last executing test programs: 7m2.742191456s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 7m0.71875295s ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 6m57.099888136s ago: executing program 2 (id=11): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000cc0)='\x90\xe5') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000003940)='./file2\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a133d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803010000000000e000e218d1ddf66ed538f252720000", 0x79, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x202980, 0x0) fcntl$getflags(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001800)={0x2020}, 0x1314) 6m54.647430604s ago: executing program 2 (id=16): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) 6m53.662466441s ago: executing program 2 (id=21): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 6m49.689699688s ago: executing program 32 (id=21): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 21.568162677s ago: executing program 0 (id=965): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x90, 0xc38, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNiOSEml9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSoWwEAPExXRr5y+qz7PwA8Vq75/38AAAAAAAAAAAAAANjvUhTxZKSYubKSxqr3HfXL7b47d0eHhjevdiRVNQ9V5cuf+pmz585/8YXBC9283J76gPq77dPx2si1S42Xp2/PzE7MzU2MN0an2jemxye2vYed1t/oZHUCGrdfvzN+8+Zc4+zz59Z9fHfg/f4njg9cHHz21DPdsqNDw8Mja0XqveVrD9yQjq1meByOIk5Fiue++5PUiogidn4u6g937Dc6UnXiZNWJ0aHhqiOT7dbUfPnh1e6JKCIaPZWa3XO0+VhEre+h9mFrzYiFsvllg0+W3RuZac22rk9ONK62Zufb8+3pqaup09qyP40o4kKKWIyI5f77d9cXRdQixbePraTrEXGoex6+UE0M3rodxR72cRvKdjb6IhaLAzBm+1h/FPFqpPjpOyfiRr7OVNeaz0e8Wub3I94q86WIVH4xzke8t8n3iIOpFkX8ZTn+F1fSeHU96F5XLn+18eWpm9M9ZbvXlV/y/nDfleIR3R+ObMiHY59fm+pRRKu64q+kB//NDgAAAAAAAAAAAAAAAAC77UgU8alI8cp//Ek1rziqeenHLg7+4cCv9s4Zf/pD9lOWfT4iFortzck9nCcGXk1XU3rEc4kfZ/Uo4k/z/L9vPurGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdE2kxetcUb0/dalxrXZ/srArbXfu3u2b66urqaiN1splzLOdCzsWcSzmXc0aR6+ds5hzLuZBzMedSzuWccSjXz9nMOZZzIedizqWcyzmjluvnbOYcy7mQczEvur+U3y/njH2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEdJEUX8PFJ86+srKVJENCPGopNL/Y+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fij5r1ttYhI1b8dJ8pfzkfzcJkfj+ZgmS9F81LOVpW15jcfQfvZmb5UxI8iRX/97XsDnse/r/Pu3tcg3vrG2rtP1zp5qPvhwPv9Txw/dnFw+Dee3up12qwBJy+3p+7cbYwODQ+P9Gyu5aN/vGfbQD5usTtdJyLm3njz9dbk5MTsg78ovwI7qH6AXqTa49LTg/3iN3drh1HbD915NC8e9ZWJh6G8/78XKX733f/s3vA79/96/Ern3b07fPzsz9bu/y9u3NE27/+1jfXy/b+8p292/3+yZ9uL+XcjfbWI+vztmb7jEfW5N9481b7dujVxa2Lq/OnTXxoc/NK5032HI+o325MTPa925XQBAAAAAAAAAAAAAAAAPDypiN+PFK0fraRGRNyt5msNXBx89tQzh+JQNd9q3bzt10auXWq8PH17ZnZibm5ivDE61b4xPT6x3cPVq+leo0PDe9KZD3Vkj9t/pP7y9Mwbs+1bfzy/6edH65euz83Ptm5s/nEciSKi2bvlZNXg0aHhqtGT7dZUVfXqppPpf3l9qYj/ihQ3zjfSZ/O2PP9/4wz/dfP/FzbuaI/m/3+sZ1t5zJSK+Fmk+J2/ejo+W7XzaNx3znK5v4sUJy98JpeLw2W5bhs6zxXozAwsy/5fpPinn68v250P+eRa2TPbPrEHRDn+xyLF9/7iO/Fbedv65z9sPv5HN+5oj8b/qZ5tR9c9r2DHXSeP/6lI8dKTb8fn8rYPev5H99kbJ3Lhe8/n2KPx/0TPtoF83N/ena4DAAAAAAAAAAAcaH2piL+PFD8YrqUX8rbt/P2/8Y072qO///XJnm3ju7Ne0Ye+2PFJBQAAAIB9oi8V8eNIcWv+7XtzqNfP/+6Z//l7a/M/h9KGT6s/5/u16rkBu/nnf70G8nHHdt5tAAAAAAAAAAAAAAAAAAAA2FdSKuKFvJ76WDWff3zL9dSXIsUr//NcLpeOl+W668APVL/Wr0xPnbo0OTl9ozXfuj450RiZad2YKOs+FSlW/vYzuW5Rra/eXW++s8b72lrss5Fi+B+6ZTtrsXfXJn9qreyZsuzHIsV//+P6sp/L5T6xVvZsWfZvIsXX/uX+sqXja2XPlWW/Eyl++LVGt+zRsmz3+aifXCv7/I3pYo9GBgAAAAAAAAAAAAAAAAAAgMdJXyrizyPF/95evDeXP6//39fztvLWN3rW+9/gbrXO/0C1/v9Wrx9k/f/quQILWx0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+mlIU8WakmLmykpb6y/cd9cvtqTt3R4eGN692JFU1D1Xly5/6mbPnzn/xhcEL3fzg+rvtU/HayLVLjZenb8/MTszNTYw3RqfaN6bHJ7a9h53W3+hkdQIat1+/M37z5lzj7PPn1n18d+D9/ieOD1wcfPbUM92yo0PDwyM9ZWp9D3z0+6Qtth+OIv46Ujz33Z+kH/RHFLHzc/Eh3529dqTqxMmqE6NDw1VHJtutqfnyw6vdE1FENHoqNbvn6CGMxY40IxbK5pcNPll2b2SmNdu6PjnRuNqanW/Pt6enrqZOa8v+NKKICyliMSKW++/fXV8U8Xqk+PaxlfSv/RGHuufhC1dGvnL67NbtKPawj9tQtrPRF7FYHIAx28f6o4h/jhQ/fedE/Ft/RC06P/H5iFfL/H7EW9EZ71R+Mc5HvLfJ94iDqRZF/H85/hdX0jv95fWge125/NXGl6duTveU7V5XDvz94WHa59emehTxw+qKv5L+3X/XAAAAAAAAAAAAAAAAAPtIEb8eKV5890Sq5gffm1PcnrrVuNa6PtmZ1ted+9edM726urraSJ1s5hzLuZBzMedSzuWcUeT6OZtl1ldXx/L7hZyLOZdyLueMQ7l+zmbOsZwLORdzLuVczhm1XD9nM+dYzoWcizmXci7njH0ydw8AAAAAAAAAAAAAAAAAAPhoKap/Unzr6ytptb+zvvRYdHLJeqAfeb8IAAD//1qT9HY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x10001, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r5=>0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 18.543064138s ago: executing program 0 (id=971): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.317696757s ago: executing program 0 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20008145, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @local, 0xf5}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x18002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x8e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 17.067254439s ago: executing program 0 (id=978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000780)={[{@errors_continue}, {@noinit_itable}, {}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) socket$inet(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0}) sendto$packet(r3, &(0x7f00000000c0)="2b188100ac3515f0", 0x8, 0x20000000, &(0x7f00000004c0)={0x11, 0x8100, r5, 0x1, 0x20, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) 12.489130951s ago: executing program 4 (id=984): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.482306181s ago: executing program 0 (id=986): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB='iocharset=koi8-r,noadinicb,lastblock=00000000000000000034,uid=forget,gid=', @ANYRESOCT=0x0, @ANYBLOB="2c73686f727461642c756e64656c6574652c756d61736b3d30303030303030303030303030303030303030303031312c756e686964652c00440c75c891c097786cb179aaf2bf042c54664b24e89e417b353c3e629ff7f5ae9f04e3333fbe6fb128047138060364a8e168332a941e5159ebad4544f81b91efadcd590ae07f01346c3249361dc9a7caa2d0cb9a50119639a16045c0fb4c59067ab0dfa5b5eb31f5663bc936e0d20d98022eca16bf9032a65281ecd3b2aa00"/196], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f0000002140)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) r3 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r3, 0x8002007ffb) r4 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_dccp(0xa, 0x6, 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) 12.265758213s ago: executing program 4 (id=988): r0 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x1, 0x7d}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) sendto(r1, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0x0, 0x3}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x87, 0x1}) 12.237597913s ago: executing program 3 (id=989): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000d40)) mkdir(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', <r7=>0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffc69, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40c0}, 0x0) 11.22616359s ago: executing program 4 (id=990): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 10.559308705s ago: executing program 3 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 10.364958646s ago: executing program 0 (id=994): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], 0x11, 0x2f0, &(0x7f00000019c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x8801, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8.500521389s ago: executing program 1 (id=995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0x1}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) 7.763573745s ago: executing program 3 (id=997): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.02631762s ago: executing program 5 (id=999): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x207279, 0x0, 0x0, 0x39e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x0, <r6=>0xffffffffffffffff, 0x1}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x9, 0x0, r6, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.970859337s ago: executing program 5 (id=1000): newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) statx(r0, 0x0, 0x1500, 0x20, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0xd0) write$tun(r0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ce0000/0x2000)=nil, 0x2000, 0x11) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40205) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x7f, 0xfffffffd, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "513d1cf3", '\x00', ["4c995e8ac700", "10b1146900", "cb0e83d38d5978155c384d00", "79f50345003c0017a829edbf"]}) 5.970545017s ago: executing program 3 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) 5.968071797s ago: executing program 1 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1}, 0x6e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) 4.761915506s ago: executing program 5 (id=1002): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf9c, &(0x7f0000001980)="$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") openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') lseek(r3, 0xae7e, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 4.761550436s ago: executing program 4 (id=1003): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 3.129776547s ago: executing program 5 (id=1004): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000d40)) mkdir(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', <r7=>0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffc69, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40c0}, 0x0) 3.126725158s ago: executing program 1 (id=1015): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0xd0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'wg0\x00', {}, {}, 0x2e}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 1.872139206s ago: executing program 1 (id=1005): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.498294469s ago: executing program 3 (id=1006): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="f801"], 0x1f8) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=<r3=>0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 1.463908309s ago: executing program 3 (id=1007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 1.40545409s ago: executing program 1 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x2, 0x5, 0x2, 0x8, 0x3, "aa8710d325a5bddb"}) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 1.126979161s ago: executing program 5 (id=1009): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r6}, 0x38) 1.030194842s ago: executing program 4 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0xfffd, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000ac0)=0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001410000001400170000000000005c898e7a3a6c"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70fd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}}, 0x400c0d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) 179.066608ms ago: executing program 1 (id=1012): socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x40000080806, 0x0) memfd_secret(0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x24000004) 26.267939ms ago: executing program 4 (id=1013): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) open(0x0, 0x185380, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 0s ago: executing program 5 (id=1014): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000700)=""/72, 0x1a, 0x48, 0x1, 0x9, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x3, 0x1, 0xb, 0x40, 0x1, 0x9, '\x00', 0x0, r0, 0x0, 0x2, 0x2, 0x8, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r1, &(0x7f00000009c0)}, 0x20) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ T4167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.206625][ T4167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.229934][ T4167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.261310][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.290253][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.320278][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.344270][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.360237][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.370425][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.390625][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.400116][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.411108][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.421540][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.431010][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.438367][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.476737][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.487756][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.510173][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.520306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.530880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.539970][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.547101][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.557229][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.575620][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.590270][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.599623][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.611163][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.619379][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.627912][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.638621][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.646864][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.666822][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.677107][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.691350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.701524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.711273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.720247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.729474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.738152][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.745264][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.753511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.761468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.781414][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.791951][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.823383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.834506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.845014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.859901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.870196][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.877337][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.885818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.894711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.903961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.912612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.921357][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.928466][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.937225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.945758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.954531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.963585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.972191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.981074][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.988210][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.998670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.007894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.016038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.029175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.063631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.072744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.090342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.091014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.092174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.125188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.133942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.178567][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.190626][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.202738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.211828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.220622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.230227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.239623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.248351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.257065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.266071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.275928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.291172][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.313512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.322185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.355059][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.368073][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.392966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.400472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.409986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.419946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.428584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.437550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.458668][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.480714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.488521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.516970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.533777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.549637][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.556743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.565962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.574696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.583168][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.590224][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.606649][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.635391][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.642535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.659771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.671486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.680688][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 64.687431][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 64.694634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.703411][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 64.728933][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 64.743247][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 64.748498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.767591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.782335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.797827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.806781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.815905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.824777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.835624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.843713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.851412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.859555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.867965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.877204][ T4177] device veth0_vlan entered promiscuous mode [ 64.896953][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.911616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.922091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.931035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.943513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.952120][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.959246][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.967384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.976459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.985058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.992120][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.000847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.020924][ T4177] device veth1_vlan entered promiscuous mode [ 65.029978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.038727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.051300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.063815][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.090861][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.126950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.140364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.150657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.159688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.176885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.186030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.223064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.241839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.252473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.264328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.277981][ T4177] device veth0_macvtap entered promiscuous mode [ 65.297385][ T4170] device veth0_vlan entered promiscuous mode [ 65.304977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.315108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.327560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.337458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.346685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.355841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.364551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.374569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.383184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.412173][ T4177] device veth1_macvtap entered promiscuous mode [ 65.424679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.433288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.441240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.449226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.458554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.467071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.477890][ T4167] device veth0_vlan entered promiscuous mode [ 65.495221][ T4170] device veth1_vlan entered promiscuous mode [ 65.505616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.514242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.522034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.533910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.542422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.561244][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.576995][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.589701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.605823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.621265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.635077][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.642404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.651942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.670693][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.687891][ T4167] device veth1_vlan entered promiscuous mode [ 65.704730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.714659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.722182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.744491][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.751945][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.759575][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.770272][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.780960][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.790217][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.799892][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.808886][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838429][ T4170] device veth0_macvtap entered promiscuous mode [ 65.850240][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.896367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.904890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.913687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.922285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.931366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.940892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.951720][ T4170] device veth1_macvtap entered promiscuous mode [ 65.969167][ T4167] device veth0_macvtap entered promiscuous mode [ 66.010574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.020402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.029448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.044325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.053386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.062060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.071658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.081138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.112020][ T4167] device veth1_macvtap entered promiscuous mode [ 66.120877][ T4169] device veth0_vlan entered promiscuous mode [ 66.137104][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.148416][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.160922][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.181694][ T4168] device veth0_vlan entered promiscuous mode [ 66.193952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.204458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.214237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.222604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.231810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.240015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.253539][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.261567][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.274685][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.288238][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.299612][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.311608][ T4169] device veth1_vlan entered promiscuous mode [ 66.326625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.335041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.344705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.365616][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.375441][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.384608][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.395914][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.419441][ T4168] device veth1_vlan entered promiscuous mode [ 66.431022][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.443972][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.454062][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.464708][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.476373][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.516673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.525455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.533981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.542559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.552026][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.565143][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.575440][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.587303][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.599016][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.621686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.630702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.640297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.649509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.661616][ T4167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670987][ T4167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.682408][ T4167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.691493][ T4167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.707539][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.722425][ T4169] device veth0_macvtap entered promiscuous mode [ 66.729285][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.738675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.747487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.758410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.767208][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 66.774228][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 66.788014][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 66.794516][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 66.800586][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 66.812966][ T4168] device veth0_macvtap entered promiscuous mode [ 66.822402][ T4169] device veth1_macvtap entered promiscuous mode [ 66.840423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.850344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.858832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.884634][ T4168] device veth1_macvtap entered promiscuous mode [ 66.939798][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.955397][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.966400][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.978528][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.988747][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.001187][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.013516][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.036845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.051466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.069237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.091664][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.112561][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.123401][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.134169][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.150549][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.162044][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.175094][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.196192][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.209702][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.331768][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.343356][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.351337][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.354847][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.369354][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.379901][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.392458][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.407092][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.418286][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.428890][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.484490][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.683722][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.734765][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.787090][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.851056][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.920564][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.112947][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.131482][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.142249][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.154401][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.164418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.173482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.183013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.190847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.198951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.208408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.217136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.226162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.255796][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.270525][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291602][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.306122][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.329380][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.366620][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.378446][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.391101][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.590941][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.600003][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.986961][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 69.033993][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 69.110955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.147854][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 69.275378][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 69.282606][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 69.423165][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.424620][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.431124][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.473469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 69.498076][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.584023][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.686533][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.793060][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.802152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.811202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.820347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.829549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.838763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.847946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.922379][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.007746][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.274355][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.322194][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.487030][ T4264] ODEBUG: Out of memory. ODEBUG disabled [ 70.626711][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.635617][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.650592][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.236704][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.244010][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.314678][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.363526][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.410281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.518736][ T4270] loop4: detected capacity change from 0 to 8 [ 71.733312][ T4270] SQUASHFS error: Failed to read block 0x1ec: -5 [ 71.740829][ T4270] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 72.082762][ C0] sched: RT throttling activated [ 74.345639][ T4280] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.216671][ T4285] loop2: detected capacity change from 0 to 256 [ 75.257514][ T4285] ======================================================= [ 75.257514][ T4285] WARNING: The mand mount option has been deprecated and [ 75.257514][ T4285] and is ignored by this kernel. Remove the mand [ 75.257514][ T4285] option from the mount to silence this warning. [ 75.257514][ T4285] ======================================================= [ 75.510130][ T4286] loop4: detected capacity change from 0 to 40427 [ 75.659993][ T4286] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 75.668048][ T4286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.687912][ T4286] F2FS-fs (loop4): invalid crc value [ 75.765594][ T4286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.771210][ T4285] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 76.001441][ T4286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.008962][ T4286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.579215][ T4285] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 77.427336][ T4302] loop1: detected capacity change from 0 to 256 [ 77.756490][ T4272] attempt to access beyond end of device [ 77.756490][ T4272] loop4: rw=1, want=45104, limit=40427 [ 82.124335][ T1108] cfg80211: failed to load regulatory.db [ 82.184143][ T4252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.390495][ T4330] capability: warning: `syz.1.23' uses deprecated v2 capabilities in a way that may be insecure [ 82.575345][ T4328] Zero length message leads to an empty skb [ 82.616792][ T4252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.120572][ T4252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.134771][ T4341] libceph: resolve '. [ 83.134771][ T4341] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$ [ 83.134771][ T4341] ' (ret=-3): failed [ 83.404386][ T4340] loop1: detected capacity change from 0 to 512 [ 83.543099][ T4340] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 83.626655][ T4252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.843960][ T4340] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 83.973449][ T4352] xt_nat: multiple ranges no longer supported [ 84.000694][ T4352] loop0: detected capacity change from 0 to 8 [ 84.149802][ T4353] loop3: detected capacity change from 0 to 64 [ 84.425045][ T4340] netlink: 'syz.1.27': attribute type 11 has an invalid length. [ 84.728148][ T4353] hfs: unable to parse mount options [ 84.742327][ T4352] SQUASHFS error: lzo decompression failed, data probably corrupt [ 84.750478][ T4352] SQUASHFS error: Failed to read block 0x91: -5 [ 84.757013][ T4352] SQUASHFS error: Unable to read metadata cache entry [8f] [ 84.764341][ T4352] SQUASHFS error: Unable to read inode 0x11f [ 85.512131][ T4363] loop3: detected capacity change from 0 to 128 [ 85.741949][ T4365] loop0: detected capacity change from 0 to 40427 [ 85.774957][ T4363] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.827921][ T4363] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.904317][ T4365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.968595][ T4365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.517400][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 89.606680][ T4355] chnl_net:caif_netlink_parms(): no params data found [ 89.647250][ T4177] attempt to access beyond end of device [ 89.647250][ T4177] loop0: rw=2049, want=45104, limit=40427 [ 90.145953][ T4403] loop3: detected capacity change from 0 to 40427 [ 90.559456][ T4403] F2FS-fs (loop3): invalid crc value [ 90.574322][ T4403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.644165][ T4403] F2FS-fs (loop3): Start checkpoint disabled! [ 91.303011][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.305689][ T4403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 91.365014][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.435664][ T4355] device bridge_slave_0 entered promiscuous mode [ 91.754900][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 91.761040][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.845223][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.440892][ T4430] syz.3.39 (4430): drop_caches: 2 [ 92.556219][ T4355] device bridge_slave_1 entered promiscuous mode [ 92.590338][ T4435] loop1: detected capacity change from 0 to 512 [ 93.353900][ T154] attempt to access beyond end of device [ 93.353900][ T154] loop3: rw=2049, want=40976, limit=40427 [ 93.426481][ T4355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.445669][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,norecovery,inode_readahead_blks=0x0000000000000800,user_xattr,,errors=continue. Quota mode: writeback. [ 93.484154][ T4355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.546908][ T4435] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.686469][ T4355] team0: Port device team_slave_0 added [ 93.693997][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 93.784057][ T4355] team0: Port device team_slave_1 added [ 93.793035][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 93.914720][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.921754][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.996672][ T4355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.256112][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.299951][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.359066][ T4459] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 94.485062][ T4355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.544534][ T4459] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.616246][ T4457] netlink: 256 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.655715][ T4457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.777222][ T4355] device hsr_slave_0 entered promiscuous mode [ 94.805805][ T4355] device hsr_slave_1 entered promiscuous mode [ 94.848606][ T4355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.023988][ T4355] Cannot create hsr debugfs directory [ 95.789016][ T4469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50'. [ 95.815183][ T4468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.865696][ T4473] loop0: detected capacity change from 0 to 128 [ 95.872860][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 95.918031][ T4475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.751045][ T4252] device hsr_slave_0 left promiscuous mode [ 96.804141][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.861104][ T4252] device hsr_slave_1 left promiscuous mode [ 96.897993][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.913589][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.942577][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.971090][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.026296][ T4252] device bridge_slave_1 left promiscuous mode [ 97.044404][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.095021][ T26] audit: type=1800 audit(1741756527.471:2): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.51" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 97.131926][ T4252] device bridge_slave_0 left promiscuous mode [ 97.149838][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.193340][ T4252] device veth1_macvtap left promiscuous mode [ 97.220276][ T4492] loop1: detected capacity change from 0 to 4096 [ 97.226865][ T4252] device veth0_macvtap left promiscuous mode [ 97.233409][ T4252] device veth1_vlan left promiscuous mode [ 97.240403][ T4252] device veth0_vlan left promiscuous mode [ 97.373204][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.740077][ T4492] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 98.222910][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.237148][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 98.246796][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.310672][ T7] usb 5-1: config 0 descriptor?? [ 98.377436][ T7] usb 5-1: can't set config #0, error -71 [ 98.465293][ T7] usb 5-1: USB disconnect, device number 2 [ 98.543687][ T4510] xt_connbytes: Forcing CT accounting to be enabled [ 98.550477][ T4510] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.562338][ T4510] xt_bpf: check failed: parse error [ 99.644175][ T4503] loop3: detected capacity change from 0 to 1024 [ 102.946722][ T4535] loop3: detected capacity change from 0 to 256 [ 103.047289][ T4535] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.091213][ T4535] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 103.121678][ T4252] team0 (unregistering): Port device team_slave_1 removed [ 103.170435][ T4535] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.191517][ T4252] team0 (unregistering): Port device team_slave_0 removed [ 103.206482][ T4252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.222696][ T4252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.087800][ T4535] exFAT-fs (loop3): hint_cluster is invalid (17) [ 104.090310][ T4252] bond0 (unregistering): Released all slaves [ 104.105170][ T4535] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 104.119955][ T4535] exFAT-fs (loop3): Filesystem has been set read-only [ 104.421033][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.488032][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.631641][ T4355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.684964][ T4355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.709506][ T4355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.741576][ T4355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.868339][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 105.068250][ T4355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.119449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.137002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.189149][ T4355] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.258732][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.504437][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.513324][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.520395][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.006290][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.006921][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.007739][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.008168][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.008241][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.008692][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.009528][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.042238][ T4355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.042309][ T4355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.191621][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.192722][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.193717][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.495578][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.506399][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.525618][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.552373][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.562003][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.080891][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.089174][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.061328][ T4602] loop1: detected capacity change from 0 to 40427 [ 110.227000][ T4602] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.234830][ T4602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.245822][ T4602] F2FS-fs (loop1): invalid crc value [ 110.365060][ T4602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.447904][ T4602] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.455070][ T4602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.080241][ T4621] attempt to access beyond end of device [ 111.080241][ T4621] loop1: rw=2049, want=78344, limit=40427 [ 111.731303][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.995011][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.960571][ T4355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.041323][ T4625] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 113.147229][ T4625] kvm: pic: non byte read [ 113.148652][ T4636] loop0: detected capacity change from 0 to 1024 [ 115.129659][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.149150][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.397696][ T4355] device veth0_vlan entered promiscuous mode [ 115.450250][ T4355] device veth1_vlan entered promiscuous mode [ 115.475158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.510948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.585031][ T4666] process 'syz.4.86' launched './file0' with NULL argv: empty string added [ 116.189982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.225088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.313269][ T4355] device veth0_macvtap entered promiscuous mode [ 116.330252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.340345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.361864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.389525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.406350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.429009][ T4355] device veth1_macvtap entered promiscuous mode [ 116.541191][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.584599][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.605696][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.622256][ T4677] loop3: detected capacity change from 0 to 512 [ 116.658933][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.691574][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.716852][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.748315][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.779219][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.830257][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.872595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.897904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.908707][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.955850][ T4677] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.89: inline data xattr refers to an external xattr inode [ 117.370440][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.506004][ T4677] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.89: couldn't read orphan inode 12 (err -117) [ 117.730047][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.740578][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.750485][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.767548][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.777379][ T4355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.865399][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,delalloc,barrier=0x0000000000000004,resuid=0x0000000000000000,sysvgroups,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: none. [ 117.910017][ T4355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.937155][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.159845][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.184292][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.239711][ T4355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.273891][ T4355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.283208][ T4355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.293193][ T4355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.736911][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.782237][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.866511][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.917972][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.963484][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 118.997033][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.152570][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.264317][ T26] audit: type=1326 audit(1741756550.265:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 120.507516][ T26] audit: type=1326 audit(1741756550.274:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 120.530904][ T26] audit: type=1326 audit(1741756550.274:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 121.514938][ T4717] loop0: detected capacity change from 0 to 1024 [ 121.551097][ T26] audit: type=1326 audit(1741756550.274:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 121.830115][ T26] audit: type=1326 audit(1741756550.321:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 121.985221][ T26] audit: type=1326 audit(1741756550.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 121.987337][ T4717] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 122.043576][ T26] audit: type=1326 audit(1741756550.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 122.377734][ T26] audit: type=1326 audit(1741756550.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 122.484134][ T4717] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 122.494461][ T4717] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: comm syz.0.97: inode #1: comm syz.0.97: iget: illegal inode # [ 122.507669][ T26] audit: type=1326 audit(1741756550.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 122.529684][ T26] audit: type=1326 audit(1741756550.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 122.556777][ T4717] EXT4-fs (loop0): no journal found [ 122.567688][ T4717] EXT4-fs (loop0): can't get journal size [ 122.704691][ T4717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce11c, mo2=0002] [ 122.716923][ T4717] EXT4-fs (loop0): failed to initialize system zone (-22) [ 122.724448][ T4717] EXT4-fs (loop0): mount failed [ 124.381614][ T4761] loop1: detected capacity change from 0 to 2048 [ 125.454826][ T4770] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use) [ 125.526854][ T4770] kvm: emulating exchange as write [ 125.535711][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 125.535728][ T26] audit: type=1326 audit(1741756555.276:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bc16b169 code=0x7fc00000 [ 125.650379][ T4778] loop4: detected capacity change from 0 to 512 [ 125.874096][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 125.888024][ T4778] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.761256][ T4826] loop1: detected capacity change from 0 to 2048 [ 132.013974][ T4826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.360747][ T4836] loop4: detected capacity change from 0 to 512 [ 132.815861][ T4836] EXT4-fs (loop4): Invalid journal IO priority (must be 0-7) [ 133.564884][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.571253][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.038506][ T4874] loop1: detected capacity change from 0 to 131072 [ 138.149001][ T4868] sctp: failed to load transform for md5: -4 [ 138.335121][ T4874] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 138.343507][ T4874] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.428294][ T4889] loop4: detected capacity change from 0 to 512 [ 138.428412][ T4874] F2FS-fs (loop1): invalid crc value [ 138.524675][ T4886] loop3: detected capacity change from 0 to 1024 [ 138.713301][ T4874] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.765239][ T4889] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 138.807818][ T4889] EXT4-fs (loop4): filesystem is read-only [ 138.865407][ T4874] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.872579][ T4874] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 138.892309][ T4889] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 138.928018][ T4886] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.130: Invalid block bitmap block 0 in block_group 0 [ 138.944956][ T4886] Quota error (device loop3): write_blk: dquota write failed [ 138.952874][ T4886] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 138.963535][ T4886] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.130: Failed to acquire dquot type 0 [ 138.970329][ T4889] EXT4-fs (loop4): filesystem is read-only [ 138.985278][ T4886] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.130: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.050511][ T4886] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.130: Invalid inode bitmap blk 0 in block_group 0 [ 139.063993][ T4886] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 139.068783][ T4889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.074798][ T4886] EXT4-fs (loop3): 1 orphan inode deleted [ 139.084646][ T4886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ��; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 139.085672][ T4889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.132: bg 0: block 64: padding at end of block bitmap is not set [ 139.153526][ T9] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 139.159273][ T4905] tipc: Started in network mode [ 139.162349][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6220: comm kworker/u4:0: Failed to release dquot type 0 [ 139.268310][ T4886] syz.3.130 (4886) used greatest stack depth: 19392 bytes left [ 139.339247][ T4905] tipc: Node identity 4, cluster identity 4711 [ 139.464285][ T4889] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 139.474371][ T4905] tipc: Node number set to 4 [ 139.567085][ T4889] EXT4-fs (loop4): 1 orphan inode deleted [ 139.584655][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,nouid32,nomblk_io_submit,data_err=abort,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 139.626086][ T4914] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 139.723870][ T4914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.736920][ T4916] device gretap1 entered promiscuous mode [ 139.749014][ T4916] bond1: (slave gretap1): making interface the new active one [ 139.758360][ T4916] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 139.777146][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 139.982392][ T4909] syz.5.135 (4909): drop_caches: 2 [ 140.070192][ T4914] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 143.726736][ T4960] ip6t_srh: unknown srh invflags 7863 [ 145.764427][ T4972] xt_NFQUEUE: number of total queues is 0 [ 155.193729][ T5079] nlmon0: Master is either lo or non-ether device [ 157.040291][ T5096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.173'. [ 160.940161][ T5108] tipc: Started in network mode [ 161.720507][ T5108] tipc: Node identity 080211, cluster identity 4711 [ 161.772225][ T5108] tipc: Enabled bearer <eth:syzkaller0>, priority 10 [ 163.158567][ T1110] tipc: Node number set to 134353152 [ 167.516929][ T5184] tipc: Started in network mode [ 167.529108][ T5184] tipc: Node identity 080211, cluster identity 4711 [ 167.548033][ T5184] tipc: Enabled bearer <eth:syzkaller0>, priority 10 [ 168.613167][ T5201] loop4: detected capacity change from 0 to 512 [ 168.691969][ T5206] loop5: detected capacity change from 0 to 128 [ 168.796487][ T4179] tipc: Node number set to 134353152 [ 168.826059][ T5201] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.199: iget: bogus i_mode (0) [ 168.954438][ T5211] device gtp0 entered promiscuous mode [ 169.310762][ T5201] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.199: couldn't read orphan inode 17 (err -117) [ 169.770779][ T5206] EXT4-fs (loop5): Test dummy encryption mode enabled [ 169.782213][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.815959][ T5206] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 170.148767][ T5206] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.375961][ T5249] loop3: detected capacity change from 0 to 64 [ 173.445521][ T5247] loop1: detected capacity change from 0 to 1024 [ 173.565027][ T5247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.575392][ T5249] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 173.635912][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 175.863855][ T5274] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 176.862958][ T5286] loop0: detected capacity change from 0 to 256 [ 178.058645][ T5304] loop4: detected capacity change from 0 to 256 [ 178.127165][ T5304] exfat: Deprecated parameter 'utf8' [ 178.142879][ T5304] exfat: Deprecated parameter 'namecase' [ 178.179753][ T5304] exfat: Deprecated parameter 'utf8' [ 178.967490][ T5304] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 182.914965][ T5339] loop4: detected capacity change from 0 to 256 [ 184.780307][ T5362] loop1: detected capacity change from 0 to 4096 [ 186.477832][ T5362] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 188.799979][ T5390] loop1: detected capacity change from 0 to 256 [ 189.705993][ T5386] loop4: detected capacity change from 0 to 32768 [ 190.401510][ T5390] exfat: Deprecated parameter 'utf8' [ 190.406870][ T5390] exfat: Deprecated parameter 'namecase' [ 190.424741][ T5386] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.433653][ T5386] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.449264][ T5390] exfat: Deprecated parameter 'utf8' [ 190.461554][ T5386] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 190.626874][ T4179] Bluetooth: hci3: command 0x0406 tx timeout [ 190.633066][ T4179] Bluetooth: hci4: command 0x0406 tx timeout [ 190.665692][ T4179] Bluetooth: hci2: command 0x0406 tx timeout [ 190.671868][ T4179] Bluetooth: hci0: command 0x0406 tx timeout [ 190.722725][ T5390] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 190.768642][ T5386] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 195.760967][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807d073400: rx timeout, send abort [ 195.764917][ T5439] loop0: detected capacity change from 0 to 2048 [ 195.772525][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d073400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.960003][ T5439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.178601][ T5454] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.178670][ T5454] CIFS mount error: No usable UNC path provided in device string! [ 196.178670][ T5454] [ 196.178960][ T5454] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 197.231526][ T5466] device vlan2 entered promiscuous mode [ 197.313300][ T5466] device dummy0 entered promiscuous mode [ 197.583726][ T5466] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 198.366900][ T5477] netlink: 'syz.3.251': attribute type 39 has an invalid length. [ 198.438776][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x76 [ 198.455780][ T5473] kvm [5472]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4076 [ 198.466545][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 198.481783][ T5439] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 198.493575][ T5473] kvm [5472]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001 [ 198.529242][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x96 [ 198.544242][ T5473] kvm [5472]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x4096 [ 198.574467][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x36 [ 198.594223][ T5473] kvm [5472]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4036 [ 198.628107][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x1 [ 198.654816][ T5473] kvm [5472]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4001 [ 198.703360][ T5473] kvm [5472]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6b, nop [ 199.028527][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.035943][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.191746][ T4212] kernel read not supported for file /video7 (pid: 4212 comm: kworker/1:6) [ 200.055289][ T5515] loop4: detected capacity change from 0 to 4096 [ 201.070484][ T5523] loop1: detected capacity change from 0 to 256 [ 201.202608][ T5521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.209539][ T5521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.216166][ T5521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.222544][ T5521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.229086][ T5521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.235512][ T5521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.241967][ T5521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.248387][ T5521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.254837][ T5521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.261252][ T5521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.929536][ T5523] exfat: Deprecated parameter 'namecase' [ 202.054715][ T5523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 203.765762][ T5540] netlink: 68 bytes leftover after parsing attributes in process `syz.3.263'. [ 208.344083][ T5583] loop5: detected capacity change from 0 to 64 [ 208.484249][ T5583] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 208.819634][ T5587] netlink: 'syz.4.274': attribute type 39 has an invalid length. [ 209.928027][ T5604] device gtp0 entered promiscuous mode [ 215.014914][ T5627] kvm [5626]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 215.032058][ T5627] kvm [5626]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 215.072853][ T5627] kvm [5626]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 216.355726][ T5650] loop4: detected capacity change from 0 to 64 [ 216.475029][ T5650] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 217.009471][ T5657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.027268][ T5657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 218.013817][ T4212] Bluetooth: hci1: command 0x0406 tx timeout [ 219.148617][ T5674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.295'. [ 219.236017][ T5674] tipc: Started in network mode [ 219.241123][ T5674] tipc: Node identity 7, cluster identity 5 [ 219.247087][ T5674] tipc: Node number set to 7 [ 219.253285][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 219.292345][ T5682] loop5: detected capacity change from 0 to 512 [ 219.344732][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 219.547148][ T5682] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.595806][ T5682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.298: bg 0: block 496: padding at end of block bitmap is not set [ 220.820228][ T5694] loop4: detected capacity change from 0 to 40427 [ 220.832997][ T4215] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.841746][ T5692] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.879656][ T5694] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 220.887529][ T5694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.898908][ T5694] F2FS-fs (loop4): invalid crc value [ 220.924974][ T5694] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.462494][ T5694] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.469612][ T5694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.824412][ T5715] attempt to access beyond end of device [ 221.824412][ T5715] loop4: rw=2049, want=78344, limit=40427 [ 222.073767][ T5716] loop1: detected capacity change from 0 to 256 [ 223.368259][ T5721] loop3: detected capacity change from 0 to 512 [ 223.498287][ T5721] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext3 [ 223.716137][ T5724] tipc: New replicast peer: 255.255.255.255 [ 223.723086][ T5724] tipc: Enabled bearer <udp:syz2>, priority 10 [ 224.210589][ T5736] net_ratelimit: 1052 callbacks suppressed [ 224.210610][ T5736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.223029][ T5736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.230688][ T5736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.237180][ T5736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.243933][ T5736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.250358][ T5736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.257152][ T5736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.263636][ T5736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.271717][ T5736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.278132][ T5736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.073564][ T5745] loop5: detected capacity change from 0 to 128 [ 225.079019][ T5747] syz.0.311 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 225.179327][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.860998][ T5764] loop0: detected capacity change from 0 to 1024 [ 228.466885][ T5762] hfsplus: found bad thread record in catalog [ 228.473528][ T5762] hfsplus: catalog searching failed [ 228.752148][ T144] hfsplus: found bad thread record in catalog [ 228.825788][ T144] hfsplus: found bad thread record in catalog [ 229.263325][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 229.431302][ T5767] loop5: detected capacity change from 0 to 8192 [ 229.448420][ T5767] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=uid<" [ 230.489695][ T4215] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 230.892760][ T5791] loop4: detected capacity change from 0 to 512 [ 232.097264][ T5783] kvm [5781]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x76 [ 232.112346][ T5783] kvm [5781]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4076 [ 232.123267][ T5783] kvm [5781]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 232.144020][ T5783] kvm [5781]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001 [ 232.176545][ T5783] kvm [5781]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x96 [ 232.198110][ T5783] kvm [5781]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x4096 [ 232.229727][ T5783] kvm [5781]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x36 [ 232.399511][ T4215] usb 1-1: Using ep0 maxpacket: 16 [ 232.427460][ T5791] EXT4-fs (loop4): Ignoring removed nobh option [ 232.457061][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,resgid=0x0000000000000000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 232.786841][ T4215] usb 1-1: device descriptor read/all, error -71 [ 233.678496][ T146] Bluetooth: Wrong link type (-22) [ 233.898073][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.359431][ T5814] loop1: detected capacity change from 0 to 1024 [ 236.616916][ T5843] loop5: detected capacity change from 0 to 16 [ 237.340520][ T5843] erofs: (device loop5): mounted with root inode @ nid 36. [ 237.399720][ T5853] binder: 5847:5853 ioctl c0306201 400000000680 returned -14 [ 237.873290][ T5861] loop5: detected capacity change from 0 to 512 [ 238.900739][ T5861] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 238.914666][ T5861] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.076440][ T5896] loop3: detected capacity change from 0 to 256 [ 241.360240][ T5896] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 242.817509][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.088845][ T5896] net_ratelimit: 1052 callbacks suppressed [ 243.088863][ T5896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.140223][ T5907] loop0: detected capacity change from 0 to 512 [ 243.173744][ T5908] loop4: detected capacity change from 0 to 512 [ 243.224976][ T5907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 243.258060][ T5907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 243.415179][ T5908] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.356: inode #1: comm syz.4.356: iget: illegal inode # [ 243.728459][ T5908] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.356: error while reading EA inode 1 err=-117 [ 243.899385][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.938665][ T5907] EXT4-fs (loop0): 1 orphan inode deleted [ 243.972144][ T5908] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.995860][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.024017][ T5907] EXT4-fs (loop0): 1 truncate cleaned up [ 244.081558][ T5907] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 244.152162][ T5908] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.356: inode #1: comm syz.4.356: iget: illegal inode # [ 244.423904][ T5908] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.356: error while reading EA inode 1 err=-117 [ 244.472377][ T5908] EXT4-fs (loop4): 1 orphan inode deleted [ 244.478683][ T5908] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,inode_readahead_blks=0x0000000000000010,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 244.505652][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.095848][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.947329][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.107802][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.389710][ T5959] device vlan2 entered promiscuous mode [ 249.425156][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 251.172198][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.192675][ T5958] device hsr_slave_1 left promiscuous mode [ 251.255497][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 251.265145][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.287962][ T5977] loop0: detected capacity change from 0 to 128 [ 251.385733][ T5976] device bond_slave_0 entered promiscuous mode [ 251.385856][ T5976] device bond_slave_1 entered promiscuous mode [ 251.386090][ T5976] device macvtap1 entered promiscuous mode [ 251.386103][ T5976] device bond0 entered promiscuous mode [ 251.394984][ T5976] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 251.456041][ T5977] EXT4-fs (loop0): Test dummy encryption mode enabled [ 251.456395][ T5977] EXT4-fs (loop0): Test dummy encryption mode enabled [ 251.458892][ T5980] device bond0 left promiscuous mode [ 251.459535][ T5980] device bond_slave_0 left promiscuous mode [ 251.459581][ T5980] device bond_slave_1 left promiscuous mode [ 251.580238][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 251.580411][ T5977] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.586947][ T5977] EXT4-fs (loop0): shut down requested (2) [ 251.591067][ T5977] Attempt to restore checkpoint with obsolete wellknown handles [ 251.617089][ T5982] loop3: detected capacity change from 0 to 40427 [ 251.675257][ T5982] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 251.675287][ T5982] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 251.681579][ T5982] F2FS-fs (loop3): invalid crc value [ 251.688033][ T5980] syz.1.373 (5980) used greatest stack depth: 18904 bytes left [ 251.727063][ T5982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.012997][ T5982] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 252.013031][ T5982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.372250][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.563345][ T5998] attempt to access beyond end of device [ 252.563345][ T5998] loop3: rw=2049, want=78344, limit=40427 [ 253.658572][ T6007] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.667554][ T6007] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.676467][ T6007] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.685339][ T6007] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.934450][ T6007] device geneve2 entered promiscuous mode [ 257.779780][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 257.979329][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 258.019344][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.393'. [ 258.067442][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 259.884211][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.994973][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.682289][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.688628][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.120560][ T6138] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.172725][ T6137] loop3: detected capacity change from 0 to 512 [ 266.339870][ T6137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.473088][ T6142] device syzkaller0 entered promiscuous mode [ 266.534356][ T6137] EXT4-fs (loop3): 1 truncate cleaned up [ 266.540062][ T6137] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,block_validity,quota,,errors=continue. Quota mode: writeback. [ 266.620245][ T6132] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 266.746901][ T6151] loop4: detected capacity change from 0 to 1024 [ 269.175736][ T6179] netlink: 92 bytes leftover after parsing attributes in process `syz.5.430'. [ 270.881666][ T6178] loop3: detected capacity change from 0 to 4096 [ 272.336653][ T6198] loop5: detected capacity change from 0 to 256 [ 272.360175][ T6178] NILFS (loop3): error -4 creating segctord thread [ 272.914347][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 274.224708][ T6223] loop5: detected capacity change from 0 to 128 [ 274.383161][ T6223] EXT4-fs (loop5): Test dummy encryption mode enabled [ 274.390023][ T6223] EXT4-fs (loop5): Test dummy encryption mode enabled [ 275.416669][ T6230] lo speed is unknown, defaulting to 1000 [ 275.446032][ T6230] lo speed is unknown, defaulting to 1000 [ 275.459317][ T6230] lo speed is unknown, defaulting to 1000 [ 276.284732][ T6223] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 276.332869][ T6223] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.408535][ T6223] EXT4-fs (loop5): shut down requested (2) [ 276.446143][ T6223] Attempt to restore checkpoint with obsolete wellknown handles [ 276.636212][ T6238] can: request_module (can-proto-0) failed. [ 277.066524][ T6230] infiniband sz1: set active [ 277.072736][ T6230] infiniband sz1: added lo [ 277.089375][ T6230] infiniband sz1: Couldn't open port 1 [ 277.132653][ T6230] RDS/IB: sz1: added [ 277.138044][ T6230] smc: adding ib device sz1 with port count 1 [ 277.144769][ T6230] smc: ib device sz1 port 1 has pnetid [ 277.155342][ T6230] lo speed is unknown, defaulting to 1000 [ 277.284624][ T6230] lo speed is unknown, defaulting to 1000 [ 277.402737][ T6230] lo speed is unknown, defaulting to 1000 [ 277.551511][ T6230] lo speed is unknown, defaulting to 1000 [ 277.663194][ T6230] lo speed is unknown, defaulting to 1000 [ 277.674434][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.776642][ T4215] lo speed is unknown, defaulting to 1000 [ 277.805172][ T4212] lo speed is unknown, defaulting to 1000 [ 278.774635][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.032539][ T6276] loop1: detected capacity change from 0 to 512 [ 282.080409][ T6276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.201225][ T6276] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.457: iget: bad extended attribute block 512 [ 282.224173][ T6280] io-wq is not configured for unbound workers [ 282.318087][ T6276] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.457: couldn't read orphan inode 15 (err -117) [ 282.403602][ T6285] loop0: detected capacity change from 0 to 64 [ 282.419051][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.073131][ T6305] loop1: detected capacity change from 0 to 512 [ 285.869427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.921107][ T6305] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.954241][ T7] libceph: connect (1)[c::]:6789 error -101 [ 285.961354][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 286.054894][ T6308] ceph: No mds server is up or the cluster is laggy [ 286.063755][ T1326] libceph: connect (1)[c::]:6789 error -101 [ 286.069934][ T1326] libceph: mon0 (1)[c::]:6789 connect error [ 286.129336][ T6305] EXT4-fs (loop1): 1 truncate cleaned up [ 286.215186][ T6305] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.304166][ T26] audit: type=1800 audit(1741756706.170:25): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.464" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 286.768027][ T1326] libceph: connect (1)[c::]:6789 error -101 [ 286.774049][ T1326] libceph: mon0 (1)[c::]:6789 connect error [ 287.229330][ T6334] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 287.336083][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 287.356070][ T6337] device ipvlan2 entered promiscuous mode [ 287.363642][ T6337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.457958][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.525882][ T6334] device veth3 entered promiscuous mode [ 287.559439][ T6334] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 289.248191][ T6354] loop5: detected capacity change from 0 to 512 [ 289.343434][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 291.053383][ T6366] loop3: detected capacity change from 0 to 4096 [ 291.926024][ T6375] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.285983][ T6415] device syzkaller0 entered promiscuous mode [ 297.587377][ T6436] loop0: detected capacity change from 0 to 512 [ 297.818718][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.501: inode #1: comm syz.0.501: iget: illegal inode # [ 297.977197][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.501: error while reading EA inode 1 err=-117 [ 298.140013][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.501: inode #1: comm syz.0.501: iget: illegal inode # [ 298.238978][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.501: error while reading EA inode 1 err=-117 [ 298.283614][ T6436] EXT4-fs (loop0): 1 orphan inode deleted [ 298.340309][ T6436] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,inode_readahead_blks=0x0000000000000010,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 303.628592][ T6512] loop4: detected capacity change from 0 to 2048 [ 303.735156][ T26] audit: type=1326 audit(1741756722.482:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bc16b169 code=0x7fc00000 [ 303.848149][ T6512] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 303.872651][ T6517] loop3: detected capacity change from 0 to 512 [ 303.913651][ T6519] loop1: detected capacity change from 0 to 512 [ 303.959287][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,nodiscard,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,,errors=continue. Quota mode: none. [ 304.040116][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.524: inode #1: comm syz.3.524: iget: illegal inode # [ 304.267681][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.524: error while reading EA inode 1 err=-117 [ 304.324975][ T6519] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 304.357529][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.524: inode #1: comm syz.3.524: iget: illegal inode # [ 304.462011][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.524: error while reading EA inode 1 err=-117 [ 304.648686][ T6519] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.732423][ T6517] EXT4-fs (loop3): 1 orphan inode deleted [ 304.767913][ T6517] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,inode_readahead_blks=0x0000000000000010,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 305.007571][ T6519] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.525: corrupted inode contents [ 305.092495][ T6519] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz.1.525: mark_inode_dirty error [ 305.131819][ T6519] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.525: corrupted inode contents [ 305.211190][ T6519] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.525: mark_inode_dirty error [ 305.264168][ T6537] device syzkaller0 entered promiscuous mode [ 305.335779][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 305.392246][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.515786][ T6519] device bridge_slave_1 left promiscuous mode [ 305.543757][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.852620][ T6564] loop1: detected capacity change from 0 to 1024 [ 309.495697][ T6579] loop3: detected capacity change from 0 to 1024 [ 309.648172][ T6579] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 309.738873][ T6594] loop1: detected capacity change from 0 to 512 [ 311.464909][ T6594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.546: inode #1: comm syz.1.546: iget: illegal inode # [ 311.529154][ T6594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.546: error while reading EA inode 1 err=-117 [ 311.542695][ T6594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.546: inode #1: comm syz.1.546: iget: illegal inode # [ 311.583355][ T6594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.546: error while reading EA inode 1 err=-117 [ 311.674005][ T6594] EXT4-fs (loop1): 1 orphan inode deleted [ 311.695142][ T6594] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,inode_readahead_blks=0x0000000000000010,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 318.043988][ T6668] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 322.108381][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 322.123452][ T26] audit: type=1326 audit(1741756739.644:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 322.642429][ T26] audit: type=1326 audit(1741756739.644:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f290b310ad0 code=0x7ffc0000 [ 322.679093][ T26] audit: type=1326 audit(1741756739.653:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 322.785524][ T6718] loop0: detected capacity change from 0 to 8 [ 322.903882][ T6718] squashfs: Unknown parameter '' [ 323.156784][ T6723] loop4: detected capacity change from 0 to 32768 [ 323.974609][ T26] audit: type=1326 audit(1741756739.653:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f290b310ad0 code=0x7ffc0000 [ 323.998374][ T26] audit: type=1326 audit(1741756739.653:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f290b313997 code=0x7ffc0000 [ 324.023203][ T26] audit: type=1326 audit(1741756739.653:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 324.045247][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.051925][ T26] audit: type=1326 audit(1741756739.662:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f290b313997 code=0x7ffc0000 [ 324.077983][ T26] audit: type=1326 audit(1741756739.662:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f290b310dca code=0x7ffc0000 [ 324.099919][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.108316][ T26] audit: type=1326 audit(1741756739.662:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 324.141877][ T26] audit: type=1326 audit(1741756739.662:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f290b312169 code=0x7ffc0000 [ 324.175331][ T6723] XFS (loop4): Mounting V5 Filesystem [ 324.485603][ T6723] XFS (loop4): Ending clean mount [ 324.501353][ T6723] XFS (loop4): Quotacheck needed: Please wait. [ 324.575292][ T6723] XFS (loop4): Quotacheck: Done. [ 325.211764][ T4170] XFS (loop4): Unmounting Filesystem [ 325.485909][ T6768] netlink: zone id is out of range [ 325.492606][ T6768] netlink: del zone limit has 4 unknown bytes [ 326.329452][ T6777] loop3: detected capacity change from 0 to 512 [ 326.570985][ T6777] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 326.587785][ T6777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.573426][ T6777] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.589: bad orphan inode 131083 [ 327.606156][ T6777] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,nomblk_io_submit,,errors=continue. Quota mode: none. [ 329.509024][ T6811] libceph: resolve '. [ 329.509024][ T6811] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$ [ 329.509024][ T6811] ' (ret=-3): failed [ 329.528027][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.801953][ T6821] loop0: detected capacity change from 0 to 2048 [ 330.059566][ T6821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.272095][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 330.507226][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.514299][ T26] audit: type=1107 audit(1741756747.318:45): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 330.522441][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.926356][ T6847] netlink: 'syz.4.602': attribute type 39 has an invalid length. [ 334.641608][ T6884] tipc: Enabled bearer <eth:vlan0>, priority 10 [ 334.679882][ T6884] tipc: Resetting bearer <eth:vlan0> [ 334.839687][ T6889] loop4: detected capacity change from 0 to 2048 [ 334.881945][ T6884] tipc: Disabling bearer <eth:vlan0> [ 335.005099][ T6889] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 340.306688][ T6961] UBIFS error (pid: 6961): cannot open "./file0", error -22 [ 341.910862][ T6975] binder: 6970:6975 ioctl 4018620d 0 returned -22 [ 341.935476][ T6975] binder: 6970:6975 ioctl c0306201 0 returned -14 [ 343.816136][ T6979] loop5: detected capacity change from 0 to 2048 [ 346.056166][ T6999] program syz.5.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.119822][ T7014] device vlan0 entered promiscuous mode [ 348.144762][ T7014] device nlmon0 entered promiscuous mode [ 348.220965][ T7014] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 349.159173][ T7020] hub 2-0:1.0: USB hub found [ 349.167287][ T7020] hub 2-0:1.0: 1 port detected [ 349.414771][ T7026] loop3: detected capacity change from 0 to 736 [ 350.352474][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 350.409452][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.606998][ T7044] loop5: detected capacity change from 0 to 2048 [ 350.871927][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.433946][ T7044] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.751541][ T7065] loop4: detected capacity change from 0 to 164 [ 352.842779][ T7058] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 353.909737][ T4252] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 353.951284][ T4252] EXT4-fs (loop5): This should not happen!! Data will be lost [ 353.951284][ T4252] [ 355.006760][ T4252] EXT4-fs (loop5): Total free blocks count 0 [ 355.301688][ T4252] EXT4-fs (loop5): Free/Dirty block details [ 355.375958][ T4252] EXT4-fs (loop5): free_blocks=0 [ 355.402748][ T4252] EXT4-fs (loop5): dirty_blocks=3008 [ 355.438086][ T4252] EXT4-fs (loop5): Block reservation details [ 355.525181][ T4252] EXT4-fs (loop5): i_reserved_data_blocks=188 [ 355.601369][ T7083] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 355.678186][ T7088] loop1: detected capacity change from 0 to 2048 [ 355.687995][ T7090] kvm: pic: level sensitive irq not supported [ 355.688133][ T7090] kvm: pic: non byte read [ 355.706295][ T7090] kvm: pic: level sensitive irq not supported [ 355.706395][ T7090] kvm: pic: non byte read [ 355.729719][ T7090] kvm: pic: level sensitive irq not supported [ 355.729793][ T7090] kvm: pic: non byte read [ 355.747089][ T7090] kvm: pic: level sensitive irq not supported [ 355.747254][ T7090] kvm: pic: non byte read [ 355.819768][ T4252] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 958 with error 28 [ 355.849954][ T4252] EXT4-fs (loop5): This should not happen!! Data will be lost [ 355.849954][ T4252] [ 355.886363][ T7088] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 356.188437][ T7088] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,errors=continue,mblk_io_submit,minixdf,auto_da_alloc,grpjquota=,bsddf,. Quota mode: none. [ 356.643485][ T7088] overlayfs: failed to resolve './file0/../file0': -2 [ 357.156104][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 357.684660][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.553690][ T7163] loop5: detected capacity change from 0 to 64 [ 364.400602][ T7170] binder: 7166:7170 ioctl 4018620d 0 returned -22 [ 364.518491][ T7169] binder: 7166:7169 ioctl 80089418 0 returned -22 [ 365.444233][ T7181] loop1: detected capacity change from 0 to 1024 [ 365.533608][ T7181] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 365.683751][ T7181] loop1: detected capacity change from 0 to 1024 [ 367.190723][ T7193] loop4: detected capacity change from 0 to 512 [ 367.449285][ T7193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 367.509114][ T7193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 367.540130][ T7193] System zones: 1-12 [ 367.661920][ T7193] EXT4-fs (loop4): 1 truncate cleaned up [ 368.121708][ T7193] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 368.342263][ T7207] loop0: detected capacity change from 0 to 512 [ 368.999845][ T7207] EXT4-fs (loop0): journaled quota format not specified [ 370.096951][ T7213] fuse: Unknown parameter 'v�0x000000000000000a0000000000000000000000000000000000000000' [ 370.277342][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 370.306226][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 370.332143][ T7218] device bond0 entered promiscuous mode [ 370.339676][ T7218] device bond_slave_0 entered promiscuous mode [ 370.367444][ T7218] device bond_slave_1 entered promiscuous mode [ 370.544730][ T7224] device bond0 left promiscuous mode [ 370.564713][ T7224] device bond_slave_0 left promiscuous mode [ 370.595829][ T7224] device bond_slave_1 left promiscuous mode [ 370.610011][ T7227] loop3: detected capacity change from 0 to 47 [ 371.459450][ T7239] loop0: detected capacity change from 0 to 128 [ 372.378092][ T7245] loop1: detected capacity change from 0 to 256 [ 372.483662][ T26] audit: type=1804 audit(1741756786.832:46): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.706" name="/newroot/150/file2/bus" dev="loop0" ino=1048619 res=1 errno=0 [ 375.919493][ T7245] FAT-fs (loop1): Directory bread(block 64) failed [ 375.955610][ T7245] FAT-fs (loop1): Directory bread(block 65) failed [ 375.962698][ T7245] FAT-fs (loop1): Directory bread(block 66) failed [ 375.970507][ T7245] FAT-fs (loop1): Directory bread(block 67) failed [ 375.977564][ T7245] FAT-fs (loop1): Directory bread(block 68) failed [ 375.984210][ T7245] FAT-fs (loop1): Directory bread(block 69) failed [ 375.991987][ T7245] FAT-fs (loop1): Directory bread(block 70) failed [ 375.998892][ T7245] FAT-fs (loop1): Directory bread(block 71) failed [ 376.005591][ T7245] FAT-fs (loop1): Directory bread(block 72) failed [ 376.012870][ T7245] FAT-fs (loop1): Directory bread(block 73) failed [ 378.065269][ T7282] loop1: detected capacity change from 0 to 40427 [ 378.126804][ T7290] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.218320][ T7282] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 378.227743][ T7282] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.251059][ T7282] F2FS-fs (loop1): invalid crc value [ 378.267899][ T4213] Bluetooth: hci1: command 0x0c24 tx timeout [ 378.290960][ T7282] F2FS-fs (loop1): Found nat_bits in checkpoint [ 378.706162][ T7282] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 378.713491][ T7282] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 379.696901][ T26] audit: type=1804 audit(1741756793.570:47): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.715" name="/newroot/132/bus/file0" dev="loop1" ino=10 res=1 errno=0 [ 382.213226][ T7328] siw: device registration error -23 [ 384.485214][ T7341] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 384.522448][ T7341] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 384.691385][ T7353] loop5: detected capacity change from 0 to 2048 [ 384.983703][ T7353] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 385.988177][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.077726][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.343662][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.806678][ T7394] loop3: detected capacity change from 0 to 4096 [ 387.855996][ T7394] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 387.930364][ T7394] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,max_dir_size_kb=0x00000000000000da,init_itable,nojournal_checksum,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 388.444420][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.685239][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.837884][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.205792][ T7422] loop4: detected capacity change from 0 to 40427 [ 392.897657][ T7422] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 392.906744][ T7422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 392.935569][ T7422] F2FS-fs (loop4): invalid crc value [ 393.002565][ T7422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.061107][ T7422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.068236][ T7422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.531252][ T26] audit: type=1804 audit(1741756806.448:48): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.752" name="/newroot/155/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 394.000842][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.111795][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.970898][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.993489][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.497851][ T7487] input: syz1 as /devices/virtual/input/input5 [ 399.938191][ T7490] loop3: detected capacity change from 0 to 40427 [ 400.031166][ T7490] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 400.039025][ T7490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 400.053200][ T7490] F2FS-fs (loop3): invalid crc value [ 400.125478][ T7490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.195272][ T7490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 400.202744][ T7490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 400.776714][ T26] audit: type=1804 audit(1741756813.224:49): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.767" name="/newroot/156/bus/file0" dev="loop3" ino=10 res=1 errno=0 [ 402.809971][ T7515] loop4: detected capacity change from 0 to 512 [ 403.858603][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.900870][ T7515] EXT4-fs (loop4): journaled quota format not specified [ 403.921775][ T7520] dccp_invalid_packet: invalid packet type [ 404.984766][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.215525][ T7540] libceph: resolve '. [ 406.215525][ T7540] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$ [ 406.215525][ T7540] ' (ret=-3): failed [ 406.451818][ T7549] netlink: 'syz.0.782': attribute type 9 has an invalid length. [ 406.703960][ T7549] loop0: detected capacity change from 0 to 1024 [ 407.814077][ T7549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.952924][ T7567] tmpfs: Bad value for 'nr_blocks' [ 411.401158][ T7594] loop1: detected capacity change from 0 to 4096 [ 411.505492][ T7608] loop4: detected capacity change from 0 to 128 [ 411.630718][ T7610] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.657228][ T26] audit: type=1800 audit(1741756823.556:50): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.797" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 412.717177][ T26] audit: type=1804 audit(1741756824.389:51): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.800" name="/newroot/164/file2/bus" dev="loop4" ino=1048633 res=1 errno=0 [ 412.952582][ T7617] loop3: detected capacity change from 0 to 256 [ 417.005500][ T7669] netlink: 'syz.5.814': attribute type 1 has an invalid length. [ 419.343813][ T7690] loop4: detected capacity change from 0 to 256 [ 421.053329][ T7709] loop4: detected capacity change from 0 to 4096 [ 421.090597][ T7714] loop5: detected capacity change from 0 to 128 [ 421.251064][ T7714] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.272539][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.362863][ T7720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.385588][ T7714] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 422.379732][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.293166][ T7730] ptrace attach of "./syz-executor exec"[4177] was attempted by " eth0 #�u��u0*�i��Ƈ_���k�.\x22��#p�/��yL�a��~+>�����3�l{@!2�!��9k��\x0b8I$�Q�=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�_�N���)��6m\x0a\x0b�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V:�Þ\x07x��.TTϿ��a%�Q�CuT����YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(���[�aF����*q�� �v� AN�����Te��L��+u�^����\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q( [ 424.226329][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 424.361677][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 424.427382][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 424.455212][ T26] audit: type=1326 audit(1741756835.470:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1131169 code=0x0 [ 424.470029][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 424.513746][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 424.539576][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 424.570273][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 427.267971][ T7771] loop5: detected capacity change from 0 to 2048 [ 427.317025][ T7771] NILFS (loop5): unrecognized mount option "errors=contin"" [ 427.333097][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 427.420564][ T7773] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 431.624922][ T7818] loop4: detected capacity change from 0 to 256 [ 431.893043][ T7822] loop3: detected capacity change from 0 to 3 [ 431.895151][ T7827] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 431.900588][ T7822] attempt to access beyond end of device [ 431.900588][ T7822] loop3: rw=2048, want=8, limit=3 [ 431.907287][ T7827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.918190][ T7822] SQUASHFS error: Failed to read block 0x0: -5 [ 431.918229][ T7822] unable to read squashfs_super_block [ 431.925989][ T7827] IPv6: NLM_F_CREATE should be set when creating new route [ 432.631663][ T7818] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.721815][ T7818] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 432.922354][ T7818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 433.088442][ T7836] --map-set only usable from mangle table [ 433.494719][ T26] audit: type=1804 audit(1741756843.894:53): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.859" name="/newroot/178/file0/bus" dev="loop4" ino=1048647 res=1 errno=0 [ 434.320340][ T7853] loop1: detected capacity change from 0 to 2048 [ 436.445905][ T7853] UDF-fs: bad mount option "anchor=00000000002147483649" or missing value [ 436.868202][ T7863] mmap: syz.3.868 (7863) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 437.335569][ T7869] loop5: detected capacity change from 0 to 512 [ 437.850649][ T7869] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 438.222217][ T7869] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.337921][ T7890] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 440.363508][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 440.407381][ T7890] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 440.437415][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.502182][ T7905] loop4: detected capacity change from 0 to 512 [ 440.748969][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.293191][ T7920] loop4: detected capacity change from 0 to 512 [ 442.463420][ T7920] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 442.478074][ T7920] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.998796][ T7942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 446.057754][ T7962] hub 2-0:1.0: USB hub found [ 446.063594][ T7962] hub 2-0:1.0: 1 port detected [ 447.705808][ T7977] loop3: detected capacity change from 0 to 164 [ 448.060228][ T7985] loop0: detected capacity change from 0 to 164 [ 449.941577][ T7990] loop4: detected capacity change from 0 to 2048 [ 451.641286][ T7990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 451.785703][ T8016] loop3: detected capacity change from 0 to 512 [ 452.034197][ T8016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 452.149581][ T8016] EXT4-fs (loop3): 1 truncate cleaned up [ 452.161912][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 452.204150][ T8016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.592949][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 454.819233][ T8064] orangefs_mount: mount request failed with -4 [ 455.054396][ T8070] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 455.214409][ T8070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.367980][ T8070] bond0: (slave rose0): Enslaving as an active interface with an up link [ 455.473509][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 455.814570][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.042813][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.610031][ T8096] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 458.417670][ T8080] device syzkaller0 entered promiscuous mode [ 461.199430][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.208191][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.785299][ T8133] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 462.241297][ T8159] loop1: detected capacity change from 0 to 64 [ 462.442102][ T26] audit: type=1804 audit(1741756871.442:54): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.941" name="/newroot/172/file0/bus" dev="loop1" ino=21 res=1 errno=0 [ 463.839149][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 466.711781][ T8222] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 467.881472][ T8229] orangefs_mount: mount request failed with -4 [ 467.908518][ T8230] ptrace attach of "./syz-executor exec"[4169] was attempted by " eth0 #�u��u0*�i��Ƈ_���k�.\x22��#p�/��yL�a��~+>�����3�l{@!2�!��9k��\x0b8I$�Q�=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�_�N���)��6m\x0a\x0b�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V:�Þ\x07x��.TTϿ��a%�Q�CuT����YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(���[�aF����*q�� �v� AN�����Te��L��+u�^����\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q( [ 468.898636][ T8238] fuse: Unknown parameter 'v�0x000000000000000a0000000000000000000000000000000000000000' [ 468.946315][ T8249] device vlan0 entered promiscuous mode [ 468.985653][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.283501][ T8249] device nlmon0 entered promiscuous mode [ 469.314978][ T8249] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 471.254139][ T8267] loop0: detected capacity change from 0 to 2048 [ 472.294287][ T8267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.846045][ T8295] orangefs_mount: mount request failed with -4 [ 475.376608][ T8308] loop0: detected capacity change from 0 to 512 [ 475.513110][ T8311] UBIFS error (pid: 8311): cannot open "./file0", error -22 [ 476.534839][ T8308] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 476.831777][ T8308] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.978: invalid block [ 477.038778][ T8308] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.978: couldn't read orphan inode 11 (err -117) [ 477.188732][ T8308] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,noinit_itable,bsddf,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,usrquota,noauto_da_alloc,journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 478.815635][ T8333] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2840 [ 479.888928][ T8344] loop0: detected capacity change from 0 to 2048 [ 479.982131][ T8350] loop3: detected capacity change from 0 to 512 [ 480.001504][ T8344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.023121][ T8349] loop1: detected capacity change from 0 to 4096 [ 480.138887][ T8350] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 480.189426][ T8350] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.217909][ T8350] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.989: corrupted inode contents [ 480.234811][ T8350] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.989: mark_inode_dirty error [ 480.267705][ T8350] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.989: corrupted inode contents [ 480.342513][ T8354] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.399675][ T8350] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.989: mark_inode_dirty error [ 480.900747][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 480.947686][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.308712][ T8350] device bridge_slave_1 left promiscuous mode [ 481.314855][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.823041][ T8365] loop1: detected capacity change from 0 to 128 [ 483.315661][ T26] audit: type=1804 audit(1741756891.056:55): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.991" name="/newroot/186/file2/bus" dev="loop1" ino=1048648 res=1 errno=0 [ 487.758666][ T8416] loop5: detected capacity change from 0 to 4096 [ 487.944190][ T8424] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.935784][ T5066] attempt to access beyond end of device [ 488.935784][ T5066] loop0: rw=1, want=2049, limit=2048 [ 488.979199][ T5066] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 489.039871][ T5066] attempt to access beyond end of device [ 489.039871][ T5066] loop0: rw=1, want=2049, limit=2048 [ 489.079859][ T5066] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 489.089662][ T5066] attempt to access beyond end of device [ 489.089662][ T5066] loop0: rw=1, want=2049, limit=2048 [ 489.100991][ T5066] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 489.110519][ T5066] attempt to access beyond end of device [ 489.110519][ T5066] loop0: rw=1, want=2049, limit=2048 [ 489.216800][ T5066] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 489.247446][ T5066] attempt to access beyond end of device [ 489.247446][ T5066] loop0: rw=1, want=2049, limit=2048 [ 489.266501][ T8438] loop5: detected capacity change from 0 to 512 [ 489.323435][ T5066] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 489.409360][ T5066] attempt to access beyond end of device [ 489.409360][ T5066] loop0: rw=1, want=2050, limit=2048 [ 489.468444][ T8438] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 489.520149][ T8444] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 489.579595][ T5066] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 489.658407][ T8438] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.931279][ T5066] attempt to access beyond end of device [ 489.931279][ T5066] loop0: rw=1, want=2050, limit=2048 [ 490.039599][ T8438] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.1004: corrupted inode contents [ 490.088223][ T8438] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.1004: mark_inode_dirty error [ 490.121483][ T5066] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 490.158596][ T5066] attempt to access beyond end of device [ 490.158596][ T5066] loop0: rw=1, want=2050, limit=2048 [ 490.183914][ T8438] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.1004: corrupted inode contents [ 490.226520][ T5066] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 490.257295][ T8438] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1004: mark_inode_dirty error [ 490.311861][ T5066] attempt to access beyond end of device [ 490.311861][ T5066] loop0: rw=1, want=2050, limit=2048 [ 490.393721][ T5066] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 490.410272][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 490.458058][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.475486][ T5066] attempt to access beyond end of device [ 490.475486][ T5066] loop0: rw=1, want=2050, limit=2048 [ 490.549070][ T5066] Buffer I/O error on dev loop0, logical block 2049, lost async page write [ 490.708728][ T8438] device bridge_slave_1 left promiscuous mode [ 490.719060][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.164851][ T8466] device syzkaller0 entered promiscuous mode [ 491.504596][ T8478] tipc: Enabling of bearer <�z:l> rejected, media not registered [ 492.193488][ T9] ------------[ cut here ]------------ [ 492.202084][ T9] WARNING: CPU: 0 PID: 9 at fs/udf/truncate.c:208 udf_truncate_extents+0xf90/0x11a0 [ 492.212263][ T9] Modules linked in: [ 492.217543][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.178-syzkaller #0 [ 492.229453][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 492.242304][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 492.265142][ T9] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 492.298304][ T9] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 9c 6a 99 fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 80 6a 99 fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 492.327053][ T8484] batman_adv: batadv0: Adding interface: vxlan0 [ 492.338751][ T8484] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.372081][ T9] RSP: 0018:ffffc90000ce65a0 EFLAGS: 00010293 [ 492.398008][ T8484] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 492.409558][ T9] RAX: ffffffff82e71b10 RBX: 1ffff9200019cccc RCX: ffff88813ff90000 [ 492.417906][ T9] RDX: 0000000000000000 RSI: 0000008001da13fb RDI: 0000000000000000 [ 492.425906][ T9] RBP: ffffc90000ce6790 R08: ffffffff82e7100b R09: ffffffff82e4fb6b [ 492.433941][ T9] R10: 0000000000000002 R11: ffff88813ff90000 R12: dffffc0000000000 [ 492.470204][ T9] R13: 0000008001da13fb R14: 0000000000000000 R15: 00000000000000ff [ 492.478232][ T9] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 492.489291][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.497984][ T9] CR2: 00007f8bc131d178 CR3: 0000000063401000 CR4: 00000000003506e0 [ 492.509911][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.520600][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.530997][ T9] Call Trace: [ 492.535947][ T9] <TASK> [ 492.538951][ T9] ? __warn+0x15b/0x300 [ 492.543691][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 492.573440][ T9] ? report_bug+0x1b7/0x2e0 [ 492.580010][ T9] ? handle_bug+0x3d/0x70 [ 492.584506][ T9] ? exc_invalid_op+0x16/0x40 [ 492.594906][ T9] ? asm_exc_invalid_op+0x16/0x20 [ 492.602127][ T9] ? udf_current_aext+0x3ab/0xa50 [ 492.607341][ T9] ? udf_truncate_extents+0x48b/0x11a0 [ 492.616116][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 492.624088][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 492.630167][ T9] ? udf_discard_prealloc+0x860/0x860 [ 493.108360][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.118552][ T9] ? do_raw_spin_lock+0x14a/0x370 [ 493.124331][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.129585][ T9] udf_do_extend_file+0xdc9/0x1140 [ 493.141379][ T9] ? udf_current_aext+0x5f9/0xa50 [ 493.147023][ T9] ? udf_write_failed+0x1b0/0x1b0 [ 493.152127][ T9] ? udf_next_aext+0x371/0x430 [ 493.163576][ T9] udf_get_block+0x1727/0x5360 [ 493.168928][ T9] ? udf_bread+0x600/0x600 [ 493.173377][ T9] ? rcu_lock_acquire+0x30/0x30 [ 493.184728][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.190464][ T9] ? reacquire_held_locks+0x660/0x660 [ 493.195881][ T9] ? reacquire_held_locks+0x660/0x660 [ 493.208066][ T9] ? __unlock_page_memcg+0xfd/0x110 [ 493.240189][ T9] ? __lock_acquire+0x1295/0x1ff0 [ 493.245634][ T9] __mpage_writepage+0x4f9/0x1c00 [ 493.250812][ T9] ? mpage_writepages+0x2f0/0x2f0 [ 493.256014][ T9] ? wait_on_page_writeback+0x1a0/0x1a0 [ 493.261883][ T9] write_cache_pages+0xa97/0x1160 [ 493.281575][ T9] ? mpage_writepages+0x2f0/0x2f0 [ 493.287449][ T9] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 493.302761][ T9] ? mark_lock+0x98/0x340 [ 493.307388][ T9] ? udf_bread+0x600/0x600 [ 493.311941][ T9] mpage_writepages+0x13c/0x2f0 [ 493.323293][ T9] ? clean_buffers+0x2a0/0x2a0 [ 493.328582][ T9] ? udf_bread+0x600/0x600 [ 493.333048][ T9] ? udf_readpage+0x20/0x20 [ 493.338030][ T9] do_writepages+0x481/0x730 [ 493.342659][ T9] ? __writepage+0x120/0x120 [ 493.349522][ T9] ? read_lock_is_recursive+0x10/0x10 [ 493.355303][ T9] ? writeback_sb_inodes+0x732/0x1a40 [ 493.360856][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.365918][ T9] ? do_raw_spin_lock+0x14a/0x370 [ 493.371068][ T9] __writeback_single_inode+0x15b/0xe30 [ 493.376643][ T9] writeback_sb_inodes+0xbce/0x1a40 [ 493.381925][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.386987][ T9] ? queue_io+0x560/0x560 [ 493.391374][ T9] ? __writeback_inodes_wb+0x400/0x400 [ 493.396862][ T9] ? queue_io+0x3d3/0x560 [ 493.401406][ T9] wb_writeback+0x451/0xc50 [ 493.406109][ T9] ? rcu_lock_release+0x20/0x20 [ 493.411053][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 493.417060][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.422356][ T9] wb_workfn+0x46c/0x1130 [ 493.426712][ T9] ? mark_lock+0x98/0x340 [ 493.431107][ T9] ? inode_wait_for_writeback+0x280/0x280 [ 493.436900][ T9] ? read_lock_is_recursive+0x10/0x10 [ 493.442289][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 493.448328][ T9] ? print_irqtrace_events+0x210/0x210 [ 493.453848][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.459071][ T9] process_one_work+0x8a1/0x10c0 [ 493.464424][ T9] ? worker_detach_from_pool+0x260/0x260 [ 493.470095][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 493.476123][ T9] ? kthread_data+0x4e/0xc0 [ 493.480680][ T9] ? wq_worker_running+0x97/0x170 [ 493.486731][ T9] worker_thread+0xaca/0x1280 [ 493.491568][ T9] kthread+0x3f6/0x4f0 [ 493.495738][ T9] ? rcu_lock_release+0x20/0x20 [ 493.501345][ T9] ? kthread_blkcg+0xd0/0xd0 [ 493.505994][ T9] ret_from_fork+0x1f/0x30 [ 493.510540][ T9] </TASK> [ 493.513579][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 493.520851][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.178-syzkaller #0 [ 493.528919][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.538990][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 493.545016][ T9] Call Trace: [ 493.548291][ T9] <TASK> [ 493.551394][ T9] dump_stack_lvl+0x1e3/0x2d0 [ 493.556089][ T9] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 493.561725][ T9] ? panic+0x860/0x860 [ 493.565812][ T9] ? udf_truncate_extents+0xf80/0x11a0 [ 493.571280][ T9] ? udf_truncate_extents+0xf80/0x11a0 [ 493.577023][ T9] panic+0x318/0x860 [ 493.580946][ T9] ? __warn+0x16a/0x300 [ 493.585132][ T9] ? fb_is_primary_device+0xd0/0xd0 [ 493.590339][ T9] ? ret_from_fork+0x1f/0x30 [ 493.594937][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 493.600424][ T9] __warn+0x2b2/0x300 [ 493.604418][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 493.609894][ T9] report_bug+0x1b7/0x2e0 [ 493.614250][ T9] handle_bug+0x3d/0x70 [ 493.618425][ T9] exc_invalid_op+0x16/0x40 [ 493.622941][ T9] asm_exc_invalid_op+0x16/0x20 [ 493.627793][ T9] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 493.633899][ T9] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 9c 6a 99 fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 80 6a 99 fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 493.653503][ T9] RSP: 0018:ffffc90000ce65a0 EFLAGS: 00010293 [ 493.659580][ T9] RAX: ffffffff82e71b10 RBX: 1ffff9200019cccc RCX: ffff88813ff90000 [ 493.667574][ T9] RDX: 0000000000000000 RSI: 0000008001da13fb RDI: 0000000000000000 [ 493.675565][ T9] RBP: ffffc90000ce6790 R08: ffffffff82e7100b R09: ffffffff82e4fb6b [ 493.683559][ T9] R10: 0000000000000002 R11: ffff88813ff90000 R12: dffffc0000000000 [ 493.691536][ T9] R13: 0000008001da13fb R14: 0000000000000000 R15: 00000000000000ff [ 493.699518][ T9] ? udf_current_aext+0x3ab/0xa50 [ 493.704579][ T9] ? udf_truncate_extents+0x48b/0x11a0 [ 493.710044][ T9] ? udf_truncate_extents+0xf90/0x11a0 [ 493.715554][ T9] ? udf_discard_prealloc+0x860/0x860 [ 493.720948][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.725986][ T9] ? do_raw_spin_lock+0x14a/0x370 [ 493.731016][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.736294][ T9] udf_do_extend_file+0xdc9/0x1140 [ 493.741421][ T9] ? udf_current_aext+0x5f9/0xa50 [ 493.746466][ T9] ? udf_write_failed+0x1b0/0x1b0 [ 493.751505][ T9] ? udf_next_aext+0x371/0x430 [ 493.756300][ T9] udf_get_block+0x1727/0x5360 [ 493.761121][ T9] ? udf_bread+0x600/0x600 [ 493.765539][ T9] ? rcu_lock_acquire+0x30/0x30 [ 493.770405][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.775433][ T9] ? reacquire_held_locks+0x660/0x660 [ 493.780818][ T9] ? reacquire_held_locks+0x660/0x660 [ 493.786228][ T9] ? __unlock_page_memcg+0xfd/0x110 [ 493.791480][ T9] ? __lock_acquire+0x1295/0x1ff0 [ 493.796555][ T9] __mpage_writepage+0x4f9/0x1c00 [ 493.801613][ T9] ? mpage_writepages+0x2f0/0x2f0 [ 493.806670][ T9] ? wait_on_page_writeback+0x1a0/0x1a0 [ 493.812262][ T9] write_cache_pages+0xa97/0x1160 [ 493.817311][ T9] ? mpage_writepages+0x2f0/0x2f0 [ 493.822349][ T9] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 493.828003][ T9] ? mark_lock+0x98/0x340 [ 493.832352][ T9] ? udf_bread+0x600/0x600 [ 493.836784][ T9] mpage_writepages+0x13c/0x2f0 [ 493.841651][ T9] ? clean_buffers+0x2a0/0x2a0 [ 493.846456][ T9] ? udf_bread+0x600/0x600 [ 493.850906][ T9] ? udf_readpage+0x20/0x20 [ 493.855437][ T9] do_writepages+0x481/0x730 [ 493.860047][ T9] ? __writepage+0x120/0x120 [ 493.864660][ T9] ? read_lock_is_recursive+0x10/0x10 [ 493.870036][ T9] ? writeback_sb_inodes+0x732/0x1a40 [ 493.875416][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.880450][ T9] ? do_raw_spin_lock+0x14a/0x370 [ 493.885500][ T9] __writeback_single_inode+0x15b/0xe30 [ 493.891056][ T9] writeback_sb_inodes+0xbce/0x1a40 [ 493.896264][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.901323][ T9] ? queue_io+0x560/0x560 [ 493.905702][ T9] ? __writeback_inodes_wb+0x400/0x400 [ 493.911181][ T9] ? queue_io+0x3d3/0x560 [ 493.915542][ T9] wb_writeback+0x451/0xc50 [ 493.920091][ T9] ? rcu_lock_release+0x20/0x20 [ 493.924963][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 493.930972][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.936201][ T9] wb_workfn+0x46c/0x1130 [ 493.940603][ T9] ? mark_lock+0x98/0x340 [ 493.944945][ T9] ? inode_wait_for_writeback+0x280/0x280 [ 493.950670][ T9] ? read_lock_is_recursive+0x10/0x10 [ 493.956059][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 493.962051][ T9] ? print_irqtrace_events+0x210/0x210 [ 493.967600][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 493.972836][ T9] process_one_work+0x8a1/0x10c0 [ 493.977797][ T9] ? worker_detach_from_pool+0x260/0x260 [ 493.983457][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 493.989035][ T9] ? kthread_data+0x4e/0xc0 [ 493.993555][ T9] ? wq_worker_running+0x97/0x170 [ 493.998681][ T9] worker_thread+0xaca/0x1280 [ 494.003393][ T9] kthread+0x3f6/0x4f0 [ 494.007468][ T9] ? rcu_lock_release+0x20/0x20 [ 494.012428][ T9] ? kthread_blkcg+0xd0/0xd0 [ 494.017063][ T9] ret_from_fork+0x1f/0x30 [ 494.021502][ T9] </TASK> [ 494.024778][ T9] Kernel Offset: disabled [ 494.029466][ T9] Rebooting in 86400 seconds..