last executing test programs: 4m25.636427607s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4m25.330245072s ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 4m25.107768375s ago: executing program 0 (id=7): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1a9c51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 4m25.004106817s ago: executing program 0 (id=8): openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m24.637850553s ago: executing program 0 (id=12): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 4m24.356032108s ago: executing program 32 (id=12): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 4m14.09771874s ago: executing program 2 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x7ff, 0x5}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000003c0)='%', 0x1, 0x8014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 4m13.425099491s ago: executing program 2 (id=56): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18ca02a0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 4m12.309040119s ago: executing program 2 (id=59): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x1, 0x29, 0x8, 0x400, 0x0, 0x4, 0x3, 0x2349}, &(0x7f0000000400)={0xffffffffffffffff, 0xa41, 0x3a37, 0x5, 0x1, 0x72a7, 0x4}, &(0x7f00000004c0)={0x7f, 0x4, 0x4ef11bc2, 0x0, 0x10001, 0x7, 0xc000000000000000, 0xffff}, &(0x7f0000000500)={0x77359400}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001600)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 4m11.991056465s ago: executing program 2 (id=61): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, 0x0, {0x2000000000000000, 0x0, 0x0, {0x1, 0x0, 0x8000, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2fb74000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) 4m9.009032275s ago: executing program 2 (id=68): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 4m8.481888243s ago: executing program 2 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 4m8.0963909s ago: executing program 33 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 3m46.977736807s ago: executing program 6 (id=163): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6000001) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3m46.596929001s ago: executing program 6 (id=167): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r6, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3m45.018801631s ago: executing program 6 (id=169): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m44.866211833s ago: executing program 6 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0) 3m44.670610325s ago: executing program 6 (id=171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3m44.2980568s ago: executing program 6 (id=178): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080004000000000005"], 0x44}}, 0x0) 3m44.072757992s ago: executing program 34 (id=178): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080004000000000005"], 0x44}}, 0x0) 12.14515096s ago: executing program 1 (id=1027): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000280)=0x1, 0x4) close(0x3) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000760000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 10.335534903s ago: executing program 1 (id=1033): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x549, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}]}}]}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.789628219s ago: executing program 1 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x1000000, 0x1000, 0x2}, 0x20) 8.609648504s ago: executing program 4 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000440)="d30737ae8a3c", 0x6, 0x80, 0x0, 0x0) shutdown(r3, 0x1) 8.595091014s ago: executing program 5 (id=1038): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 7.020633523s ago: executing program 1 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010003904fcffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="0126050000000200140012800b000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200000000000081"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 7.006299764s ago: executing program 5 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000008200000300012800b00010065727370616e00"], 0x50}}, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) 6.966330894s ago: executing program 4 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 6.863010196s ago: executing program 3 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket(0xa, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.874193718s ago: executing program 4 (id=1047): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) prctl$PR_MCE_KILL(0x35, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466", 0x48, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x28080, 0x0, 0x0) 5.289936155s ago: executing program 1 (id=1049): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r2}, 0x10) 5.095880317s ago: executing program 3 (id=1050): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x104804, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x3}, {0xfff2, 0xffff}, {0xffe0, 0xb}}}, 0x24}}, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 5.095213677s ago: executing program 5 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x4800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5e572b0c0", 0x82}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r4, &(0x7f0000000300), 0x5b0) 5.032661798s ago: executing program 4 (id=1051): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x1043) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[], 0x85b) 4.207083908s ago: executing program 5 (id=1053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 4.07541934s ago: executing program 1 (id=1054): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) 4.07441547s ago: executing program 3 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000440)="d30737ae8a3c", 0x6, 0x80, 0x0, 0x0) shutdown(r3, 0x1) 2.681967797s ago: executing program 7 (id=1056): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0xff0f, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket(0x28, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000280)="d1a71a3d5fc7d69b34388322753dbfdf5dd95198"}, 0x20) syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) 2.230027122s ago: executing program 7 (id=1057): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) capget(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x0, 0x0, 0xbd5a, 0x80000001, 0x0, 0xf}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.229828513s ago: executing program 3 (id=1058): r0 = gettid() fchdir(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r0, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1.518458141s ago: executing program 5 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)="d1a3d4c0dae5ee", 0x7) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 1.259520105s ago: executing program 7 (id=1061): socket$kcm(0x11, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(r1, 0x40049409, r0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1.217119085s ago: executing program 4 (id=1062): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 1.017193978s ago: executing program 7 (id=1063): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1", 0x9}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 995.408168ms ago: executing program 3 (id=1064): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) close(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000280)="b7bb28010677f20293eae24fa9cbc2a8e476c0d318075cc7c7cf494e4bd8734ef2ba7edd73c599aee7ded91db16a6e870841f1e7f4f151816eb9533b65f9610b24581d22f3ecb416", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 779.234321ms ago: executing program 7 (id=1065): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r8, 0x4) 157.833399ms ago: executing program 3 (id=1066): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 124.642229ms ago: executing program 5 (id=1067): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x233, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 18.18453ms ago: executing program 4 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, 0x0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0xea60}}, &(0x7f00000000c0)) 0s ago: executing program 7 (id=1069): syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x4e24, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003, 0x0, 0x0, 0x4}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) kernel console output (not intermixed with test programs): 81 - 0 [ 64.892713][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.902115][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.911076][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.930979][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.941032][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.951329][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.955760][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969446][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.980481][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.991379][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.002295][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.013398][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.024289][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.035655][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.061179][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.073053][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.082172][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.094191][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105313][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.115651][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.127784][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.138425][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.148987][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.159385][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.170899][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.184942][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.202185][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.213168][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.243026][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.253805][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.262942][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.272048][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.307192][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.308815][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.315176][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.331529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.340242][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.382709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.443949][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.460614][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.510651][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.520244][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.543460][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.589109][ T4380] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 65.629450][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.630920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.676110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.715125][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.728726][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.738751][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.752643][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.968088][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 65.976799][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 65.982855][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 65.994427][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 66.048283][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 66.057692][ T4394] ======================================================= [ 66.057692][ T4394] WARNING: The mand mount option has been deprecated and [ 66.057692][ T4394] and is ignored by this kernel. Remove the mand [ 66.057692][ T4394] option from the mount to silence this warning. [ 66.057692][ T4394] ======================================================= [ 66.267816][ T4272] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.321930][ T4396] Zero length message leads to an empty skb [ 66.332220][ T4396] binder: 4395:4396 ioctl 4018620d 0 returned -22 [ 66.393021][ T4399] binder: 4395:4399 ioctl c018620c 0 returned -14 [ 66.426254][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 66.494636][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.496842][ T4272] usb 3-1: Using ep0 maxpacket: 16 [ 66.519497][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.539501][ T4272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.556358][ T4272] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.567952][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.595092][ T4272] usb 3-1: config 0 descriptor?? [ 66.614824][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.614842][ T4272] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 66.751875][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.864673][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.985701][ T4272] usb 3-1: USB disconnect, device number 2 [ 67.104900][ T4413] loop3: detected capacity change from 0 to 1024 [ 67.292461][ T4413] syz.3.16: attempt to access beyond end of device [ 67.292461][ T4413] loop3: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 67.382442][ T4413] syz.3.16: attempt to access beyond end of device [ 67.382442][ T4413] loop3: rw=2049, sector=8556385938, nr_sectors = 2 limit=1024 [ 67.461115][ T4413] Buffer I/O error on dev loop3, logical block 4278192969, lost async page write [ 67.528213][ T4413] syz.3.16: attempt to access beyond end of device [ 67.528213][ T4413] loop3: rw=2049, sector=393216, nr_sectors = 2 limit=1024 [ 67.577658][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.584400][ T4413] Buffer I/O error on dev loop3, logical block 196608, lost async page write [ 67.596920][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.601547][ T4413] syz.3.16: attempt to access beyond end of device [ 67.601547][ T4413] loop3: rw=2049, sector=393218, nr_sectors = 2 limit=1024 [ 67.627283][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.628787][ T4413] Buffer I/O error on dev loop3, logical block 196609, lost async page write [ 67.674593][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.683229][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.691088][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.698398][ T4413] syz.3.16: attempt to access beyond end of device [ 67.698398][ T4413] loop3: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 67.736901][ T4413] Buffer I/O error on dev loop3, logical block 196610, lost async page write [ 68.009165][ T11] kworker/u4:1: attempt to access beyond end of device [ 68.009165][ T11] loop3: rw=1, sector=393216, nr_sectors = 2 limit=1024 [ 68.045613][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 68.072348][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.080093][ T11] Buffer I/O error on dev loop3, logical block 196608, lost async page write [ 68.085019][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.144725][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.176931][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.297048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.676982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.195118][ T4421] chnl_net:caif_netlink_parms(): no params data found [ 69.785702][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.808463][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 69.826262][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.872600][ T4421] device bridge_slave_0 entered promiscuous mode [ 69.950065][ T33] device hsr_slave_0 left promiscuous mode [ 69.976319][ T33] device hsr_slave_1 left promiscuous mode [ 69.991504][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.006883][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.026969][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.065377][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.113663][ T33] device bridge_slave_1 left promiscuous mode [ 70.156827][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.206339][ T33] device bridge_slave_0 left promiscuous mode [ 70.234290][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.351992][ T33] device veth1_macvtap left promiscuous mode [ 70.436755][ T33] device veth0_macvtap left promiscuous mode [ 70.464719][ T33] device veth1_vlan left promiscuous mode [ 70.492159][ T33] device veth0_vlan left promiscuous mode [ 71.501503][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.509492][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.655199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 71.663659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 71.886877][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 72.145436][ T33] team0 (unregistering): Port device team_slave_1 removed [ 72.205556][ T33] team0 (unregistering): Port device team_slave_0 removed [ 72.271971][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.336310][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.469761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.909393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.941946][ T33] bond0 (unregistering): Released all slaves [ 73.037141][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.044309][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.056296][ T4421] device bridge_slave_1 entered promiscuous mode [ 73.065682][ T4505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 73.085174][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 73.263582][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.293895][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.460877][ T4421] team0: Port device team_slave_0 added [ 73.508615][ T4421] team0: Port device team_slave_1 added [ 73.635046][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.660302][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.748086][ T4421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.779256][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.792868][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.856321][ T4421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.966851][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 73.986260][ T4421] device hsr_slave_0 entered promiscuous mode [ 74.003004][ T4421] device hsr_slave_1 entered promiscuous mode [ 74.054895][ T4421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.104564][ T4421] Cannot create hsr debugfs directory [ 74.386958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.620103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.688248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.610238][ T4421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.634636][ T4421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.659025][ T4421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.717861][ T4421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.046816][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 76.178212][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.250038][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.313705][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.341741][ T4421] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.374063][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.404987][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.434095][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.441273][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.493454][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.529476][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.542985][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.574971][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.582166][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.610780][ T27] cfg80211: failed to load regulatory.db [ 76.684559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.722153][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.904261][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.948601][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.987840][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.028870][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.119837][ T4421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.157496][ T4421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.205318][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.222609][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.263105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.312886][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.345678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.380880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.045844][ T4589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.57'. [ 78.720565][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.736987][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.806034][ T4421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.029378][ T26] audit: type=1326 audit(1753368950.677:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.083462][ T26] audit: type=1326 audit(1753368950.687:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.210611][ T26] audit: type=1326 audit(1753368950.687:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.245291][ T4602] loop2: detected capacity change from 0 to 512 [ 79.287749][ T26] audit: type=1326 audit(1753368950.687:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.329906][ T4602] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.457984][ T4602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.474565][ T26] audit: type=1326 audit(1753368950.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.478562][ T4606] xt_connbytes: Forcing CT accounting to be enabled [ 79.508138][ T4606] Cannot find set identified by id 0 to match [ 79.586833][ T26] audit: type=1326 audit(1753368950.687:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.609850][ T26] audit: type=1326 audit(1753368950.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.632895][ T26] audit: type=1326 audit(1753368950.687:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 79.961041][ T4602] EXT4-fs (loop2): 1 truncate cleaned up [ 79.972409][ T26] audit: type=1326 audit(1753368950.687:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 80.019173][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.033978][ T26] audit: type=1326 audit(1753368950.687:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7b8e9a9 code=0x7ffc0000 [ 80.220169][ T4602] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 80.316807][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 80.350936][ T4602] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #18: comm syz.2.61: mark_inode_dirty error [ 80.436720][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 80.472284][ T4602] EXT4-fs error (device loop2): ext4_get_max_inline_size:116: inode #18: comm syz.2.61: can't get inode location 18 [ 80.558027][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 80.616143][ T4602] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 80.668696][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.710175][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.779567][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 80.821202][ T4602] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #18: comm syz.2.61: mark_inode_dirty error [ 80.851663][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.874469][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.895355][ T4421] device veth0_vlan entered promiscuous mode [ 80.904883][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.925136][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.938851][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 80.956024][ T4421] device veth1_vlan entered promiscuous mode [ 80.994328][ T4602] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 81.020917][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.033695][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.043987][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.059495][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 81.072082][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.081866][ T4602] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #18: comm syz.2.61: mark_inode_dirty error [ 81.104151][ T4421] device veth0_macvtap entered promiscuous mode [ 81.122073][ T4421] device veth1_macvtap entered promiscuous mode [ 81.134627][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 81.165303][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.187098][ T4602] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 81.206688][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.221749][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 81.260480][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.281294][ T4602] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #18: comm syz.2.61: mark_inode_dirty error [ 81.295108][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.337924][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.358165][ T4602] EXT4-fs (loop2): Remounting filesystem read-only [ 81.383818][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.423304][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.442850][ T4602] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 18: block 37:freeing already freed block (bit 36); block bitmap corrupt. [ 81.468507][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.490494][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.513233][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.544176][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.574602][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.601441][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.603687][ T4610] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 81.612303][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.635271][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.677916][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.727915][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.781709][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.834464][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.867814][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.910807][ T4421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.939912][ T4421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.981205][ T4421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021783][ T4421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.249045][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.262148][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.295513][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.433202][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.476990][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.501846][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.681113][ T4478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.834260][ T4478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.869833][ T4633] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.69'. [ 82.975383][ T4478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.089513][ T4478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.848941][ T4636] loop5: detected capacity change from 0 to 32768 [ 84.211145][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.228333][ T4636] XFS (loop5): Mounting V5 Filesystem [ 84.257208][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.269135][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.289736][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.305161][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.313055][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.459455][ T4636] XFS (loop5): Ending clean mount [ 84.548937][ T4636] XFS (loop5): Quotacheck needed: Please wait. [ 84.680453][ T4636] XFS (loop5): Quotacheck: Done. [ 84.861578][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 84.861594][ T26] audit: type=1800 audit(1753368956.507:53): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13" name="file2" dev="loop5" ino=9287 res=0 errno=0 [ 84.953162][ T4654] chnl_net:caif_netlink_parms(): no params data found [ 85.305430][ T4685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.318463][ T4478] device hsr_slave_0 left promiscuous mode [ 85.327284][ T4478] device hsr_slave_1 left promiscuous mode [ 85.334876][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.344812][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.363451][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.373441][ T4686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.387765][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.398564][ T4421] XFS (loop5): Unmounting Filesystem [ 85.401160][ T4478] device bridge_slave_1 left promiscuous mode [ 85.414632][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.423568][ T4478] device bridge_slave_0 left promiscuous mode [ 85.445805][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.466001][ T4686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.533063][ T4478] device veth1_macvtap left promiscuous mode [ 85.539411][ T4478] device veth0_macvtap left promiscuous mode [ 85.577152][ T4478] device veth1_vlan left promiscuous mode [ 85.583315][ T4478] device veth0_vlan left promiscuous mode [ 86.368429][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 86.882537][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 86.953127][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 86.998797][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.041218][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.602703][ T4478] bond0 (unregistering): Released all slaves [ 88.310995][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.326867][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.338081][ T4654] device bridge_slave_0 entered promiscuous mode [ 88.405057][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.416835][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.441808][ T4654] device bridge_slave_1 entered promiscuous mode [ 88.456797][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 88.588055][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.618486][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.651439][ T4654] team0: Port device team_slave_0 added [ 88.663426][ T4731] netlink: 'syz.5.100': attribute type 10 has an invalid length. [ 88.773608][ T4731] team0: Port device dummy0 added [ 88.785826][ T4654] team0: Port device team_slave_1 added [ 88.801405][ T4733] netlink: 'syz.5.100': attribute type 10 has an invalid length. [ 88.832837][ T4733] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 88.870305][ T4733] team0: Failed to send options change via netlink (err -105) [ 88.878527][ T4733] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 88.889310][ T4733] team0: Port device dummy0 removed [ 88.900031][ T4733] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.967961][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.979687][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.006899][ T4272] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.036706][ T4654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.067478][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.075206][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.104875][ T4654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.206972][ T4272] usb 4-1: Using ep0 maxpacket: 8 [ 89.223376][ T4272] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 89.238570][ T4654] device hsr_slave_0 entered promiscuous mode [ 89.245924][ T4272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.255882][ T4272] usb 4-1: Product: syz [ 89.260467][ T4272] usb 4-1: Manufacturer: syz [ 89.265693][ T4272] usb 4-1: SerialNumber: syz [ 89.274636][ T4272] usb 4-1: config 0 descriptor?? [ 89.290092][ T4654] device hsr_slave_1 entered promiscuous mode [ 89.294468][ T4749] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.313484][ T4654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.326548][ T4654] Cannot create hsr debugfs directory [ 89.505307][ T4272] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.654328][ T4759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.107'. [ 89.706436][ T4654] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.743390][ T4654] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.768313][ T4654] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.807450][ T4654] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.946840][ T4310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.025335][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.069969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.081752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.098385][ T4654] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.116476][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.137690][ T4310] usb 5-1: Using ep0 maxpacket: 8 [ 90.143936][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.154909][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.188660][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.195783][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.207043][ T4310] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 90.234424][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.272938][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.287567][ T4310] usb 5-1: config 0 descriptor?? [ 90.312584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.345614][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.354743][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.355348][ T4272] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 90.361908][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.388713][ T4272] usb 4-1: USB disconnect, device number 2 [ 90.393285][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.411912][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.425598][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.436105][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.463525][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.482372][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.522610][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.530942][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 90.574063][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.603475][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.612929][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.628871][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.645461][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.750713][ T4310] hid (null): usage index exceeded [ 90.784300][ T4310] wacom 0003:056A:00B8.0001: ignoring exceeding usage max [ 90.818048][ T4310] wacom 0003:056A:00B8.0001: ignoring exceeding usage max [ 90.832663][ T4310] wacom 0003:056A:00B8.0001: usage index exceeded [ 90.849948][ T4310] wacom 0003:056A:00B8.0001: item 0 4 2 2 parsing failed [ 90.858353][ T4310] wacom 0003:056A:00B8.0001: parse failed [ 90.864426][ T4310] wacom: probe of 0003:056A:00B8.0001 failed with error -22 [ 91.023521][ T4310] usb 5-1: USB disconnect, device number 2 [ 91.815537][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.824008][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.841832][ T4654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.201950][ T26] audit: type=1800 audit(1753368963.837:54): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.117" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 92.617865][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 93.749841][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.764983][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.790725][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.803128][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.819412][ T4654] device veth0_vlan entered promiscuous mode [ 93.833959][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.844112][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.863644][ T4654] device veth1_vlan entered promiscuous mode [ 93.905553][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.926331][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.940391][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.954303][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.969838][ T4654] device veth0_macvtap entered promiscuous mode [ 93.994371][ T4654] device veth1_macvtap entered promiscuous mode [ 94.040845][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.075455][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.103846][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.136047][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.169036][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.186971][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.203372][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.213822][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.234875][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.269332][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.300620][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.335266][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.372732][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.403274][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.421113][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.433077][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.444457][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.471623][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.488074][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.118032][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.191802][ T4654] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.211538][ T4654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.248450][ T4654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.270011][ T4654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.511368][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.537029][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.614366][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.680380][ T4476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.732657][ T4476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.774945][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.906795][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.967977][ T4854] device batadv_slave_0 entered promiscuous mode [ 96.372940][ T4845] loop4: detected capacity change from 0 to 40427 [ 96.382172][ T4848] loop1: detected capacity change from 0 to 40427 [ 96.455777][ T4848] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 96.503375][ T4848] F2FS-fs (loop1): invalid crc value [ 96.512032][ T4845] F2FS-fs (loop4): invalid crc value [ 96.549946][ T4848] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.561558][ T4845] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.765402][ T4848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.767071][ T4845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.941941][ T4848] syz.1.126: attempt to access beyond end of device [ 96.941941][ T4848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.025629][ T4875] syz.1.126: attempt to access beyond end of device [ 97.025629][ T4875] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 97.452334][ T4848] syz.1.126: attempt to access beyond end of device [ 97.452334][ T4848] loop1: rw=2049, sector=77824, nr_sectors = 2216 limit=40427 [ 97.595817][ T4845] syz.4.125: attempt to access beyond end of device [ 97.595817][ T4845] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 97.636434][ T4848] syz.1.126: attempt to access beyond end of device [ 97.636434][ T4848] loop1: rw=2049, sector=80040, nr_sectors = 2312 limit=40427 [ 97.649496][ T4845] syz.4.125: attempt to access beyond end of device [ 97.649496][ T4845] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 97.826476][ T4848] syz.1.126: attempt to access beyond end of device [ 97.826476][ T4848] loop1: rw=2049, sector=82352, nr_sectors = 2896 limit=40427 [ 97.843562][ T4265] syz-executor: attempt to access beyond end of device [ 97.843562][ T4265] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.851556][ T4848] syz.1.126: attempt to access beyond end of device [ 97.851556][ T4848] loop1: rw=2049, sector=85248, nr_sectors = 96 limit=40427 [ 97.878930][ T4848] syz.1.126: attempt to access beyond end of device [ 97.878930][ T4848] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 98.567613][ T4902] loop5: detected capacity change from 0 to 512 [ 98.666409][ T4902] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 98.680869][ T4902] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.989130][ T4787] udevd[4787]: incorrect jbd checksum on /dev/loop5 [ 99.041730][ T4902] EXT4-fs error (device loop5): ext4_dx_csum_verify:502: inode #2: comm syz.5.143: dir seems corrupt? Run e2fsck -D. [ 99.140763][ T26] audit: type=1326 audit(1753368970.787:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.179757][ T4902] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.143: Directory index failed checksum [ 99.215847][ T26] audit: type=1326 audit(1753368970.847:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.289443][ T26] audit: type=1326 audit(1753368970.907:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.419201][ T4421] EXT4-fs (loop5): unmounting filesystem. [ 99.426867][ T26] audit: type=1326 audit(1753368970.967:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.533981][ T26] audit: type=1326 audit(1753368971.027:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.564507][ T4920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.573777][ T4920] IPv6: NLM_F_CREATE should be set when creating new route [ 99.584848][ T26] audit: type=1326 audit(1753368971.087:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 99.614712][ T26] audit: type=1326 audit(1753368971.147:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 100.247872][ T26] audit: type=1326 audit(1753368971.207:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 100.269998][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.280630][ T26] audit: type=1326 audit(1753368971.287:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 100.302835][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.315087][ T26] audit: type=1326 audit(1753368971.327:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7fc00000 [ 100.337713][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.952405][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.962358][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.112807][ T4949] loop1: detected capacity change from 0 to 512 [ 103.204854][ T4949] EXT4-fs (loop1): too many log groups per flexible block group [ 103.213256][ T4949] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 103.227022][ T4949] EXT4-fs (loop1): mount failed [ 103.404067][ T4957] mmap: syz.6.157 (4957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.654223][ T4920] device batadv_slave_0 left promiscuous mode [ 103.709894][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.282679][ T4920] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.299848][ T4920] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.310431][ T4920] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.324202][ T4920] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.134394][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.144216][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.152405][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.163692][ T4983] device bridge_slave_0 left promiscuous mode [ 105.174242][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.209166][ T4983] device bridge_slave_1 left promiscuous mode [ 105.248888][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.325476][ T4983] bond0: (slave bond_slave_0): Releasing backup interface [ 105.486127][ T4983] bond0: (slave bond_slave_1): Releasing backup interface [ 105.615678][ T4981] loop5: detected capacity change from 0 to 512 [ 105.670349][ T4981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.709284][ T4981] EXT4-fs: Ignoring removed nobh option [ 105.722086][ T4983] team0: Port device team_slave_0 removed [ 105.734675][ T4981] EXT4-fs: Ignoring removed nobh option [ 105.767979][ T4983] team0: Port device team_slave_1 removed [ 105.774159][ T4981] EXT4-fs: Conflicting test_dummy_encryption options [ 105.786551][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.811354][ T4332] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.822274][ T4983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.841231][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.871193][ T4983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.016965][ T4332] usb 2-1: Using ep0 maxpacket: 8 [ 106.029181][ T4332] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 106.071996][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.090436][ T4332] usb 2-1: Product: syz [ 106.100662][ T4332] usb 2-1: Manufacturer: syz [ 106.113559][ T4332] usb 2-1: SerialNumber: syz [ 106.141812][ T4332] usb 2-1: config 0 descriptor?? [ 106.181231][ T4332] gspca_main: se401-2.14.0 probing 047d:5003 [ 106.652531][ T4994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 106.697234][ T4994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 106.875382][ T4472] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.034384][ T4472] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.133109][ T4472] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.166977][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 107.194352][ T4332] gspca_se401: read req failed req 0x06 error -19 [ 107.225242][ T4472] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.253837][ T4332] usb 2-1: USB disconnect, device number 2 [ 107.294592][ T5015] netlink: 96 bytes leftover after parsing attributes in process `syz.1.183'. [ 107.872425][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.919501][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.929211][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.991846][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.002687][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.010571][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.120689][ T5028] loop5: detected capacity change from 0 to 512 [ 108.214202][ T5028] EXT4-fs (loop5): too many log groups per flexible block group [ 108.264962][ T5028] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 108.360123][ T5028] EXT4-fs (loop5): mount failed [ 108.736202][ T5025] chnl_net:caif_netlink_parms(): no params data found [ 110.056840][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 110.256030][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.293585][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.325194][ T5025] device bridge_slave_0 entered promiscuous mode [ 110.452293][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.465808][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.519009][ T5025] device bridge_slave_1 entered promiscuous mode [ 110.688944][ T5025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.731706][ T5025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.758941][ T4472] device hsr_slave_0 left promiscuous mode [ 110.775052][ T4472] device hsr_slave_1 left promiscuous mode [ 110.863763][ T4472] device veth1_macvtap left promiscuous mode [ 110.870281][ T4472] device veth0_macvtap left promiscuous mode [ 110.878574][ T4472] device veth1_vlan left promiscuous mode [ 110.884543][ T4472] device veth0_vlan left promiscuous mode [ 111.048832][ T5064] process 'syz.4.198' launched './file0' with NULL argv: empty string added [ 111.287488][ T5068] loop4: detected capacity change from 0 to 2048 [ 111.357219][ T5068] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 111.382916][ T5068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.127019][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 112.927984][ T4472] bond0 (unregistering): Released all slaves [ 113.046207][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.068366][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.076282][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.087817][ T5072] device bridge_slave_0 left promiscuous mode [ 113.094341][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.105090][ T5072] device bridge_slave_1 left promiscuous mode [ 113.112005][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.122084][ T5072] bond0: (slave bond_slave_0): Releasing backup interface [ 113.136148][ T5072] bond0: (slave bond_slave_1): Releasing backup interface [ 113.173079][ T5072] team0: Port device team_slave_0 removed [ 113.194589][ T5072] team0: Port device team_slave_1 removed [ 113.205786][ T5073] netlink: 'syz.1.201': attribute type 10 has an invalid length. [ 113.250685][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.259669][ T5073] team0: Port device bond0 added [ 113.265413][ T5088] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 113.424804][ T5088] device hsr_slave_0 left promiscuous mode [ 113.438882][ T5025] team0: Port device team_slave_0 added [ 113.477154][ T5025] team0: Port device team_slave_1 added [ 113.556006][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.580874][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.651301][ T5025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.700724][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.720565][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.762667][ T5025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.904476][ T5025] device hsr_slave_0 entered promiscuous mode [ 113.951162][ T5025] device hsr_slave_1 entered promiscuous mode [ 114.023973][ T5025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.030831][ T5106] loop1: detected capacity change from 0 to 2048 [ 114.034667][ T5025] Cannot create hsr debugfs directory [ 114.101583][ T5106] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 114.206890][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 114.363829][ T5106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.375161][ T5025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 115.403664][ T5025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 115.431084][ T5025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 115.441783][ T5115] loop4: detected capacity change from 0 to 2048 [ 115.490749][ T5115] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 115.511957][ T5025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.542122][ T5115] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 115.656902][ T5115] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=385, location=385 [ 115.696267][ T5115] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 115.885416][ T5025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.937749][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.945715][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.999012][ T5025] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.039343][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.072484][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.147679][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.155004][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.261904][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.288631][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 116.316550][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.364876][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.376248][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.383784][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.394815][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.408369][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.423964][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.471964][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.555817][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.595653][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.634803][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.714596][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.754692][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.783900][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.925322][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.040866][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.649618][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.659448][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 117.669631][ T48] Bluetooth: hci1: hardware error 0x00 [ 118.056390][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.070548][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.129129][ T5025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.133360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.174968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.219521][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.234319][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.251173][ T5025] device veth0_vlan entered promiscuous mode [ 119.264165][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.275498][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.303468][ T5025] device veth1_vlan entered promiscuous mode [ 119.375754][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.376410][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.377987][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.378565][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.388567][ T5025] device veth0_macvtap entered promiscuous mode [ 119.404535][ T5025] device veth1_macvtap entered promiscuous mode [ 119.455000][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.455022][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.455032][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.455044][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.456396][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.456504][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.457311][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.592929][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.602567][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.618761][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.659623][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.746807][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 119.851996][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.023259][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.222034][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.251097][ T5025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.261294][ T5025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.272942][ T5025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.282621][ T5025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.305716][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.315224][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.437345][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.445891][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.486793][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.558785][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.575451][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.783043][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.526651][ T5244] netlink: 'syz.1.248': attribute type 13 has an invalid length. [ 121.626002][ T5244] netlink: 'syz.1.248': attribute type 17 has an invalid length. [ 121.935203][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.064085][ T5244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.296542][ T5265] loop4: detected capacity change from 0 to 512 [ 122.361815][ T5265] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 122.425200][ T5265] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 122.454115][ T4787] udevd[4787]: incorrect ext4 checksum on /dev/loop4 [ 122.502568][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 122.767196][ T4630] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 123.107439][ T4630] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 123.226243][ T4630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.925999][ T4630] usb 4-1: config 0 descriptor?? [ 126.807211][ T5343] loop1: detected capacity change from 0 to 512 [ 126.829576][ T5343] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.904692][ T5343] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.281: bg 0: block 5: invalid block bitmap [ 126.947645][ T5343] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 126.959238][ T5343] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.281: invalid indirect mapped block 3 (level 2) [ 126.987425][ T5343] EXT4-fs (loop1): 2 truncates cleaned up [ 126.996428][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.052036][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 127.052050][ T26] audit: type=1800 audit(1753368998.697:86): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 127.214887][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 127.220964][ T4630] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 127.236302][ T4630] asix: probe of 4-1:0.0 failed with error -71 [ 127.285209][ T4630] usb 4-1: USB disconnect, device number 3 [ 127.325498][ T5349] tipc: Started in network mode [ 127.336430][ T5349] tipc: Node identity ac14140f, cluster identity 4711 [ 127.351932][ T5349] tipc: New replicast peer: 10.1.1.2 [ 127.360106][ T5349] tipc: Enabled bearer , priority 10 [ 127.681683][ T5357] netlink: 'syz.4.285': attribute type 15 has an invalid length. [ 128.529052][ T4333] tipc: Node number set to 2886997007 [ 129.546645][ C1] sched: RT throttling activated [ 129.994823][ T5394] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.111681][ T5394] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 130.153661][ T5403] syz.4.299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.037638][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078420][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.139099][ T5460] device ip6gretap0 entered promiscuous mode [ 136.145258][ T5460] device macsec1 entered promiscuous mode [ 136.206065][ T5465] loop4: detected capacity change from 0 to 764 [ 136.224877][ T5460] device ip6gretap0 left promiscuous mode [ 136.312178][ T5465] rock: directory entry would overflow storage [ 136.345195][ T5465] rock: sig=0x5850, size=36, remaining=22 [ 137.365161][ T5483] netlink: 'syz.5.327': attribute type 8 has an invalid length. [ 137.423607][ T5481] loop4: detected capacity change from 0 to 256 [ 137.595533][ T5481] FAT-fs (loop4): Directory bread(block 64) failed [ 137.633335][ T5481] FAT-fs (loop4): Directory bread(block 65) failed [ 137.653637][ T5481] FAT-fs (loop4): Directory bread(block 66) failed [ 137.673977][ T5495] loop7: detected capacity change from 0 to 164 [ 137.688574][ T5497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.690410][ T5481] FAT-fs (loop4): Directory bread(block 67) failed [ 137.695861][ T5497] IPv6: NLM_F_CREATE should be set when creating new route [ 137.733270][ T5481] FAT-fs (loop4): Directory bread(block 68) failed [ 137.753719][ T5481] FAT-fs (loop4): Directory bread(block 69) failed [ 137.762356][ T5495] isofs_fill_super: root inode is not a directory. Corrupted media? [ 137.779548][ T5481] FAT-fs (loop4): Directory bread(block 70) failed [ 137.789795][ T5481] FAT-fs (loop4): Directory bread(block 71) failed [ 137.796598][ T5481] FAT-fs (loop4): Directory bread(block 72) failed [ 137.822030][ T5481] FAT-fs (loop4): Directory bread(block 73) failed [ 137.902846][ T5487] binder: 5486:5487 ioctl c0306201 200000000780 returned -14 [ 138.017416][ T5498] ptrace attach of "./syz-executor exec"[5025] was attempted by " [ 139.292307][ T5509] loop1: detected capacity change from 0 to 2048 [ 139.687942][ T5519] loop7: detected capacity change from 0 to 1024 [ 139.708971][ T5519] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.772406][ T5519] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 139.820732][ T5519] JBD2: no valid journal superblock found [ 139.826512][ T5519] EXT4-fs (loop7): error loading journal [ 140.536330][ T5538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.543652][ T5538] IPv6: NLM_F_CREATE should be set when creating new route [ 141.731560][ T5556] binder: 5553:5556 ioctl c0306201 200000000240 returned -14 [ 141.900896][ T5560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 142.791608][ T14] kernel write not supported for file bpf-prog (pid: 14 comm: kworker/0:1) [ 142.991250][ T26] audit: type=1326 audit(1753369014.637:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.3.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x0 [ 143.535481][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.544212][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.091909][ T5601] loop5: detected capacity change from 0 to 1024 [ 144.222428][ T5601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 144.237692][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.319761][ T26] audit: type=1800 audit(1753369015.967:88): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.368" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 144.352439][ T5601] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.368: Allocating blocks 385-513 which overlap fs metadata [ 144.371563][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.381169][ T5601] EXT4-fs (loop5): pa ffff8880724978c0: logic 16, phys. 129, len 24 [ 144.389796][ T5601] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 144.559958][ T5608] loop7: detected capacity change from 0 to 164 [ 144.575359][ T4461] Trying to write to read-only block-device loop5 [ 144.587793][ T4421] Trying to write to read-only block-device loop5 [ 144.611128][ T5608] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.631449][ T4421] Trying to write to read-only block-device loop5 [ 144.639448][ T4461] Trying to write to read-only block-device loop5 [ 144.646209][ T4461] Trying to write to read-only block-device loop5 [ 144.671132][ T4421] Trying to write to read-only block-device loop5 [ 144.696917][ T4421] Trying to write to read-only block-device loop5 [ 144.703447][ T4421] Trying to write to read-only block-device loop5 [ 144.718039][ T4421] Trying to write to read-only block-device loop5 [ 144.738246][ T4421] Trying to write to read-only block-device loop5 [ 144.775072][ T4421] EXT4-fs (loop5): unmounting filesystem. [ 145.089814][ T5583] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.103857][ T5583] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.137135][ T5583] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.151759][ T5583] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.371361][ T5622] loop5: detected capacity change from 0 to 256 [ 146.684078][ T5643] netlink: 156 bytes leftover after parsing attributes in process `syz.1.383'. [ 148.123447][ T5667] device vlan2 entered promiscuous mode [ 148.150915][ T5667] device bridge0 entered promiscuous mode [ 148.489328][ T5675] loop3: detected capacity change from 0 to 256 [ 148.570950][ T5675] FAT-fs (loop3): Directory bread(block 64) failed [ 148.661149][ T5675] FAT-fs (loop3): Directory bread(block 65) failed [ 148.804714][ T5675] FAT-fs (loop3): Directory bread(block 66) failed [ 148.971376][ T5675] FAT-fs (loop3): Directory bread(block 67) failed [ 149.140864][ T5675] FAT-fs (loop3): Directory bread(block 68) failed [ 149.207572][ T5675] FAT-fs (loop3): Directory bread(block 69) failed [ 149.214243][ T5675] FAT-fs (loop3): Directory bread(block 70) failed [ 149.220935][ T5675] FAT-fs (loop3): Directory bread(block 71) failed [ 149.227628][ T5675] FAT-fs (loop3): Directory bread(block 72) failed [ 149.234196][ T5675] FAT-fs (loop3): Directory bread(block 73) failed [ 152.763116][ T5725] loop1: detected capacity change from 0 to 256 [ 152.788108][ T5728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.827290][ T5728] device bond_slave_0 entered promiscuous mode [ 152.834059][ T5728] device bond_slave_1 entered promiscuous mode [ 152.840357][ T5728] device dummy0 entered promiscuous mode [ 152.847915][ T5728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.865319][ T5728] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 152.874428][ T5725] FAT-fs (loop1): Directory bread(block 64) failed [ 152.898667][ T5725] FAT-fs (loop1): Directory bread(block 65) failed [ 152.919374][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 152.944527][ T5725] FAT-fs (loop1): Directory bread(block 66) failed [ 152.983028][ T5731] loop4: detected capacity change from 0 to 2048 [ 152.984847][ T5725] FAT-fs (loop1): Directory bread(block 67) failed [ 152.997837][ T5725] FAT-fs (loop1): Directory bread(block 68) failed [ 153.004404][ T5725] FAT-fs (loop1): Directory bread(block 69) failed [ 153.012351][ T5725] FAT-fs (loop1): Directory bread(block 70) failed [ 153.019289][ T5725] FAT-fs (loop1): Directory bread(block 71) failed [ 153.026428][ T5725] FAT-fs (loop1): Directory bread(block 72) failed [ 153.033431][ T5725] FAT-fs (loop1): Directory bread(block 73) failed [ 153.090876][ T5731] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.409: bad orphan inode 61 [ 153.150684][ T5731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.098764][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 154.128016][ T5743] loop1: detected capacity change from 0 to 128 [ 154.153103][ T5743] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 154.187516][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.303044][ T26] audit: type=1804 audit(1753369025.947:89): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.413" name="/newroot/84/file0/bus" dev="loop1" ino=115 res=1 errno=0 [ 154.307047][ T5748] binder: 5746:5748 ioctl c0306201 200000000240 returned -14 [ 157.268178][ T5798] netlink: 'syz.7.434': attribute type 1 has an invalid length. [ 157.514232][ T5792] loop1: detected capacity change from 0 to 2048 [ 157.562416][ T5798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.626387][ T5804] bond1: (slave gretap1): making interface the new active one [ 157.753308][ T5804] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 157.774740][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.530567][ T5804] syz.7.434 (5804) used greatest stack depth: 20672 bytes left [ 158.642632][ T5792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.013699][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 160.758040][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.7.450'. [ 160.842865][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 160.861643][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 160.919548][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 162.579068][ T5878] loop5: detected capacity change from 0 to 512 [ 162.594885][ T5878] /dev/loop5: Can't open blockdev [ 163.102785][ T5892] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 163.147066][ T5892] device bond1 entered promiscuous mode [ 163.153738][ T5892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.227966][ T5895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.244783][ T5895] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 163.298350][ T5895] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 163.336243][ T5895] bond1: (slave ip6gre1): making interface the new active one [ 163.356723][ T5895] device ip6gre1 entered promiscuous mode [ 163.374924][ T5895] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 163.402989][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 165.071194][ T5921] loop3: detected capacity change from 0 to 164 [ 165.122850][ T5921] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.261010][ T5930] bridge: RTM_NEWNEIGH with invalid ether address [ 166.526506][ T5917] syz.4.475 uses obsolete (PF_INET,SOCK_PACKET) [ 167.039520][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.7.481'. [ 167.269250][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 168.160273][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 168.552490][ T5959] fuse: Bad value for 'fd' [ 168.606890][ T5962] overlayfs: failed to clone upperpath [ 168.623334][ T5961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.487'. [ 168.644228][ T5961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.651597][ T5961] IPv6: NLM_F_CREATE should be set when creating new route [ 168.738669][ T5959] overlayfs: failed to clone upperpath [ 169.071823][ T26] audit: type=1326 audit(1753369040.717:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.126695][ T26] audit: type=1326 audit(1753369040.737:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.176699][ T26] audit: type=1326 audit(1753369040.737:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.221609][ T26] audit: type=1326 audit(1753369040.737:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.280474][ T26] audit: type=1326 audit(1753369040.737:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.321245][ T26] audit: type=1326 audit(1753369040.737:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.362230][ T26] audit: type=1326 audit(1753369040.737:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.391165][ T26] audit: type=1326 audit(1753369040.737:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.437475][ T26] audit: type=1326 audit(1753369040.737:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.482846][ T26] audit: type=1326 audit(1753369040.737:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6738e9a9 code=0x7ffc0000 [ 169.575839][ T5985] loop1: detected capacity change from 0 to 2048 [ 169.734633][ T5985] loop1: p1 < > p3 [ 169.746006][ T5985] loop1: p3 size 134217728 extends beyond EOD, truncated [ 169.832595][ T3637] loop1: p1 < > p3 [ 169.855843][ T3637] loop1: p3 size 134217728 extends beyond EOD, truncated [ 169.998188][ T5996] SET target dimension over the limit! [ 170.235632][ T5994] netlink: 'syz.5.498': attribute type 39 has an invalid length. [ 170.945276][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 170.962956][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 171.007541][ T6002] loop4: detected capacity change from 0 to 8192 [ 172.972116][ T6033] loop4: detected capacity change from 0 to 512 [ 173.120142][ T6033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.149055][ T6032] loop5: detected capacity change from 0 to 2048 [ 173.175525][ T6033] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.509: inline data xattr refers to an external xattr inode [ 173.472715][ T6033] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.509: couldn't read orphan inode 17 (err -117) [ 173.669977][ T6033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.922323][ T6086] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 173.935726][ T6079] netlink: 'syz.7.512': attribute type 10 has an invalid length. [ 174.215924][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 174.228915][ T6079] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.476556][ T6096] loop4: detected capacity change from 0 to 256 [ 175.251702][ T6096] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 175.265854][ T6096] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 176.089459][ T6106] loop5: detected capacity change from 0 to 128 [ 176.198522][ T6106] /dev/loop5: Can't open blockdev [ 176.886975][ T6130] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 178.077357][ T6139] netlink: 'syz.5.532': attribute type 10 has an invalid length. [ 178.107845][ T6139] device syz_tun entered promiscuous mode [ 178.159023][ T6139] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 179.256282][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 179.291991][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 179.526111][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 179.605939][ T6172] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 179.632423][ T6172] CIFS mount error: No usable UNC path provided in device string! [ 179.632423][ T6172] [ 179.642897][ T6172] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 181.086793][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 181.092960][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 181.226773][ T6224] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 181.413641][ T6220] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 181.435689][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.543'. [ 181.450097][ T6220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.460993][ T6220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.480871][ T6220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.529086][ T6220] team0: Failed to send options change via netlink (err -105) [ 181.547868][ T6220] team0: Port device geneve0 added [ 181.640525][ T6218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.761356][ T6218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.801830][ T6224] infiniband syz0: set down [ 181.807242][ T6224] infiniband syz0: added bond_slave_1 [ 181.855980][ T6238] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 181.855980][ T6238] The task syz.7.547 (6238) triggered the difference, watch for misbehavior. [ 181.869284][ T6224] RDS/IB: syz0: added [ 181.884410][ T6224] smc: adding ib device syz0 with port count 1 [ 181.890223][ T6218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.901482][ T6224] smc: ib device syz0 port 1 has pnetid [ 182.207312][ T6218] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.319812][ T6218] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.376332][ T6218] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.704924][ T6218] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.059938][ T6259] loop5: detected capacity change from 0 to 256 [ 184.147332][ T6259] /dev/loop5: Can't open blockdev [ 184.254707][ T6259] loop5: detected capacity change from 0 to 256 [ 184.282059][ T6259] exfat: Unknown parameter 'zero_size_dir' [ 184.300446][ T6265] netlink: 'syz.4.556': attribute type 12 has an invalid length. [ 184.672764][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.557'. [ 186.023509][ T6315] IPv6: sit1: Disabled Multicast RS [ 186.139774][ T6318] SET target dimension over the limit! [ 187.167232][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 187.167247][ T26] audit: type=1326 audit(1753369058.807:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb6738e9a9 code=0x0 [ 187.817458][ T4310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 189.910355][ T6359] xt_NFQUEUE: number of total queues is 0 [ 191.566759][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 192.042892][ T6378] sctp: [Deprecated]: syz.3.580 (pid 6378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.042892][ T6378] Use struct sctp_sack_info instead [ 193.759840][ T6387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.843629][ T6404] CIFS mount error: No usable UNC path provided in device string! [ 193.843629][ T6404] [ 193.853816][ T6404] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 194.370164][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.376530][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.603661][ T6387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.643318][ T6412] loop5: detected capacity change from 0 to 512 [ 194.782020][ T6387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.899049][ T6387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.635637][ T6387] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.725042][ T6387] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.748156][ T6387] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.813630][ T6387] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.991871][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 203.239921][ T6516] netlink: 'syz.3.622': attribute type 2 has an invalid length. [ 204.424953][ T6526] netlink: 'syz.1.626': attribute type 39 has an invalid length. [ 204.673803][ T6531] autofs4:pid:6531:autofs_fill_super: called with bogus options [ 205.268749][ T6531] loop4: detected capacity change from 0 to 24 [ 205.275939][ T6531] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 205.301992][ T4787] udevd[4787]: incorrect romfs checksum on /dev/loop4 [ 205.336756][ T6531] romfs: bad initial checksum on dev loop4. [ 205.378528][ T4787] udevd[4787]: incorrect romfs checksum on /dev/loop4 [ 207.269947][ T6556] fuse: Bad value for 'fd' [ 207.452471][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.639'. [ 207.488697][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.639'. [ 207.535363][ T6566] netlink: 'syz.3.640': attribute type 39 has an invalid length. [ 207.656938][ T5592] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 207.790848][ T6559] netlink: 'syz.7.637': attribute type 2 has an invalid length. [ 208.576755][ T5592] usb 2-1: Using ep0 maxpacket: 32 [ 208.617076][ T5592] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 208.652726][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.754418][ T5592] usb 2-1: Product: syz [ 208.783081][ T5592] usb 2-1: Manufacturer: syz [ 208.792942][ T5592] usb 2-1: SerialNumber: syz [ 208.837552][ T5592] usb 2-1: config 0 descriptor?? [ 209.119283][ T6562] device vlan2 entered promiscuous mode [ 209.226903][ T6562] device team0 entered promiscuous mode [ 209.232535][ T6562] device bond0 entered promiscuous mode [ 209.363988][ T6592] bridge0: port 3(vxlan0) entered blocking state [ 209.400749][ T5592] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 209.416701][ T5592] airspy 2-1:0.0: Could not detect board [ 209.422475][ T5592] airspy: probe of 2-1:0.0 failed with error -71 [ 209.431717][ T6592] bridge0: port 3(vxlan0) entered disabled state [ 209.459924][ T5592] usb 2-1: USB disconnect, device number 4 [ 209.472189][ T6592] device vxlan0 entered promiscuous mode [ 209.502645][ T6594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.648'. [ 209.516038][ T6594] tc_dump_action: action bad kind [ 209.883845][ T6607] netlink: 'syz.7.654': attribute type 39 has an invalid length. [ 209.982646][ T6608] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 210.006759][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.653'. [ 210.087374][ T6608] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.107748][ T6608] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.141292][ T6608] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.152285][ T6608] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.746214][ T6643] netlink: 'syz.7.664': attribute type 1 has an invalid length. [ 213.961302][ T6646] bond2: (slave gretap2): making interface the new active one [ 214.047836][ T6646] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 215.362861][ T6666] loop5: detected capacity change from 0 to 256 [ 215.447208][ T6667] xt_NFQUEUE: number of total queues is 0 [ 215.565097][ T6666] /dev/loop5: Can't open blockdev [ 216.090363][ T6666] bridge0: port 4(batadv0) entered blocking state [ 216.156878][ T6666] bridge0: port 4(batadv0) entered disabled state [ 216.228789][ T6666] device batadv0 entered promiscuous mode [ 216.391785][ T6666] bridge0: port 4(batadv0) entered blocking state [ 216.399106][ T6666] bridge0: port 4(batadv0) entered forwarding state [ 216.600377][ T6668] device batadv0 left promiscuous mode [ 216.608521][ T6668] bridge0: port 4(batadv0) entered disabled state [ 216.802073][ T4472] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.813671][ T4472] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 218.846755][ T4272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 219.057499][ T4272] usb 2-1: Using ep0 maxpacket: 16 [ 219.079057][ T4272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.464730][ T4272] usb 2-1: config 0 has no interfaces? [ 219.470735][ T4272] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.500425][ T4272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.587772][ T4272] usb 2-1: config 0 descriptor?? [ 219.859886][ T6742] netlink: 'syz.4.681': attribute type 2 has an invalid length. [ 220.481490][ T6725] loop1: detected capacity change from 0 to 1024 [ 220.547371][ T6725] hfsplus: unable to parse mount options [ 220.621487][ T4787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.651510][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 220.691364][ T5592] usb 2-1: USB disconnect, device number 5 [ 221.439379][ T6759] netlink: 'syz.3.686': attribute type 2 has an invalid length. [ 223.187666][ T26] audit: type=1326 audit(1753369094.837:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 223.297163][ T26] audit: type=1326 audit(1753369094.837:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 223.375346][ T26] audit: type=1326 audit(1753369094.837:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 223.426760][ T26] audit: type=1326 audit(1753369094.837:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 223.588620][ T26] audit: type=1326 audit(1753369094.837:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 223.981550][ T26] audit: type=1326 audit(1753369094.837:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 224.147236][ T26] audit: type=1326 audit(1753369094.837:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 224.179118][ T26] audit: type=1326 audit(1753369094.837:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 224.256856][ T26] audit: type=1326 audit(1753369094.837:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 224.308793][ T26] audit: type=1326 audit(1753369094.837:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.7.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 224.343389][ T6789] loop1: detected capacity change from 0 to 2048 [ 224.425548][ T6789] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.466822][ T6789] UDF-fs: Scanning with blocksize 512 failed [ 224.497677][ T6793] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 224.504907][ T6793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.520540][ T6793] vhci_hcd vhci_hcd.0: Device attached [ 224.726363][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.806867][ T5592] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 225.431362][ T6795] vhci_hcd: connection reset by peer [ 225.479876][ T46] vhci_hcd: stop threads [ 225.527769][ T46] vhci_hcd: release socket [ 225.620631][ T46] vhci_hcd: disconnect device [ 226.358073][ T6807] netlink: 'syz.5.701': attribute type 2 has an invalid length. [ 226.912572][ T46] bio_check_eod: 1 callbacks suppressed [ 226.912597][ T46] kworker/u4:3: attempt to access beyond end of device [ 226.912597][ T46] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 227.030548][ T46] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 227.092203][ T46] kworker/u4:3: attempt to access beyond end of device [ 227.092203][ T46] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 227.196988][ T46] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 227.348514][ T46] kworker/u4:3: attempt to access beyond end of device [ 227.348514][ T46] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 227.569534][ T46] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 227.703390][ T46] kworker/u4:3: attempt to access beyond end of device [ 227.703390][ T46] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 227.767159][ T46] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 227.775932][ T46] kworker/u4:3: attempt to access beyond end of device [ 227.775932][ T46] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 227.806733][ T46] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 227.944161][ T46] kworker/u4:3: attempt to access beyond end of device [ 227.944161][ T46] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 228.002722][ T46] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 228.012856][ T46] kworker/u4:3: attempt to access beyond end of device [ 228.012856][ T46] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 228.029013][ T46] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 228.039012][ T46] kworker/u4:3: attempt to access beyond end of device [ 228.039012][ T46] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 228.058356][ T46] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 228.070531][ T46] kworker/u4:3: attempt to access beyond end of device [ 228.070531][ T46] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 228.085023][ T46] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 228.094171][ T46] kworker/u4:3: attempt to access beyond end of device [ 228.094171][ T46] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 228.117031][ T46] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 229.700285][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.7.717'. [ 229.746847][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 229.933970][ T6864] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.022615][ T6864] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.047403][ T5592] vhci_hcd: vhci_device speed not set [ 230.131946][ T6864] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.930393][ T6864] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.344617][ T6873] binder_alloc: 6872: binder_alloc_buf, no vma [ 231.532264][ T6864] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.547509][ T6864] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.684119][ T6864] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.705829][ T6864] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.632595][ T6935] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 240.069337][ T6987] device batadv_slave_1 entered promiscuous mode [ 240.108335][ T6986] device batadv_slave_1 left promiscuous mode [ 241.540044][ T7006] sctp: [Deprecated]: syz.3.757 (pid 7006) Use of int in max_burst socket option. [ 241.540044][ T7006] Use struct sctp_assoc_value instead [ 245.123005][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 245.288330][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 245.296974][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 246.360051][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 246.540703][ T7056] capability: warning: `syz.3.766' uses deprecated v2 capabilities in a way that may be insecure [ 247.142091][ T7065] loop1: detected capacity change from 0 to 40427 [ 247.154622][ T7065] F2FS-fs (loop1): invalid crc value [ 247.177820][ T7066] syz.3.769 (7066) used greatest stack depth: 18176 bytes left [ 247.193184][ T7065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.236221][ T7065] F2FS-fs (loop1): Start checkpoint disabled! [ 247.323385][ T7065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 247.484329][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 247.484360][ T26] audit: type=1800 audit(1753369119.127:162): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.768" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 247.646822][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 248.009036][ T4469] kworker/u4:13: attempt to access beyond end of device [ 248.009036][ T4469] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 248.190143][ T4332] kernel read not supported for file [userfaultfd] (pid: 4332 comm: kworker/0:5) [ 249.076920][ T5592] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 249.276861][ T5592] usb 2-1: Using ep0 maxpacket: 8 [ 249.288780][ T5592] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.346731][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.390445][ T5592] usb 2-1: Product: syz [ 249.394895][ T5592] usb 2-1: Manufacturer: syz [ 249.407333][ T5592] usb 2-1: SerialNumber: syz [ 249.435575][ T5592] usb 2-1: config 0 descriptor?? [ 249.950124][ T5592] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.600445][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 250.735232][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 251.827341][ T5592] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 251.851736][ T5592] usb 2-1: USB disconnect, device number 6 [ 252.299350][ T7151] loop5: detected capacity change from 0 to 256 [ 252.347774][ T7151] FAT-fs (loop5): bogus number of FAT sectors [ 252.373081][ T7151] FAT-fs (loop5): Can't find a valid FAT filesystem [ 254.850132][ T7178] netlink: 'syz.5.797': attribute type 4 has an invalid length. [ 258.036730][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.043205][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.544466][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 258.807640][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.804'. [ 258.848037][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 259.393921][ T26] audit: type=1326 audit(1753369131.037:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7fc00000 [ 259.641102][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'. [ 259.687372][ T26] audit: type=1326 audit(1753369131.337:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7fc00000 [ 262.073973][ T26] audit: type=1326 audit(1753369133.717:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.3.808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb6738e9a9 code=0x0 [ 262.403117][ T7229] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 264.599841][ T7248] netlink: 44 bytes leftover after parsing attributes in process `syz.3.820'. [ 264.648018][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 264.666417][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.820'. [ 264.797094][ T7250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 266.647292][ T7281] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 267.481653][ T4310] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 268.297663][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 268.313749][ T4310] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.321889][ T4310] usb 5-1: config 0 has no interface number 0 [ 268.328043][ T4310] usb 5-1: config 0 interface 2 has no altsetting 0 [ 268.337017][ T4310] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 268.346101][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.354477][ T4310] usb 5-1: Product: syz [ 268.439906][ T4310] usb 5-1: Manufacturer: syz [ 268.444575][ T4310] usb 5-1: SerialNumber: syz [ 268.457834][ T4310] usb 5-1: config 0 descriptor?? [ 269.267220][ T4310] usb 5-1: USB disconnect, device number 3 [ 269.758782][ T26] audit: type=1326 audit(1753369140.647:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 270.276007][ T7302] loop1: detected capacity change from 0 to 4096 [ 270.287902][ T26] audit: type=1326 audit(1753369140.657:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 270.331507][ T26] audit: type=1326 audit(1753369140.657:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 270.680841][ T26] audit: type=1326 audit(1753369140.657:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 270.911455][ T7302] ntfs3: Unknown parameter 'nocase' [ 270.919020][ T7312] udevd[7312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.961278][ T26] audit: type=1326 audit(1753369140.657:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 270.961296][ T7315] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.839'. [ 271.514743][ T7325] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 274.883265][ T7367] overlayfs: failed to clone upperpath [ 276.507917][ T7383] netlink: 'syz.7.863': attribute type 1 has an invalid length. [ 276.698814][ T7383] device bond3 entered promiscuous mode [ 277.083874][ T7386] bond3: (slave ip6gretap1): making interface the new active one [ 277.091816][ T7386] device ip6gretap1 entered promiscuous mode [ 277.099740][ T7386] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.110318][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.863'. [ 277.122788][ T7390] device bond3 left promiscuous mode [ 277.128296][ T7390] device ip6gretap1 left promiscuous mode [ 277.136750][ T7390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.601476][ T7415] random: crng reseeded on system resumption [ 278.646888][ T26] audit: type=1326 audit(1753369150.287:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.7.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x0 [ 278.955900][ T7414] Restarting kernel threads ... done. [ 279.608776][ T26] audit: type=1326 audit(1753369151.257:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.001450][ T26] audit: type=1326 audit(1753369151.647:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.375805][ T26] audit: type=1326 audit(1753369152.017:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.500114][ T26] audit: type=1326 audit(1753369152.017:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.561749][ T7447] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 280.587191][ T26] audit: type=1326 audit(1753369152.017:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.616059][ T7447] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 280.617623][ T7446] overlayfs: failed to clone lowerpath [ 280.665510][ T26] audit: type=1326 audit(1753369152.017:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.729577][ T26] audit: type=1326 audit(1753369152.017:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.897026][ T26] audit: type=1326 audit(1753369152.017:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 280.983247][ T7459] autofs4:pid:7459:autofs_fill_super: called with bogus options [ 281.881827][ T26] audit: type=1326 audit(1753369152.017:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.7.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f522238e9a9 code=0x7ffc0000 [ 285.225168][ T7513] netlink: 44 bytes leftover after parsing attributes in process `syz.5.912'. [ 285.363337][ T7513] netlink: 43 bytes leftover after parsing attributes in process `syz.5.912'. [ 285.378565][ T7513] netlink: 'syz.5.912': attribute type 5 has an invalid length. [ 285.509389][ T7513] netlink: 43 bytes leftover after parsing attributes in process `syz.5.912'. [ 286.496884][ T4469] Bluetooth: hci5: Frame reassembly failed (-84) [ 287.197421][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.205020][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.349629][ T7532] loop4: detected capacity change from 0 to 40427 [ 288.395569][ T7532] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 288.446533][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.464685][ T4279] Bluetooth: hci5: command 0x1003 tx timeout [ 288.473457][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 288.475357][ T7532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 288.814697][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.897995][ T7532] F2FS-fs (loop4): Found nat_bits in checkpoint [ 289.233175][ T7532] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 289.253825][ T7532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 289.442030][ T7553] F2FS-fs (loop4): Found nat_bits in checkpoint [ 289.584354][ T7553] F2FS-fs (loop4): recover fsync data on readonly fs [ 289.613416][ T7553] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e8 [ 289.924758][ T7523] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.937785][ T7523] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.956507][ T7523] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.965186][ T7523] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.039804][ T7564] loop4: detected capacity change from 0 to 8 [ 290.148126][ T7541] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.185533][ T7559] tipc: Enabling of bearer rejected, failed to enable media [ 290.222519][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 290.222534][ T26] audit: type=1326 audit(1753369161.867:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7fc00000 [ 290.304335][ T26] audit: type=1326 audit(1753369161.907:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f57a498e9a9 code=0x7fc00000 [ 290.372912][ T26] audit: type=1326 audit(1753369161.917:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7fc00000 [ 293.754168][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.761724][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.797279][ T7608] device bond_slave_0 left promiscuous mode [ 293.817026][ T7608] device bond_slave_1 left promiscuous mode [ 293.830091][ T7608] device dummy0 left promiscuous mode [ 294.198713][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.231569][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.442434][ T7608] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.451512][ T7608] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.460900][ T7608] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.469829][ T7608] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.439809][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 301.625387][ T7717] loop1: detected capacity change from 0 to 2048 [ 301.831655][ T7717] loop1: p1 < > p3 [ 301.906137][ T7729] xt_nfacct: accounting object `syz1' does not exists [ 302.496785][ T7717] loop1: p3 size 134217728 extends beyond EOD, truncated [ 302.857277][ T7740] loop5: detected capacity change from 0 to 2048 [ 302.874222][ T7740] /dev/loop5: Can't open blockdev [ 303.852390][ T7743] loop4: detected capacity change from 0 to 256 [ 303.869125][ T7743] exfat: Unknown parameter '00000000000000000000' [ 304.247605][ T4256] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.460989][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 305.617189][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 305.731042][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.979'. [ 305.787006][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.980'. [ 305.812192][ T7771] device macvtap1 entered promiscuous mode [ 305.830292][ T7771] device syz_tun entered promiscuous mode [ 305.863718][ T7776] device syz_tun left promiscuous mode [ 305.978449][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.985927][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.041414][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.076825][ T7808] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 308.598682][ T7808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.666594][ T7816] bond2: (slave veth5): Enslaving as an active interface with a down link [ 308.759953][ T7820] bond2: (slave vlan2): Opening slave failed [ 310.872070][ T7849] netlink: 'syz.5.1002': attribute type 5 has an invalid length. [ 310.991004][ T7853] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 311.004148][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.289448][ T7853] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 312.522164][ T7861] device bridge_slave_0 left promiscuous mode [ 312.603598][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.624592][ T7865] overlayfs: failed to set xattr on upper [ 312.632345][ T7865] overlayfs: ...falling back to index=off,metacopy=off. [ 312.642275][ T7865] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 312.658460][ T7865] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 312.723285][ T7861] device bridge_slave_1 left promiscuous mode [ 313.222415][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.285239][ T7861] bond0: (slave bond_slave_0): Releasing backup interface [ 313.315805][ T7861] bond0: (slave bond_slave_1): Releasing backup interface [ 313.355432][ T7861] team0: Port device team_slave_0 removed [ 313.399082][ T7861] team0: Port device team_slave_1 removed [ 313.437970][ T7861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.498071][ T7861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.708626][ T7861] bond0: (slave wlan1): Releasing backup interface [ 313.728248][ T7861] bond1: (slave gretap1): Releasing active interface [ 314.329301][ T7861] bond2: (slave gretap2): Releasing active interface [ 314.454350][ T7861] bond3: (slave ip6gretap1): Releasing active interface [ 314.481937][ T7895] loop5: detected capacity change from 0 to 1024 [ 314.491148][ T7866] team0: Mode changed to "activebackup" [ 314.518610][ T7895] EXT4-fs: Ignoring removed orlov option [ 314.524438][ T7869] device vlan0 entered promiscuous mode [ 314.539586][ T7895] /dev/loop5: Can't open blockdev [ 314.554994][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1005'. [ 314.883341][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1016'. [ 314.905405][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1018'. [ 317.257160][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263554][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.269959][ T26] audit: type=1326 audit(1753369188.887:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 317.467716][ T26] audit: type=1326 audit(1753369188.887:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 319.140419][ T26] audit: type=1326 audit(1753369188.897:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 319.188304][ T26] audit: type=1326 audit(1753369188.897:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 319.211966][ T26] audit: type=1326 audit(1753369188.897:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 319.214805][ T7938] tipc: Failed to remove unknown binding: 66,1,1/0:148546482/148546484 [ 319.272228][ T7940] trusted_key: encrypted_key: insufficient parameters specified [ 319.950903][ T7938] tipc: Failed to remove unknown binding: 66,1,1/0:148546482/148546484 [ 320.009099][ T26] audit: type=1326 audit(1753369188.897:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 320.032617][ T26] audit: type=1326 audit(1753369188.897:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 320.055445][ T7938] tipc: Failed to remove unknown binding: 66,1,1/0:148546482/148546484 [ 320.064566][ T26] audit: type=1326 audit(1753369188.897:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 320.109827][ T26] audit: type=1326 audit(1753369188.947:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f57a498e9a9 code=0x7ffc0000 [ 320.463120][ T7952] capability: warning: `syz.3.1029' uses 32-bit capabilities (legacy support in use) [ 320.489873][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1031'. [ 320.675100][ T26] audit: type=1326 audit(1753369188.947:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57a4985967 code=0x7ffc0000 [ 320.946183][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 323.140267][ T7983] xt_nfacct: accounting object `syz1' does not exists [ 324.207988][ T7996] syz.7.1040 sent an empty control message without MSG_MORE. [ 324.230675][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 324.294231][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1041'. [ 324.506467][ T8003] xt_nat: multiple ranges no longer supported [ 325.928709][ T8007] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1047'. [ 326.041486][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 326.041509][ T26] audit: type=1326 audit(1753369197.687:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 326.767853][ T26] audit: type=1326 audit(1753369197.687:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 326.807390][ T26] audit: type=1326 audit(1753369197.937:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 326.842175][ T8017] loop4: detected capacity change from 0 to 4096 [ 326.863188][ T26] audit: type=1326 audit(1753369197.957:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 327.042963][ T26] audit: type=1326 audit(1753369197.977:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 327.158093][ T26] audit: type=1326 audit(1753369198.357:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 327.190549][ T8017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.389487][ T26] audit: type=1326 audit(1753369198.357:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 328.677868][ T26] audit: type=1326 audit(1753369198.357:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 328.701032][ T26] audit: type=1326 audit(1753369198.357:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 328.724102][ T26] audit: type=1326 audit(1753369198.357:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d958e9a9 code=0x7ffc0000 [ 328.887515][ T8017] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 329.074501][ T8017] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #15: comm syz.4.1051: mark_inode_dirty error [ 329.288877][ T8017] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 112: comm syz.4.1051: lblock 0 mapped to illegal pblock 112 (length 1) [ 329.526817][ T8017] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 112: comm syz.4.1051: lblock 0 mapped to illegal pblock 112 (length 1) [ 329.562658][ T8017] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 329.647790][ T8017] EXT4-fs error (device loop4): ext4_ext_truncate:4454: inode #15: comm syz.4.1051: mark_inode_dirty error [ 329.702331][ T8017] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 329.753745][ T8017] EXT4-fs error (device loop4): ext4_truncate:4312: inode #15: comm syz.4.1051: mark_inode_dirty error [ 329.910944][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 329.953509][ T4265] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 329.980670][ T4265] EXT4-fs error (device loop4): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 436.116655][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 436.123662][ C0] (detected by 0, t=10502 jiffies, g=34249, q=66 ncpus=2) [ 436.130957][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294980719-4294970217), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 436.144321][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34249 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 436.155519][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 436.165499][ C0] rcu: RCU grace-period kthread stack dump: [ 436.171385][ C0] task:rcu_preempt state:R running task stack:26912 pid:16 ppid:2 flags:0x00004000 [ 436.182183][ C0] Call Trace: [ 436.185474][ C0] [ 436.188421][ C0] __schedule+0x10ec/0x40b0 [ 436.192986][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 436.198205][ C0] ? _raw_spin_unlock+0x40/0x40 [ 436.203070][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 436.208980][ C0] schedule+0xb9/0x180 [ 436.213054][ C0] schedule_timeout+0x15c/0x280 [ 436.217926][ C0] ? console_conditional_schedule+0x40/0x40 [ 436.223837][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 436.229826][ C0] ? update_process_times+0x1b0/0x1b0 [ 436.235302][ C0] ? prepare_to_swait_event+0x335/0x350 [ 436.240859][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 436.245727][ C0] ? rcu_gp_kthread+0x380/0x380 [ 436.250582][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 436.256572][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 436.261361][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 436.266242][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 436.271470][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 436.276692][ C0] rcu_gp_kthread+0x95/0x380 [ 436.281295][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 436.286498][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 436.292406][ C0] ? __kthread_parkme+0x162/0x1c0 [ 436.297451][ C0] kthread+0x29d/0x330 [ 436.301530][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 436.306644][ C0] ? kthread_blkcg+0xd0/0xd0 [ 436.311251][ C0] ret_from_fork+0x1f/0x30 [ 436.315701][ C0] [ 436.318724][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 436.325070][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.147-syzkaller #0 [ 436.332835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.342922][ C0] RIP: 0010:default_idle+0xb/0x10 [ 436.347977][ C0] Code: 48 89 df e8 c7 c9 b0 f7 e9 4c ff ff ff e8 ed 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 67 85 66 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 436.367612][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 436.373695][ C0] RAX: b09865ae47560800 RBX: ffffffff8a201e87 RCX: b09865ae47560800 [ 436.381674][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c0460 RDI: ffffffff8adef320 [ 436.389650][ C0] RBP: ffffffff8c807ec0 R08: dffffc0000000000 R09: ffffed10171c6af6 [ 436.397630][ C0] R10: ffffed10171c6af6 R11: 1ffff110171c6af5 R12: 0000000000000000 [ 436.405778][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc680 R15: 1ffffffff1c3e9b6 [ 436.413777][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 436.422917][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.429523][ C0] CR2: 0000001b2e91cff8 CR3: 0000000079940000 CR4: 00000000003506f0 [ 436.437694][ C0] DR0: ffffffffffffffff DR1: 000000000000008d DR2: 0000000020000008 [ 436.445770][ C0] DR3: 0000000000007fff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.453766][ C0] Call Trace: [ 436.457072][ C0] [ 436.460026][ C0] default_idle_call+0x84/0xc0 [ 436.464840][ C0] do_idle+0x1fc/0x570 [ 436.468948][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 436.474176][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 436.479495][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 436.485165][ C0] ? schedule_idle+0x57/0x90 [ 436.489772][ C0] cpu_startup_entry+0x3f/0x60 [ 436.494528][ C0] rest_init+0x2dc/0x300 [ 436.498761][ C0] ? time_init+0x33/0x33 [ 436.502990][ C0] arch_call_rest_init+0xa/0xa [ 436.507747][ C0] start_kernel+0x490/0x539 [ 436.512235][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 436.518137][ C0]