last executing test programs: 16.687777247s ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$binfmt_script(r0, &(0x7f0000000100), 0x10f) 16.297820449s ago: executing program 2: mknod(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x594b, 0x6937, 0x12, &(0x7f0000000300)={[0x78]}, 0x8) 16.216043544s ago: executing program 0: mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x406, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x12}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000440)=""/231, 0x28, 0xe7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15.766052836s ago: executing program 4: sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000100)="e0857f9f582f030000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.idle\x00', 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000e0180c200"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 15.283639858s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) write$tcp_mem(r0, &(0x7f0000001cc0)={0xb9fe, 0x20, 0x40}, 0x48) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc34, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000480), 0x0, r5}, 0x38) mknod$loop(&(0x7f0000000b40)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x10003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) readv(r8, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r7, &(0x7f00000001c0)=ANY=[], 0x10034) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 11.845279722s ago: executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe2(0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x5f8, 0x368, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x658) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) 11.49305359s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) 9.651580492s ago: executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000240)=ANY=[], 0x1, 0xac0, &(0x7f00000013c0)="$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") open$dir(&(0x7f0000000100)='./file0\x00', 0x40203, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1002) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.618432481s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022090000005aa97e440b"], 0x0}, 0x0) 9.237285031s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000016c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x100, 0x9, 0x1, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0807000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$FITHAW(r2, 0xc0045878) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000002c0)=@req={0x1b11, 0x3, 0xfff, 0xcfe9}, 0x10) 8.252295233s ago: executing program 3: sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000100)="e0857f9f582f030000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.idle\x00', 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000e0180c200"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 7.601263251s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f61636c2c66617374626f6f74006e6f6c616b7974696d652c66737c6e635f6d6f64653d7374726963742c00943117d12f8dd1f756501f9b3320f59cbfb96561be7420d1d3cff9acece8a4a6a6e4ed8e7c4e791c8750448fe792dda6f215756c0b2ce2746a15156ff1c3b988522badc39d4443eb56b466b74c8325348efff88ee91189898912a9c0a46fcfa48ef117c9eb129652a6ca2216d710bc8a7dd69044934d6b3c979a31bd5b077d4cedc40ef1f54ff5dca6ab8e96552fdb07e5f8912f3bd3d0d383997e8212e4f5e0fff1a1939dee17b8d2518868575604bc51b9cbd9eb31a42a7c07d2ff5f91a20bacb9e9a72a2dc5d7bd3d54ee6e2c04b9212f9b6526c7b7f93f587243a70e9f0d54e4411cb101f227a8add5021c1b121dad14f577a9807ce4bdfe6bda328bbaf25c4c250cce649974ebe565929a26f5a7b80587fdd52c00d9b91577b03bc99ad01d7761a8993455a6120e653241794c28c7c98d146ffbf125a87e64b4fb20185a10062fe8b1e5499e81770f9b0d481fc6221c053848459233a5922ebba66704cdd592d946dc2264c5971bdaff77f855617e64b8eeea0dc0f3b46cfebe178c9c6b1459b90b3ee74281b94c0b16fed4690d0b5a8576f540cc0619f06bd4b8218fdeaf45004db67caa29d01b3fd8a20282b46f891c28639ad398bba2e45d66e794b9a0566cd8abbc0025098220412b224ae69875a348cf0025bf2a5d5bf3a7376d5da45e5aaf7555620642e53c21b6aee5213728859a4c16d5ba5bd3ad716b5a63b60077f9720e1c1ef897c4a01c785a6035ffbb08fc58b43effca6e73905488836fcf5463e988ce32c837a24c4248786dfa760e0c859b6dcb3ed4986227dd07b9e7940573d76f725ebe0aba785cccef42d6a92510ea118dc038eb35cef2f5fe244567f3af411afd06e9c500da949123fb23fc67201ebbfbc30dc278c91eed0dfac998881f1484709bad9776dee56cbde8bf6d", @ANYRESOCT, @ANYRES64], 0x3, 0x551d, &(0x7f0000001d00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.incfs.metadata\x00', &(0x7f00000003c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5r\xb17\x83\xaf\xfa\x90\x8bh\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xa3\xfa\xe9\t\x87\x01>\xcc\xcb~X\x16d\xf65\x15\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`}\xbd;\xbc5\xda^\xfb\x91\xe6\xc6\n4!\xfa\x87*c\x8e\x9b\x95\x89D\xc0/\x17U\xd6\xc8\x8f\"<\x95O\xaf\xf0y\x11\xceL\x1bE\x9d\x03\xaf\x0f,\xd9O\x9aa\x94\xe4\x11l\x17\x8c\x7f[\xcb%Wg\xf1\t\x820\x11\xae+\x8e\xd0%|\xb7\xd9\xc0\x9e\xc1\xd1\xdc\xb7O\xd3\xce\xeb2\x18\x96\x03\xfc\n\xe4\x15d\a\xe7\x7f\x8b\x05\x880\xaa\x11\xcf\x85\xe3c\x88{\xb1E\xae\xfa\xbf\aj\x05P\x96fj5]\x16\r,\x15\xdd\f\x942\x05\xb10I\xe7\xfe\xdb\xaasT\x90\xf7O\xb4\xb1\xc1\x1de|\xf11\xd1\xc1x\xce\x11u\x16~6\xa3\xf7', 0x1a0, 0x0) 7.439594813s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 6.837058241s ago: executing program 3: r0 = memfd_create(&(0x7f0000000f00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x1}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 6.337267556s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kvm_fpu\x00', r1}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.895937209s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="13100000660091"], 0xfe33) 5.861831188s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) write$tcp_mem(r0, &(0x7f0000001cc0)={0xb9fe, 0x20, 0x40}, 0x48) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000480), 0x0, r5}, 0x38) mknod$loop(&(0x7f0000000b40)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x10003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) readv(r8, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r7, &(0x7f00000001c0)=ANY=[], 0x10034) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 5.686819618s ago: executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000a80)='./file0\x00', 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r0, r1, 0x0) 5.666569147s ago: executing program 3: syz_emit_ethernet(0xa6, &(0x7f00000007c0)={@multicast, @dev, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@loopback}, {@private}, {@remote}, {@empty}]}, @end]}}}}}}, 0x0) 5.451376162s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 5.191815076s ago: executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000240)=ANY=[], 0x1, 0xac0, &(0x7f00000013c0)="$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") open$dir(&(0x7f0000000100)='./file0\x00', 0x40203, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1002) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.035862535s ago: executing program 1: sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000100)="e0857f9f582f030000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.idle\x00', 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000e0180c200"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.186040597s ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2.048544462s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) 1.644262101s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='rtc_alarm_irq_enable\x00', r1}, 0x10) ioctl$RTC_SET_TIME(r0, 0x7002, 0x0) 1.367302895s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 1.045920347s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.005201102s ago: executing program 1: socket$inet6(0xa, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000540)={0x0, 'netdevsim0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 133.243473ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="13100000660091"], 0xfe33) 0s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. 2024/06/13 03:59:14 fuzzer started 2024/06/13 03:59:15 dialing manager at 10.128.0.169:30024 [ 159.356362][ T5048] cgroup: Unknown subsys name 'net' [ 159.676113][ T5048] cgroup: Unknown subsys name 'rlimit' 2024/06/13 04:00:02 starting 5 executor processes [ 205.508597][ T5051] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 208.410063][ T5075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.419622][ T5075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.435395][ T5075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.449012][ T5075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.470334][ T5075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.479070][ T5075] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.489305][ T5075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.506254][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.514892][ T5078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.532325][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.544970][ T5078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.554300][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.576975][ T5078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.589547][ T5078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.601582][ T5078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.635201][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.646644][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.656105][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.834967][ T5079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.844456][ T5079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.853997][ T5079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.867279][ T5079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.878589][ T5079] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.887904][ T5079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.989323][ T4431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.999269][ T4431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.008754][ T4431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.077682][ T4431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.102598][ T4431] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.114775][ T4431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.553285][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 210.212285][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 210.378438][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.387255][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.395099][ T5074] bridge_slave_0: entered allmulticast mode [ 210.404375][ T5074] bridge_slave_0: entered promiscuous mode [ 210.428648][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.436612][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.444474][ T5074] bridge_slave_1: entered allmulticast mode [ 210.453392][ T5074] bridge_slave_1: entered promiscuous mode [ 210.595422][ T5079] Bluetooth: hci0: command tx timeout [ 210.663223][ T5079] Bluetooth: hci1: command tx timeout [ 210.743183][ T5079] Bluetooth: hci2: command tx timeout [ 210.767534][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.841426][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.864545][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 211.074765][ T5074] team0: Port device team_slave_0 added [ 211.146233][ T5079] Bluetooth: hci3: command tx timeout [ 211.180511][ T5074] team0: Port device team_slave_1 added [ 211.206128][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 211.224701][ T5079] Bluetooth: hci4: command tx timeout [ 211.308437][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 211.506035][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.513344][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.539729][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.553323][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.561019][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.569006][ T5077] bridge_slave_0: entered allmulticast mode [ 211.578103][ T5077] bridge_slave_0: entered promiscuous mode [ 211.616693][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.624892][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.651877][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.697706][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.707844][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.715766][ T5077] bridge_slave_1: entered allmulticast mode [ 211.724876][ T5077] bridge_slave_1: entered promiscuous mode [ 212.035782][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.077310][ T5074] hsr_slave_0: entered promiscuous mode [ 212.106739][ T5074] hsr_slave_1: entered promiscuous mode [ 212.189177][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.358559][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.366511][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.374814][ T5081] bridge_slave_0: entered allmulticast mode [ 212.382977][ T5081] bridge_slave_0: entered promiscuous mode [ 212.437695][ T5077] team0: Port device team_slave_0 added [ 212.563392][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.571226][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.579105][ T5092] bridge_slave_0: entered allmulticast mode [ 212.588250][ T5092] bridge_slave_0: entered promiscuous mode [ 212.621148][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.633959][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.641682][ T5081] bridge_slave_1: entered allmulticast mode [ 212.650476][ T5081] bridge_slave_1: entered promiscuous mode [ 212.664338][ T5079] Bluetooth: hci0: command tx timeout [ 212.678989][ T5077] team0: Port device team_slave_1 added [ 212.743091][ T5079] Bluetooth: hci1: command tx timeout [ 212.752719][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.761633][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.769460][ T5092] bridge_slave_1: entered allmulticast mode [ 212.778524][ T5092] bridge_slave_1: entered promiscuous mode [ 212.841684][ T5079] Bluetooth: hci2: command tx timeout [ 212.908566][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.916453][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.924373][ T5087] bridge_slave_0: entered allmulticast mode [ 212.933170][ T5087] bridge_slave_0: entered promiscuous mode [ 213.017503][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.077862][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.085228][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.111568][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.129716][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.138938][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.148264][ T5087] bridge_slave_1: entered allmulticast mode [ 213.157375][ T5087] bridge_slave_1: entered promiscuous mode [ 213.173610][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.223163][ T5079] Bluetooth: hci3: command tx timeout [ 213.265909][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.308819][ T5079] Bluetooth: hci4: command tx timeout [ 213.319003][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.326356][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.353857][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.435349][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.454879][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.611790][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.672564][ T5092] team0: Port device team_slave_0 added [ 213.735134][ T5081] team0: Port device team_slave_0 added [ 213.873647][ T5092] team0: Port device team_slave_1 added [ 213.887406][ T5081] team0: Port device team_slave_1 added [ 213.954261][ T5077] hsr_slave_0: entered promiscuous mode [ 213.965767][ T5077] hsr_slave_1: entered promiscuous mode [ 213.974516][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.982291][ T5077] Cannot create hsr debugfs directory [ 214.050504][ T5087] team0: Port device team_slave_0 added [ 214.058489][ T5074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.078823][ T5074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.163609][ T5087] team0: Port device team_slave_1 added [ 214.173070][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.180220][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.206494][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.256088][ T5074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.278703][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.286094][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.313802][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.358024][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.365334][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.391833][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.472487][ T5074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.493911][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.501085][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.527560][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.591184][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.599733][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.627503][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.730278][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.738988][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.765819][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.767715][ T5079] Bluetooth: hci0: command tx timeout [ 214.826658][ T5079] Bluetooth: hci1: command tx timeout [ 214.850107][ T5081] hsr_slave_0: entered promiscuous mode [ 214.859723][ T5081] hsr_slave_1: entered promiscuous mode [ 214.868472][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.876737][ T5081] Cannot create hsr debugfs directory [ 214.912924][ T5079] Bluetooth: hci2: command tx timeout [ 215.160619][ T5092] hsr_slave_0: entered promiscuous mode [ 215.171689][ T5092] hsr_slave_1: entered promiscuous mode [ 215.180401][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.188240][ T5092] Cannot create hsr debugfs directory [ 215.306276][ T5079] Bluetooth: hci3: command tx timeout [ 215.383249][ T5079] Bluetooth: hci4: command tx timeout [ 215.400618][ T5087] hsr_slave_0: entered promiscuous mode [ 215.411253][ T5087] hsr_slave_1: entered promiscuous mode [ 215.419651][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.427559][ T5087] Cannot create hsr debugfs directory [ 216.149877][ T5077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.170375][ T5077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.285328][ T5077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.309652][ T5077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.440067][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.620275][ T5081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.661615][ T5081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.695003][ T5092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.720793][ T5092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.748551][ T5092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.771402][ T5092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.788928][ T5081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.875150][ T5079] Bluetooth: hci0: command tx timeout [ 216.907550][ T5079] Bluetooth: hci1: command tx timeout [ 216.919751][ T5081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.967632][ T5087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.985585][ T5079] Bluetooth: hci2: command tx timeout [ 217.007720][ T5087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.038569][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.063224][ T5087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.126455][ T5087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.188450][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.196347][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.303810][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.311508][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.387350][ T5079] Bluetooth: hci3: command tx timeout [ 217.483492][ T5079] Bluetooth: hci4: command tx timeout [ 217.630761][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.915726][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.016849][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.024649][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.157534][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.165365][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.505107][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.601449][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.807138][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.860642][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.893671][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.945238][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.953123][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.118105][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.126054][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.141489][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.149268][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.173835][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.178075][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.180399][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.187801][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.314140][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.346948][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.354717][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.477438][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.485241][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.700525][ T5092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.712693][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.739612][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.750477][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.974429][ T5087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.986445][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.205677][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.880621][ T5074] veth0_vlan: entered promiscuous mode [ 220.994078][ T5074] veth1_vlan: entered promiscuous mode [ 221.039806][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.412705][ T5074] veth0_macvtap: entered promiscuous mode [ 221.498713][ T5074] veth1_macvtap: entered promiscuous mode [ 221.618894][ T5077] veth0_vlan: entered promiscuous mode [ 221.719193][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.780506][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.833341][ T5077] veth1_vlan: entered promiscuous mode [ 221.884382][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.981490][ T5074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.991444][ T5074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.000642][ T5074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.009767][ T5074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.073985][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.246807][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.412243][ T5077] veth0_macvtap: entered promiscuous mode [ 222.541639][ T5077] veth1_macvtap: entered promiscuous mode [ 222.564929][ T5081] veth0_vlan: entered promiscuous mode [ 222.652582][ T5092] veth0_vlan: entered promiscuous mode [ 222.720346][ T5081] veth1_vlan: entered promiscuous mode [ 222.750952][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.762936][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.777875][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.887709][ T5092] veth1_vlan: entered promiscuous mode [ 222.981933][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.998690][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.014915][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.185011][ T5081] veth0_macvtap: entered promiscuous mode [ 223.227622][ T5077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.236933][ T5077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.246144][ T5077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.255233][ T5077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.292017][ T5081] veth1_macvtap: entered promiscuous mode [ 223.424585][ T5092] veth0_macvtap: entered promiscuous mode [ 223.505691][ T5092] veth1_macvtap: entered promiscuous mode [ 223.524298][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.536479][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.547931][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.558785][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.574077][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.750023][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.761708][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.771936][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.782986][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.797951][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.846339][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.858948][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.870995][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.881808][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.892062][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.902946][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.917976][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.067112][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.077918][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.088062][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.098860][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.109002][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.119756][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.135030][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.180787][ T5081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.190797][ T5081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.200023][ T5081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.209139][ T5081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.413816][ T5092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.426724][ T5092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.437234][ T5092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.446384][ T5092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.310059][ T5087] veth0_vlan: entered promiscuous mode [ 225.400790][ T5087] veth1_vlan: entered promiscuous mode [ 225.797394][ T5087] veth0_macvtap: entered promiscuous mode [ 225.846590][ T5087] veth1_macvtap: entered promiscuous mode [ 226.009583][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.021998][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.034128][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.046233][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.056383][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.067219][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.077350][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.088185][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.105680][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.233679][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.244541][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.254825][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.268543][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.281369][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.292370][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.302487][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.313323][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.328509][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.424892][ T5087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.434752][ T5087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.443953][ T5087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.453053][ T5087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.874237][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.882296][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.038162][ T2885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.046458][ T2885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.113025][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.121108][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.395260][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.404647][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.515740][ T2885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.524329][ T2885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.175091][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.183860][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.695293][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.703506][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.296421][ T4181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.304925][ T4181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.899905][ T5285] loop1: detected capacity change from 0 to 2048 [ 234.985718][ T4181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.995043][ T4181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.085335][ T5285] loop1: p3 < > p4 < > [ 235.090984][ T5285] loop1: partition table partially beyond EOD, truncated [ 235.100043][ T5285] loop1: p3 start 4284289 is beyond EOD, truncated [ 235.278362][ T3976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.287311][ T3976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.630389][ T5291] fuse: Bad value for 'fd' [ 235.812112][ T5291] 9pnet: p9_errstr2errno: server reported unknown error [ 235.898548][ T5298] overlay: ./file0 is not a directory [ 236.942188][ T5306] loop4: detected capacity change from 0 to 4096 [ 236.998323][ T5306] ======================================================= [ 236.998323][ T5306] WARNING: The mand mount option has been deprecated and [ 236.998323][ T5306] and is ignored by this kernel. Remove the mand [ 236.998323][ T5306] option from the mount to silence this warning. [ 236.998323][ T5306] ======================================================= [ 237.262222][ T5309] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.848655][ T5313] loop4: detected capacity change from 0 to 32768 [ 241.097389][ T5314] loop2: detected capacity change from 0 to 32768 [ 241.274531][ T5314] workqueue: Failed to create a rescuer kthread for wq "bcachefs_io": -EINTR [ 241.274800][ T5314] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 241.379920][ T5313] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 241.396255][ T5313] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 241.521389][ T5313] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 241.532285][ T5313] bcachefs (loop4): bch2_fs_recovery(): error EINTR [ 241.539290][ T5313] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 241.549483][ T5313] bcachefs (loop4): shutting down [ 241.687315][ T5313] bcachefs (loop4): shutdown complete [ 244.079891][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.215037][ T5341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 245.920848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 246.023395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 246.031811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 246.125750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 246.134157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 247.574493][ T5352] loop1: detected capacity change from 0 to 4096 [ 248.417534][ T5358] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.318183][ T5392] loop1: detected capacity change from 0 to 2048 [ 251.388838][ T5392] ext4: Unknown parameter 'defcontext' [ 251.439494][ T5394] loop3: detected capacity change from 0 to 512 [ 251.520580][ T5394] EXT4-fs: Ignoring removed i_version option [ 251.593326][ T29] audit: type=1800 audit(1718251248.456:2): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1949 res=0 errno=0 [ 251.640318][ T5394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 251.725368][ T5394] EXT4-fs error (device loop3): __ext4_iget:4913: inode #11: block 393240: comm syz-executor.3: invalid block [ 251.898422][ T5394] EXT4-fs (loop3): Remounting filesystem read-only [ 251.905716][ T5394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.115071][ T5400] syz-executor.2[5400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.115618][ T5400] syz-executor.2[5400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.794230][ T5411] 9pnet: Unknown protocol version 9p2000.ڴ>;1gˏӟ?u [ 252.923295][ T5408] loop4: detected capacity change from 0 to 512 [ 252.953865][ T5092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.503651][ T29] audit: type=1800 audit(1718251249.776:3): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 254.657331][ T5408] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 255.653916][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.094636][ T5421] loop1: detected capacity change from 0 to 512 [ 256.118423][ T787] usb 3-1: config 146 has too many interfaces: 99, using maximum allowed: 32 [ 256.127729][ T787] usb 3-1: config 146 has an invalid descriptor of length 211, skipping remainder of the config [ 256.138788][ T787] usb 3-1: config 146 has 0 interfaces, different from the descriptor's value: 99 [ 256.148636][ T787] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 256.163900][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.377630][ T5421] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.387519][ T5421] EXT4-fs (loop1): blocks per group (3008) and clusters per group (32768) inconsistent [ 256.793562][ T5125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 256.845927][ T5427] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.026727][ T5427] loop3: detected capacity change from 0 to 512 [ 257.109796][ T5125] usb 1-1: Using ep0 maxpacket: 16 [ 257.116182][ T5427] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 257.162258][ T5427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0102] [ 257.199684][ T5427] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.265307][ T5427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 361: padding at end of block bitmap is not set [ 257.348654][ T5427] EXT4-fs (loop3): Remounting filesystem read-only [ 257.366859][ T5125] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.368872][ T787] usb 3-1: USB disconnect, device number 2 [ 257.376306][ T5125] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.393935][ T5125] usb 1-1: Product: syz [ 257.398438][ T5125] usb 1-1: Manufacturer: syz [ 257.453628][ T5427] EXT4-fs (loop3): 1 truncate cleaned up [ 257.459557][ T5427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 257.605124][ T5427] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz-executor.3: dx entry: limit 0 != root limit 125 [ 257.618246][ T5427] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 257.655301][ T5125] r8152-cfgselector 1-1: Unknown version 0x0000 [ 257.661841][ T5125] r8152-cfgselector 1-1: config 0 descriptor?? [ 257.935462][ T5092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 258.313941][ T5125] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 258.322967][ T5438] syz-executor.4[5438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.333389][ T5438] syz-executor.4[5438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.509346][ T5450] loop0: detected capacity change from 0 to 1024 [ 259.584274][ T5450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.599714][ T5450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.631734][ T5450] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.662361][ T5453] loop2: detected capacity change from 0 to 512 [ 259.709958][ T5453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 259.723794][ T5453] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 259.739118][ T5450] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 259.898672][ T5450] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 259.929201][ T5450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.007345][ T5449] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 260.056636][ T5454] loop3: detected capacity change from 0 to 4096 [ 260.073051][ T5449] Quota error (device loop0): write_blk: dquota write failed [ 260.080762][ T5449] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 260.091976][ T5449] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 0 [ 260.416599][ T5461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.504737][ T5125] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 260.604811][ T5077] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.633649][ T1091] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 260.644419][ T1091] EXT4-fs error (device loop0): ext4_release_dquot:6905: comm kworker/u8:8: Failed to release dquot type 0 [ 262.086807][ T5475] loop0: detected capacity change from 0 to 2048 [ 262.226838][ T5480] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.367969][ T5475] syz-executor.0: attempt to access beyond end of device [ 262.367969][ T5475] loop0: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 262.383464][ T5475] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 262.502752][ T5480] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 262.521014][ T5480] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 262.619780][ T5480] Remounting filesystem read-only [ 262.625542][ T3976] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 262.632882][ T3976] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 262.640410][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.649620][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.659119][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.852007][ T3976] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 262.859261][ T3976] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 262.867186][ T3976] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 262.874819][ T3976] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 262.882339][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.891570][ T3976] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 262.898987][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.908189][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.923681][ T3976] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 262.931225][ T3976] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.024126][ T5482] NILFS (loop0): mounting fs with errors [ 263.044311][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.055747][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.061563][ T5475] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 263.066520][ T5125] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 263.066682][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.089931][ T5125] usb 2-1: config 0 descriptor?? [ 263.096518][ T5475] Remounting filesystem read-only [ 263.298987][ T5486] loop3: detected capacity change from 0 to 16 [ 263.368688][ T5486] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 263.412194][ T5077] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 263.440147][ T5125] usbhid 2-1:0.0: can't add hid device: -71 [ 263.448654][ T5125] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.474340][ T5077] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 263.481323][ T5077] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 263.489124][ T5077] NILFS (loop0): discard dirty block: blocknr=171622598180900, size=1024 [ 263.498428][ T5077] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 263.506396][ T5077] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 263.534933][ T5125] usb 2-1: USB disconnect, device number 2 [ 263.556639][ T5484] loop4: detected capacity change from 0 to 2048 [ 263.578820][ T5077] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 263.581182][ T5486] Illegal XDP return value 657786721 on prog (id 32) dev syz_tun, expect packet loss! [ 263.588012][ T5077] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 263.605531][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.614855][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.624260][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.672746][ T5077] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 263.685352][ T5077] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 263.693093][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.702201][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.711546][ T5077] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 263.797474][ T5484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.901643][ T5491] loop2: detected capacity change from 0 to 1024 [ 263.988331][ T5484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 263.993299][ T5491] hfsplus: part requires an argument [ 264.009008][ T5491] hfsplus: unable to parse mount options [ 264.045410][ T5484] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 264.058451][ T5484] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.058451][ T5484] [ 264.108481][ T5484] syz-executor.4 (5484) used greatest stack depth: 4416 bytes left [ 264.359344][ T5087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.286317][ T5502] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 265.761789][ T5507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.820533][ T5506] loop2: detected capacity change from 0 to 1024 [ 266.423404][ T5506] loop2: detected capacity change from 1024 to 0 [ 267.049541][ T3976] kworker/u8:23: attempt to access beyond end of device [ 267.049541][ T3976] loop2: rw=1, sector=206, nr_sectors = 8 limit=0 [ 267.133981][ T3976] kworker/u8:23: attempt to access beyond end of device [ 267.133981][ T3976] loop2: rw=2049, sector=198, nr_sectors = 16 limit=0 [ 267.203611][ T5506] syz-executor.2: attempt to access beyond end of device [ 267.203611][ T5506] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 267.481299][ T5513] loop1: detected capacity change from 0 to 4096 [ 267.580709][ T5081] syz-executor.2: attempt to access beyond end of device [ 267.580709][ T5081] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 267.676646][ T5081] syz-executor.2: attempt to access beyond end of device [ 267.676646][ T5081] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 267.731461][ T5518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.322828][ C0] sched: RT throttling activated [ 269.925377][ T5528] loop4: detected capacity change from 0 to 256 [ 269.992632][ T5528] exfat: Unknown parameter 'errorsrs' [ 270.171393][ T5529] loop2: detected capacity change from 0 to 2048 [ 270.294239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 270.305748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 270.306321][ T5536] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.464818][ T5529] syz-executor.2: attempt to access beyond end of device [ 270.464818][ T5529] loop2: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 270.480139][ T5529] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 270.630748][ T5546] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.641098][ T5546] vlan0: entered allmulticast mode [ 270.646640][ T5546] veth0_vlan: entered allmulticast mode [ 270.898352][ T5536] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 270.912982][ T5536] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 270.961924][ T5540] kvm: emulating exchange as write [ 270.981367][ T5536] Remounting filesystem read-only [ 270.987183][ T3976] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 270.994357][ T3976] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 271.001989][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.017807][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.028978][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.151517][ T3976] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 271.158747][ T3976] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 271.166670][ T3976] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 271.174311][ T3976] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 271.181826][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.191296][ T3976] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 271.198781][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.209361][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.222072][ T3976] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 271.230587][ T3976] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.428159][ T5081] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 271.496120][ T5081] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 271.503285][ T5081] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 271.510817][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.523262][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.532385][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.644272][ T5081] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 271.651297][ T5081] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 271.659065][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.668545][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 271.677945][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.220186][ T5562] loop4: detected capacity change from 0 to 2048 [ 272.306592][ T5562] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 272.364710][ T5562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.884914][ T29] audit: type=1326 audit(2000000014.419:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee207cea9 code=0x7ffc0000 [ 272.908934][ T29] audit: type=1326 audit(2000000014.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faee207ec27 code=0x7ffc0000 [ 272.932822][ T29] audit: type=1326 audit(2000000014.429:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee207cea9 code=0x7ffc0000 [ 272.961577][ T29] audit: type=1326 audit(2000000014.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faee207cea9 code=0x7ffc0000 [ 272.986352][ T29] audit: type=1326 audit(2000000014.429:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee207cea9 code=0x7ffc0000 [ 277.009226][ T5583] input: syz1 as /devices/virtual/input/input5 [ 278.194916][ T5549] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 278.925332][ T5591] loop4: detected capacity change from 0 to 2048 [ 279.015698][ T5597] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.049635][ T5591] syz-executor.4: attempt to access beyond end of device [ 279.049635][ T5591] loop4: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 279.065433][ T5591] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 279.263084][ T5550] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 279.406445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 279.457718][ T5549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.469260][ T5549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.480899][ T5549] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 279.490654][ T5549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.553061][ T5597] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 279.555242][ T5549] usb 1-1: config 0 descriptor?? [ 279.564251][ T5597] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 279.643558][ T5597] Remounting filesystem read-only [ 279.649238][ T3933] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 279.656530][ T3933] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 279.664752][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.673978][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.683244][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.717923][ T3933] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 279.725956][ T3933] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 279.733804][ T3933] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 279.741324][ T3933] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 279.749008][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.758280][ T3933] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 279.765733][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.774964][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.784384][ T3933] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 279.791929][ T3933] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.826432][ T5087] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 279.842694][ T5087] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 279.850726][ T5087] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 279.858416][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.867651][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.877079][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.904023][ T5087] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 279.911094][ T5087] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 279.922061][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.932134][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.941561][ T5087] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.941672][ T5550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.964849][ T5550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.975153][ T5550] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 279.984656][ T5550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.003953][ T5550] usb 3-1: config 0 descriptor?? [ 280.156029][ T5549] hid-multitouch 0003:1FD2:6007.0001: item fetching failed at offset 4/5 [ 280.180905][ T5549] hid-multitouch 0003:1FD2:6007.0001: probe with driver hid-multitouch failed with error -22 [ 280.326507][ T5549] usb 1-1: USB disconnect, device number 3 [ 280.579144][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.598220][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.609348][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.616780][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.624105][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.641054][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.650772][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.658276][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.662073][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.666219][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.673384][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.678918][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.692656][ T5550] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 280.803585][ T5550] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 280.869234][ T5550] usb 3-1: USB disconnect, device number 3 [ 281.425455][ T5617] netlink: 4079 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.613297][ T5616] loop0: detected capacity change from 0 to 2048 [ 281.733381][ T5616] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 281.876787][ T5616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.482392][ T5627] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 283.500068][ T4431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.516360][ T4431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.526304][ T4431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.556167][ T4431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.568101][ T4431] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.584020][ T4431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.766444][ T5634] loop2: detected capacity change from 0 to 2048 [ 284.143812][ T5638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.373487][ T5634] syz-executor.2: attempt to access beyond end of device [ 284.373487][ T5634] loop2: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 284.389364][ T5634] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 285.109581][ T5638] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 285.121676][ T5638] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 285.234501][ T5638] Remounting filesystem read-only [ 285.246149][ T4018] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 285.253382][ T4018] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 285.260911][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.270198][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.279568][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.394889][ T4018] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 285.401861][ T4018] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 285.410835][ T4018] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 285.412129][ T5635] chnl_net:caif_netlink_parms(): no params data found [ 285.419233][ T4018] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 285.433427][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.445364][ T4018] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 285.452726][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.463112][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.472205][ T4018] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 285.479868][ T4018] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.727200][ T4431] Bluetooth: hci5: command tx timeout [ 285.885578][ T5081] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 285.905436][ T5081] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 285.912387][ T5081] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 285.921089][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.930389][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.939728][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 286.094519][ T5081] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 286.101495][ T5081] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 286.109307][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 286.118711][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 286.127996][ T5081] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 286.348462][ T5651] loop4: detected capacity change from 0 to 2048 [ 286.455888][ T3933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.524845][ T5651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.537810][ T5651] ext4 filesystem being mounted at /root/syzkaller-testdir4015344517/syzkaller.TyBbC8/21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.565401][ T5664] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 286.635164][ T5664] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 286.848946][ T3933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.965701][ T5087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.080183][ T3933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.243998][ T3933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.514823][ T4018] ===================================================== [ 287.522247][ T4018] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0 [ 287.523310][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.529504][ T4018] virtqueue_add+0x1e86/0x65c0 [ 287.529626][ T4018] virtqueue_add_sgs+0x186/0x1b0 [ 287.529744][ T4018] virtscsi_add_cmd+0x838/0xad0 [ 287.537390][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.541559][ T4018] virtscsi_queuecommand+0x898/0xa60 [ 287.547800][ T5635] bridge_slave_0: entered allmulticast mode [ 287.551386][ T4018] scsi_queue_rq+0x4cc7/0x5a80 [ 287.561470][ T5635] bridge_slave_0: entered promiscuous mode [ 287.563732][ T4018] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 287.586413][ T4018] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 287.593131][ T4018] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 287.599428][ T4018] blk_mq_run_hw_queue+0x6e4/0xbc0 [ 287.604749][ T4018] blk_mq_flush_plug_list+0x1683/0x2b20 [ 287.610502][ T4018] blk_add_rq_to_plug+0x2c6/0x970 [ 287.615711][ T4018] blk_mq_submit_bio+0x26e8/0x3390 [ 287.621014][ T4018] __submit_bio+0x3b9/0xb60 [ 287.625736][ T4018] submit_bio_noacct_nocheck+0x148c/0x1800 [ 287.631776][ T4018] submit_bio_noacct+0x1bd8/0x27f0 [ 287.637074][ T4018] submit_bio+0x58a/0x5b0 [ 287.641578][ T4018] ext4_bio_write_folio+0x1e76/0x2e40 [ 287.647146][ T4018] mpage_submit_folio+0x351/0x4a0 [ 287.652369][ T4018] ext4_do_writepages+0x3733/0x62e0 [ 287.657712][ T4018] ext4_writepages+0x312/0x830 [ 287.662630][ T4018] do_writepages+0x427/0xc30 [ 287.667364][ T4018] __writeback_single_inode+0x10d/0x12c0 [ 287.673147][ T4018] writeback_sb_inodes+0xc95/0x1e00 [ 287.678488][ T4018] __writeback_inodes_wb+0x14c/0x440 [ 287.683919][ T4018] wb_writeback+0x50b/0xea0 [ 287.688553][ T4018] wb_workfn+0x122c/0x1940 [ 287.693137][ T4018] process_scheduled_works+0xa81/0x1bd0 [ 287.698854][ T4018] worker_thread+0xea5/0x1560 [ 287.703795][ T4018] kthread+0x3e2/0x540 [ 287.708129][ T4018] ret_from_fork+0x6d/0x90 [ 287.712714][ T4018] ret_from_fork_asm+0x1a/0x30 [ 287.717656][ T4018] [ 287.720053][ T4018] Uninit was stored to memory at: [ 287.725451][ T4018] copy_page_from_iter_atomic+0x12b7/0x2ae0 [ 287.731544][ T4018] generic_perform_write+0x4c1/0xc60 [ 287.737020][ T4018] ext4_buffered_write_iter+0x564/0xaa0 [ 287.742718][ T4018] ext4_file_write_iter+0x208/0x3450 [ 287.748151][ T4018] __kernel_write_iter+0x64d/0xc80 [ 287.753445][ T4018] dump_user_range+0x8dc/0xee0 [ 287.758383][ T4018] elf_core_dump+0x57c7/0x5ae0 [ 287.763350][ T4018] do_coredump+0x32d5/0x4920 [ 287.768094][ T4018] get_signal+0x267e/0x2d00 [ 287.772745][ T4018] arch_do_signal_or_restart+0x53/0xcb0 [ 287.778495][ T4018] syscall_exit_to_user_mode+0x5d/0x160 [ 287.784243][ T4018] do_syscall_64+0xdc/0x1e0 [ 287.788938][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.795015][ T4018] [ 287.797415][ T4018] Uninit was created at: [ 287.801857][ T4018] __alloc_pages+0x9d6/0xe70 [ 287.806588][ T4018] alloc_pages_mpol+0x299/0x990 [ 287.811607][ T4018] alloc_pages+0x1bf/0x1e0 [ 287.816173][ T4018] dump_user_range+0x4a/0xee0 [ 287.821019][ T4018] elf_core_dump+0x57c7/0x5ae0 [ 287.825959][ T4018] do_coredump+0x32d5/0x4920 [ 287.830705][ T4018] get_signal+0x267e/0x2d00 [ 287.835362][ T4018] arch_do_signal_or_restart+0x53/0xcb0 [ 287.841104][ T4018] syscall_exit_to_user_mode+0x5d/0x160 [ 287.846827][ T4018] do_syscall_64+0xdc/0x1e0 [ 287.851500][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.857575][ T4018] [ 287.859965][ T4018] Bytes 0-4095 of 4096 are uninitialized [ 287.865693][ T4018] Memory access of size 4096 starts at ffff88804ea7c000 [ 287.872726][ T4018] [ 287.875139][ T4018] CPU: 1 PID: 4018 Comm: kworker/u8:24 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 287.885180][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.895371][ T4018] Workqueue: writeback wb_workfn (flush-8:0) [ 287.901589][ T4018] ===================================================== [ 287.908614][ T4018] Disabling lock debugging due to kernel taint [ 287.914854][ T4018] Kernel panic - not syncing: kmsan.panic set ... [ 287.921365][ T4018] CPU: 1 PID: 4018 Comm: kworker/u8:24 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 287.932895][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.943080][ T4018] Workqueue: writeback wb_workfn (flush-8:0) [ 287.949307][ T4018] Call Trace: [ 287.952678][ T4018] [ 287.955698][ T4018] dump_stack_lvl+0x216/0x2d0 [ 287.960564][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 287.966545][ T4018] dump_stack+0x1e/0x30 [ 287.970876][ T4018] panic+0x4e2/0xcd0 [ 287.974946][ T4018] ? kmsan_get_metadata+0xf1/0x1d0 [ 287.980234][ T4018] kmsan_report+0x2d5/0x2e0 [ 287.984895][ T4018] ? stack_depot_save_flags+0x66d/0x6e0 [ 287.990656][ T4018] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 287.997102][ T4018] ? kmsan_internal_check_memory+0x48c/0x560 [ 288.003289][ T4018] ? kmsan_handle_dma+0xac/0xc0 [ 288.008304][ T4018] ? virtqueue_add+0x1e86/0x65c0 [ 288.013418][ T4018] ? virtqueue_add_sgs+0x186/0x1b0 [ 288.018713][ T4018] ? virtscsi_add_cmd+0x838/0xad0 [ 288.023905][ T4018] ? virtscsi_queuecommand+0x898/0xa60 [ 288.029532][ T4018] ? scsi_queue_rq+0x4cc7/0x5a80 [ 288.034633][ T4018] ? blk_mq_dispatch_rq_list+0x79b/0x3440 [ 288.040550][ T4018] ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 288.047348][ T4018] ? blk_mq_sched_dispatch_requests+0x12f/0x270 [ 288.053786][ T4018] ? blk_mq_run_hw_queue+0x6e4/0xbc0 [ 288.059251][ T4018] ? blk_mq_flush_plug_list+0x1683/0x2b20 [ 288.065173][ T4018] ? blk_add_rq_to_plug+0x2c6/0x970 [ 288.070567][ T4018] ? blk_mq_submit_bio+0x26e8/0x3390 [ 288.076044][ T4018] ? __submit_bio+0x3b9/0xb60 [ 288.080865][ T4018] ? submit_bio_noacct_nocheck+0x148c/0x1800 [ 288.087047][ T4018] ? submit_bio_noacct+0x1bd8/0x27f0 [ 288.092531][ T4018] ? submit_bio+0x58a/0x5b0 [ 288.097212][ T4018] ? ext4_bio_write_folio+0x1e76/0x2e40 [ 288.102965][ T4018] ? mpage_submit_folio+0x351/0x4a0 [ 288.108341][ T4018] ? ext4_do_writepages+0x3733/0x62e0 [ 288.113867][ T4018] ? ext4_writepages+0x312/0x830 [ 288.118975][ T4018] ? do_writepages+0x427/0xc30 [ 288.123888][ T4018] ? __writeback_single_inode+0x10d/0x12c0 [ 288.129859][ T4018] ? writeback_sb_inodes+0xc95/0x1e00 [ 288.135388][ T4018] ? __writeback_inodes_wb+0x14c/0x440 [ 288.140998][ T4018] ? wb_writeback+0x50b/0xea0 [ 288.145815][ T4018] ? wb_workfn+0x122c/0x1940 [ 288.150583][ T4018] ? process_scheduled_works+0xa81/0x1bd0 [ 288.156476][ T4018] ? worker_thread+0xea5/0x1560 [ 288.161490][ T4018] ? kthread+0x3e2/0x540 [ 288.165903][ T4018] ? ret_from_fork+0x6d/0x90 [ 288.170651][ T4018] ? ret_from_fork_asm+0x1a/0x30 [ 288.175773][ T4018] ? ext4_writepages+0x312/0x830 [ 288.180881][ T4018] ? do_writepages+0x427/0xc30 [ 288.185795][ T4018] ? __writeback_single_inode+0x10d/0x12c0 [ 288.191763][ T4018] ? writeback_sb_inodes+0xc95/0x1e00 [ 288.197293][ T4018] ? __writeback_inodes_wb+0x14c/0x440 [ 288.202907][ T4018] ? wb_writeback+0x50b/0xea0 [ 288.207731][ T4018] ? wb_workfn+0x122c/0x1940 [ 288.212510][ T4018] ? process_scheduled_works+0xa81/0x1bd0 [ 288.218401][ T4018] ? worker_thread+0xea5/0x1560 [ 288.223420][ T4018] ? kthread+0x3e2/0x540 [ 288.227832][ T4018] ? ret_from_fork+0x6d/0x90 [ 288.232575][ T4018] ? ret_from_fork_asm+0x1a/0x30 [ 288.237716][ T4018] ? should_fail_ex+0x4a/0x800 [ 288.242704][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.248069][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.254052][ T4018] kmsan_internal_check_memory+0x48c/0x560 [ 288.260074][ T4018] kmsan_handle_dma+0xac/0xc0 [ 288.264910][ T4018] virtqueue_add+0x1e86/0x65c0 [ 288.269855][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.275221][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.281212][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.286576][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.291941][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.297940][ T4018] virtqueue_add_sgs+0x186/0x1b0 [ 288.303073][ T4018] virtscsi_add_cmd+0x838/0xad0 [ 288.308090][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.313497][ T4018] virtscsi_queuecommand+0x898/0xa60 [ 288.318974][ T4018] ? __pfx_virtscsi_queuecommand+0x10/0x10 [ 288.324955][ T4018] scsi_queue_rq+0x4cc7/0x5a80 [ 288.329913][ T4018] ? __pfx_scsi_queue_rq+0x10/0x10 [ 288.335184][ T4018] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 288.340931][ T4018] ? sbitmap_get+0x431/0x670 [ 288.345682][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.351679][ T4018] ? dd_dispatch_request+0x9a1/0xa20 [ 288.357213][ T4018] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 288.363861][ T4018] ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0 [ 288.370667][ T4018] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 288.376943][ T4018] blk_mq_run_hw_queue+0x6e4/0xbc0 [ 288.382245][ T4018] ? __pfx_dd_insert_requests+0x10/0x10 [ 288.387984][ T4018] blk_mq_flush_plug_list+0x1683/0x2b20 [ 288.393775][ T4018] blk_add_rq_to_plug+0x2c6/0x970 [ 288.398996][ T4018] blk_mq_submit_bio+0x26e8/0x3390 [ 288.404339][ T4018] __submit_bio+0x3b9/0xb60 [ 288.408986][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.414360][ T4018] submit_bio_noacct_nocheck+0x148c/0x1800 [ 288.420385][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.425742][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.431717][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.437693][ T4018] submit_bio_noacct+0x1bd8/0x27f0 [ 288.443025][ T4018] submit_bio+0x58a/0x5b0 [ 288.447560][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.453537][ T4018] ext4_bio_write_folio+0x1e76/0x2e40 [ 288.459142][ T4018] mpage_submit_folio+0x351/0x4a0 [ 288.464352][ T4018] ext4_do_writepages+0x3733/0x62e0 [ 288.469828][ T4018] ext4_writepages+0x312/0x830 [ 288.474773][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.480748][ T4018] ? __pfx_ext4_writepages+0x10/0x10 [ 288.486235][ T4018] do_writepages+0x427/0xc30 [ 288.491010][ T4018] ? stack_depot_save_flags+0x2c/0x6e0 [ 288.496645][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.502108][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.508093][ T4018] __writeback_single_inode+0x10d/0x12c0 [ 288.513896][ T4018] ? _raw_spin_unlock+0x30/0x50 [ 288.518914][ T4018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 288.524896][ T4018] writeback_sb_inodes+0xc95/0x1e00 [ 288.530318][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.535708][ T4018] __writeback_inodes_wb+0x14c/0x440 [ 288.541162][ T4018] wb_writeback+0x50b/0xea0 [ 288.545824][ T4018] ? stack_depot_save_flags+0x2c/0x6e0 [ 288.551441][ T4018] ? kmsan_get_metadata+0x146/0x1d0 [ 288.556796][ T4018] ? queue_io+0x481/0x780 [ 288.561302][ T4018] wb_workfn+0x122c/0x1940 [ 288.565905][ T4018] ? wake_up_process+0x2a/0x40 [ 288.570834][ T4018] ? __pfx_wb_workfn+0x10/0x10 [ 288.575861][ T4018] process_scheduled_works+0xa81/0x1bd0 [ 288.581612][ T4018] worker_thread+0xea5/0x1560 [ 288.586478][ T4018] kthread+0x3e2/0x540 [ 288.590718][ T4018] ? __pfx_worker_thread+0x10/0x10 [ 288.596002][ T4018] ? __pfx_kthread+0x10/0x10 [ 288.600762][ T4018] ret_from_fork+0x6d/0x90 [ 288.605331][ T4018] ? __pfx_kthread+0x10/0x10 [ 288.610095][ T4018] ret_from_fork_asm+0x1a/0x30 [ 288.615060][ T4018] [ 288.618293][ T4018] Kernel Offset: disabled [ 288.622672][ T4018] Rebooting in 86400 seconds..