x260 [ 173.229440][ T6090] ? __pfx_task_work_run+0x10/0x10 [ 173.229466][ T6090] ? exit_to_user_mode_loop+0x55/0x4f0 [ 173.229493][ T6090] exit_to_user_mode_loop+0xff/0x4f0 [ 173.229517][ T6090] ? rcu_is_watching+0x15/0xb0 [ 173.229549][ T6090] do_syscall_64+0x2e9/0xfa0 [ 173.229574][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.229593][ T6090] ? clear_bhb_loop+0x60/0xb0 [ 173.229614][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.229632][ T6090] RIP: 0033:0x7f3b275909f7 [ 173.229649][ T6090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 173.229665][ T6090] RSP: 002b:00007fff5b0bd648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.229686][ T6090] RAX: 0000000000000000 RBX: 00007f3b27611d7d RCX: 00007f3b275909f7 [ 173.229700][ T6090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5b0bd700 [ 173.229710][ T6090] RBP: 00007fff5b0bd700 R08: 0000000000000000 R09: 0000000000000000 [ 173.229721][ T6090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5b0be790 [ 173.229733][ T6090] R13: 00007f3b27611d7d R14: 000000000002a42d R15: 00007fff5b0be7d0 [ 173.229770][ T6090] [ 173.231318][ T6090] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 173.395796][ T7298] loop8: detected capacity change from 0 to 40427 [ 173.611621][ T7298] F2FS-fs (loop8): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 173.632281][ T7298] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 173.672482][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 173.672522][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.672534][ T6090] Call Trace: [ 173.672542][ T6090] [ 173.672550][ T6090] dump_stack_lvl+0x189/0x250 [ 173.672582][ T6090] ? preempt_schedule_thunk+0x16/0x30 [ 173.672609][ T6090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.672638][ T6090] ? __pfx_queue_work_on+0x10/0x10 [ 173.672662][ T6090] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 173.672687][ T6090] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.672723][ T6090] f2fs_handle_critical_error+0x37c/0x540 [ 173.672758][ T6090] f2fs_write_end_io+0x886/0xb60 [ 173.672797][ T6090] __submit_merged_bio+0x27a/0x6a0 [ 173.672832][ T6090] __submit_merged_write_cond+0x255/0x530 [ 173.672870][ T6090] f2fs_write_data_pages+0x261d/0x3000 [ 173.672888][ T6090] ? __lock_acquire+0xab9/0xd20 [ 173.672947][ T6090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.673012][ T6090] ? __mod_zone_page_state+0xd7/0x140 [ 173.673053][ T6090] ? folios_put_refs+0x58b/0x670 [ 173.673088][ T6090] ? __pfx_folios_put_refs+0x10/0x10 [ 173.673110][ T6090] ? rcu_is_watching+0x15/0xb0 [ 173.673147][ T6090] ? __lock_acquire+0xab9/0xd20 [ 173.673189][ T6090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.673209][ T6090] do_writepages+0x32e/0x550 [ 173.673248][ T6090] ? do_raw_spin_unlock+0x122/0x240 [ 173.673272][ T6090] filemap_fdatawrite+0x199/0x240 [ 173.673300][ T6090] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 173.673378][ T6090] ? do_raw_spin_unlock+0x122/0x240 [ 173.673403][ T6090] f2fs_sync_dirty_inodes+0x31f/0x830 [ 173.673440][ T6090] f2fs_write_checkpoint+0x93e/0x2440 [ 173.673459][ T6090] ? stack_depot_save_flags+0x40/0x860 [ 173.673517][ T6090] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.673580][ T6090] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 173.673601][ T6090] ? kfree+0x19a/0x6d0 [ 173.673639][ T6090] kill_f2fs_super+0x2cc/0x6d0 [ 173.673667][ T6090] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.673706][ T6090] ? shrinker_free+0x2ce/0x3e0 [ 173.673733][ T6090] deactivate_locked_super+0xbc/0x130 [ 173.673757][ T6090] cleanup_mnt+0x425/0x4c0 [ 173.673777][ T6090] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.673805][ T6090] task_work_run+0x1d4/0x260 [ 173.673829][ T6090] ? __pfx_task_work_run+0x10/0x10 [ 173.673855][ T6090] ? exit_to_user_mode_loop+0x55/0x4f0 [ 173.673884][ T6090] exit_to_user_mode_loop+0xff/0x4f0 [ 173.673907][ T6090] ? rcu_is_watching+0x15/0xb0 [ 173.673939][ T6090] do_syscall_64+0x2e9/0xfa0 [ 173.673966][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.673985][ T6090] ? clear_bhb_loop+0x60/0xb0 [ 173.674009][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.674027][ T6090] RIP: 0033:0x7f3b275909f7 [ 173.674044][ T6090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 173.674060][ T6090] RSP: 002b:00007fff5b0bd648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.674080][ T6090] RAX: 0000000000000000 RBX: 00007f3b27611d7d RCX: 00007f3b275909f7 [ 173.674093][ T6090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5b0bd700 [ 173.674105][ T6090] RBP: 00007fff5b0bd700 R08: 0000000000000000 R09: 0000000000000000 [ 173.674117][ T6090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5b0be790 [ 173.674129][ T6090] R13: 00007f3b27611d7d R14: 000000000002a42d R15: 00007fff5b0be7d0 [ 173.674163][ T6090] [ 173.839854][ T7298] F2FS-fs (loop8): Image doesn't support compression [ 173.845249][ T6090] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 173.883831][ T7298] F2FS-fs (loop8): build fault injection rate: 690 [ 174.041851][ T7298] F2FS-fs (loop8): build fault injection type: 0x35f7 [ 174.093268][ T7298] F2FS-fs (loop8): invalid crc value [ 174.385302][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.402649][ T7298] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.443012][ T7298] F2FS-fs (loop8): Start checkpoint disabled! [ 174.473735][ T7298] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 174.555048][ T7347] loop5: detected capacity change from 0 to 16 [ 174.565853][ T7347] erofs: Unknown parameter '18446744073709551615' [ 175.214106][ T7325] usb 7-1: USB disconnect, device number 2 [ 176.248437][ T7368] xt_bpf: check failed: parse error [ 180.297458][ T7377] capability: warning: `syz.6.299' uses deprecated v2 capabilities in a way that may be insecure [ 181.142650][ T7386] 9pnet_fd: Insufficient options for proto=fd [ 181.229599][ T7017] veth0_vlan: entered promiscuous mode [ 181.244738][ T7017] veth1_vlan: entered promiscuous mode [ 181.337847][ T5941] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 181.558419][ T5941] usb 9-1: Using ep0 maxpacket: 32 [ 181.911493][ T5941] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 181.923426][ T5941] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 181.936405][ T5941] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.958467][ T5941] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 182.028932][ T7017] veth0_macvtap: entered promiscuous mode [ 182.040154][ T7017] veth1_macvtap: entered promiscuous mode [ 182.075207][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.102543][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.157471][ T6238] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.181108][ T6238] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.212360][ T5941] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 182.223455][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.241782][ T6238] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.242743][ T5941] usb 9-1: Product: syz [ 182.256179][ T5941] usb 9-1: Manufacturer: syz [ 182.272745][ T5941] usb 9-1: SerialNumber: syz [ 183.065660][ T5941] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 183.107365][ T5941] imon 9-1:155.0: unable to initialize intf0, err -19 [ 183.114174][ T5941] imon:imon_probe: failed to initialize context! [ 183.186647][ T5941] imon 9-1:155.0: unable to register, err -19 [ 183.267573][ T6238] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.607658][ T5941] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 183.776652][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 183.790677][ T5941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 183.835540][ T5941] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.855704][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.876455][ T5941] usb 7-1: Product: syz [ 183.888585][ T5941] usb 7-1: Manufacturer: syz [ 183.903531][ T5941] usb 7-1: SerialNumber: syz [ 183.933672][ T5941] usb 7-1: config 0 descriptor?? [ 183.952066][ T7386] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 184.184783][ T5941] usb 7-1: USB disconnect, device number 3 [ 184.197297][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.228232][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.369414][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.406410][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.087580][ T7435] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 185.217127][ T1211] usb 9-1: USB disconnect, device number 4 [ 185.380962][ T7443] 9pnet_fd: Insufficient options for proto=fd [ 185.418405][ T7443] 9pnet_fd: Insufficient options for proto=fd [ 186.846794][ T5953] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 187.019815][ T5953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.049185][ T5953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.101799][ T5953] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 187.112706][ T7469] loop6: detected capacity change from 0 to 512 [ 187.126745][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.180131][ T7469] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.317: dx entry: limit 0 != root limit 125 [ 187.205112][ T5953] usb 10-1: config 0 descriptor?? [ 187.270370][ T7469] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.317: Corrupt directory, running e2fsck is recommended [ 187.350072][ T7469] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 187.394759][ T7469] EXT4-fs error (device loop6): ext4_iget_extra_inode:5072: inode #15: comm syz.6.317: corrupted in-inode xattr: invalid ea_ino [ 187.450776][ T7469] EXT4-fs (loop6): Remounting filesystem read-only [ 187.460822][ T7469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.489602][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.026711][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 188.095272][ T5953] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 188.113162][ T5953] usb 10-1: USB disconnect, device number 2 [ 188.197821][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 188.207908][ T9] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 188.234733][ T9] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 188.260521][ T9] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.300386][ T9] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.325182][ T9] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 188.362495][ T9] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 188.379338][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.394795][ T9] usb 7-1: Product: syz [ 188.404423][ T9] usb 7-1: Manufacturer: syz [ 188.414424][ T9] usb 7-1: SerialNumber: syz [ 188.514222][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 188.577077][ T9] imon 7-1:155.0: unable to initialize intf0, err -90 [ 188.626692][ T9] imon:imon_probe: failed to initialize context! [ 188.726653][ T7497] bridge_slave_1: left allmulticast mode [ 188.732409][ T7497] bridge_slave_1: left promiscuous mode [ 188.739313][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.599404][ T9] imon 7-1:155.0: unable to register, err -19 [ 189.694922][ T7497] bridge_slave_0: left allmulticast mode [ 189.702164][ T7497] bridge_slave_0: left promiscuous mode [ 189.709054][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.921998][ T7506] serio: Serial port ttyS3 [ 190.792730][ T7527] Illegal XDP return value 4294967274 on prog (id 118) dev N/A, expect packet loss! [ 190.982537][ T5941] usb 7-1: USB disconnect, device number 4 [ 191.014616][ T7536] loop8: detected capacity change from 0 to 1024 [ 191.054978][ T7536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.255854][ T7544] loop5: detected capacity change from 0 to 4096 [ 191.280444][ T7544] EXT4-fs (loop5): Test dummy encryption mode enabled [ 191.323518][ T7544] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 191.350352][ T7544] System zones: 0-5 [ 191.378777][ T7544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.321443][ T5983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.407318][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414705][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.351896][ T7606] loop5: detected capacity change from 0 to 512 [ 195.467821][ T5941] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 195.528818][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.592973][ T7606] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.669500][ T5941] usb 10-1: Using ep0 maxpacket: 32 [ 195.692260][ T7606] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz.5.345: invalid size [ 195.698520][ T5941] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 195.736727][ T5941] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 195.754272][ T7606] EXT4-fs (loop5): Remounting filesystem read-only [ 195.771176][ T5941] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.807352][ T5941] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.820468][ T5941] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 195.854642][ T5983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.864940][ T1166] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 195.901106][ T5941] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 195.916877][ T1166] Quota error (device loop5): write_blk: dquota write failed [ 195.926875][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.939151][ T1166] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 195.951700][ T5941] usb 10-1: Product: syz [ 195.955977][ T5941] usb 10-1: Manufacturer: syz [ 195.971139][ T5941] usb 10-1: SerialNumber: syz [ 196.028589][ T5941] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 196.061741][ T5941] imon 10-1:155.0: unable to initialize intf0, err -90 [ 196.086710][ T5941] imon:imon_probe: failed to initialize context! [ 196.116540][ T5941] imon 10-1:155.0: unable to register, err -19 [ 196.197662][ T7621] xt_hashlimit: size too large, truncated to 1048576 [ 198.767372][ T5941] usb 10-1: USB disconnect, device number 3 [ 199.036339][ T7638] syzkaller0: entered promiscuous mode [ 199.106734][ T7638] syzkaller0: entered allmulticast mode [ 200.839926][ T7656] loop5: detected capacity change from 0 to 256 [ 200.978358][ T7656] vfat: Unknown parameter 'S4H*i b ٛnv9I0000000000000000000001118446744073709551615' [ 203.197014][ T1211] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 203.293899][ T6126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.364310][ T1211] usb 8-1: Using ep0 maxpacket: 8 [ 203.382251][ T1211] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.407547][ T1211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.425903][ T1211] usb 8-1: Product: syz [ 203.433643][ T1211] usb 8-1: Manufacturer: syz [ 203.442759][ T1211] usb 8-1: SerialNumber: syz [ 203.470664][ T1211] usb 8-1: config 0 descriptor?? [ 203.710757][ T1211] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.480591][ T1211] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 204.490482][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 204.667657][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 204.687982][ T5928] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 204.706713][ T5928] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 204.736917][ T5928] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.756625][ T5928] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.774199][ T5928] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 204.809737][ T5928] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 204.825308][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.843768][ T5928] usb 6-1: Product: syz [ 204.849353][ T5928] usb 6-1: Manufacturer: syz [ 204.864771][ T5928] usb 6-1: SerialNumber: syz [ 204.881135][ T5928] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 204.896705][ T5928] imon 6-1:155.0: unable to initialize intf0, err -90 [ 204.913817][ T5928] imon:imon_probe: failed to initialize context! [ 204.924286][ T5928] imon 6-1:155.0: unable to register, err -19 [ 205.479180][ T7693] tipc: Enabling of bearer rejected, failed to enable media [ 206.010713][ T797] usb 8-1: USB disconnect, device number 5 [ 206.033801][ T7724] netlink: 232 bytes leftover after parsing attributes in process `syz.6.366'. [ 206.321504][ T1211] ------------[ cut here ]------------ [ 206.327422][ T1211] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#1: kworker/1:2/1211 [ 206.338472][ T1211] Modules linked in: [ 206.343073][ T1211] CPU: 1 UID: 0 PID: 1211 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 206.352492][ T1211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.362596][ T1211] Workqueue: events destroy_super_work [ 206.368172][ T1211] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 206.374008][ T1211] Code: 55 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c 55 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 8c e1 ff e8 d5 af 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 c7 af 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 206.394453][ T1211] RSP: 0018:ffffc9000450fa48 EFLAGS: 00010293 [ 206.401199][ T1211] RAX: ffffffff823a6deb RBX: ffff888059c92898 RCX: ffff8880273edb80 [ 206.409300][ T1211] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 206.417318][ T1211] RBP: 0000000000000004 R08: ffff888033070193 R09: 1ffff1100660e032 [ 206.425309][ T1211] R10: dffffc0000000000 R11: ffffed100660e033 R12: ffff888033070190 [ 206.433362][ T1211] R13: dffffc0000000000 R14: ffff888059c92000 R15: ffff888033070000 [ 206.441477][ T1211] FS: 0000000000000000(0000) GS:ffff888125fd5000(0000) knlGS:0000000000000000 [ 206.450483][ T1211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.457107][ T1211] CR2: 000000110c2cbe84 CR3: 000000007c5b8000 CR4: 00000000003526f0 [ 206.465107][ T1211] Call Trace: [ 206.468482][ T1211] [ 206.471439][ T1211] ? process_one_work+0x868/0x15d0 [ 206.476622][ T1211] process_one_work+0x94a/0x15d0 [ 206.481594][ T1211] ? __lock_acquire+0xab9/0xd20 [ 206.486502][ T1211] ? __pfx_process_one_work+0x10/0x10 [ 206.492587][ T1211] ? assign_work+0x3a1/0x410 [ 206.497924][ T1211] worker_thread+0x9b0/0xee0 [ 206.502634][ T1211] kthread+0x711/0x8a0 [ 206.506798][ T1211] ? __pfx_worker_thread+0x10/0x10 [ 206.511988][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.516664][ T1211] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.521945][ T1211] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.527239][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.531904][ T1211] ret_from_fork+0x599/0xb30 [ 206.536555][ T1211] ? __pfx_ret_from_fork+0x10/0x10 [ 206.541786][ T1211] ? __switch_to_asm+0x39/0x70 [ 206.546689][ T1211] ? __switch_to_asm+0x33/0x70 [ 206.551513][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.556174][ T1211] ret_from_fork_asm+0x1a/0x30 [ 206.561054][ T1211] [ 206.564138][ T1211] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.571423][ T1211] CPU: 1 UID: 0 PID: 1211 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 206.580803][ T1211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.590858][ T1211] Workqueue: events destroy_super_work [ 206.596326][ T1211] Call Trace: [ 206.599597][ T1211] [ 206.602518][ T1211] dump_stack_lvl+0x99/0x250 [ 206.607112][ T1211] ? __asan_memcpy+0x40/0x70 [ 206.611703][ T1211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.616902][ T1211] ? __pfx__printk+0x10/0x10 [ 206.621500][ T1211] vpanic+0x237/0x6d0 [ 206.625473][ T1211] ? __pfx_vpanic+0x10/0x10 [ 206.629962][ T1211] ? is_bpf_text_address+0x292/0x2b0 [ 206.635241][ T1211] ? is_bpf_text_address+0x26/0x2b0 [ 206.640439][ T1211] panic+0xb9/0xc0 [ 206.644151][ T1211] ? __pfx_panic+0x10/0x10 [ 206.648562][ T1211] ? ret_from_fork_asm+0x1a/0x30 [ 206.653496][ T1211] __warn+0x334/0x4c0 [ 206.657469][ T1211] ? destroy_super_work+0x15c/0x1a0 [ 206.662670][ T1211] ? destroy_super_work+0x15c/0x1a0 [ 206.667868][ T1211] report_bug+0x2be/0x4f0 [ 206.672271][ T1211] ? destroy_super_work+0x15c/0x1a0 [ 206.677464][ T1211] ? destroy_super_work+0x15c/0x1a0 [ 206.682658][ T1211] ? destroy_super_work+0x15e/0x1a0 [ 206.687851][ T1211] handle_bug+0x84/0x160 [ 206.692094][ T1211] exc_invalid_op+0x1a/0x50 [ 206.696599][ T1211] asm_exc_invalid_op+0x1a/0x20 [ 206.701453][ T1211] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 206.707257][ T1211] Code: 55 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c 55 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 8c e1 ff e8 d5 af 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 c7 af 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 206.726855][ T1211] RSP: 0018:ffffc9000450fa48 EFLAGS: 00010293 [ 206.732921][ T1211] RAX: ffffffff823a6deb RBX: ffff888059c92898 RCX: ffff8880273edb80 [ 206.740883][ T1211] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 206.748847][ T1211] RBP: 0000000000000004 R08: ffff888033070193 R09: 1ffff1100660e032 [ 206.756902][ T1211] R10: dffffc0000000000 R11: ffffed100660e033 R12: ffff888033070190 [ 206.764865][ T1211] R13: dffffc0000000000 R14: ffff888059c92000 R15: ffff888033070000 [ 206.772834][ T1211] ? destroy_super_work+0x15b/0x1a0 [ 206.778039][ T1211] ? destroy_super_work+0x15b/0x1a0 [ 206.783234][ T1211] ? process_one_work+0x868/0x15d0 [ 206.788342][ T1211] process_one_work+0x94a/0x15d0 [ 206.793272][ T1211] ? __lock_acquire+0xab9/0xd20 [ 206.798134][ T1211] ? __pfx_process_one_work+0x10/0x10 [ 206.803509][ T1211] ? assign_work+0x3a1/0x410 [ 206.808101][ T1211] worker_thread+0x9b0/0xee0 [ 206.812712][ T1211] kthread+0x711/0x8a0 [ 206.816772][ T1211] ? __pfx_worker_thread+0x10/0x10 [ 206.821880][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.826460][ T1211] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.831652][ T1211] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.836849][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.841432][ T1211] ret_from_fork+0x599/0xb30 [ 206.846019][ T1211] ? __pfx_ret_from_fork+0x10/0x10 [ 206.851135][ T1211] ? __switch_to_asm+0x39/0x70 [ 206.855890][ T1211] ? __switch_to_asm+0x33/0x70 [ 206.860645][ T1211] ? __pfx_kthread+0x10/0x10 [ 206.865227][ T1211] ret_from_fork_asm+0x1a/0x30 [ 206.870021][ T1211] [ 206.873300][ T1211] Kernel Offset: disabled [ 206.877637][ T1211] Rebooting in 86400 seconds..