last executing test programs: 24.154290102s ago: executing program 0 (id=195): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x8) inotify_init() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000001440)='./bus\x00', 0x80000000) rmdir(0x0) 22.568252466s ago: executing program 0 (id=198): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000e00000000000000f7ffffff18", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183500000300000000000000000000008510000005000000184900ff0000000000000000180100002020782500000000002020207b1af8ff000000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x5, 0x1, 0x6, 0x16}, {0x3, 0x1, 0x1, 0xd}, {0x0, 0x3ff, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') 21.063202694s ago: executing program 0 (id=207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='coredump_filter\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000d40)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x4a060480) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 12.326955695s ago: executing program 3 (id=234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000e00000000000000f7ffffff18", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183500000300000000000000000000008510000005000000184900ff0000000000000000180100002020782500000000002020207b1af8ff000000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x5, 0x1, 0x6, 0x16}, {0x3, 0x1, 0x1, 0xd}, {0x0, 0x3ff, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') 11.417914772s ago: executing program 0 (id=238): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x90, 0x8c1}}], 0x1, 0x110) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0xff69) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000102000000000000000000000000080003"], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 10.957525461s ago: executing program 0 (id=241): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000240), 0x1, 0x793, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpLmo33f5IUXtK4CggZKJ6bGVsFFxYUIFgq6bhsm01AzyZTMpDQhYIsIbgQVF4LddG217rr1Y6v/hQtpqZoWKy4kciczzaSZiZM2MxPI7wc3c869Z3LOM+d+nDv3MjeAfWs0/ZOJOBwRHycRw9X5SUT0VVK9ESfXyz1YXcmlUxJra2//llTK3F9dyUXde1IHq5mnI+L7DyKOZLbWW1panp0qFPIL1fx4ee7ieGlp+eiFuamZ/Ex+/vjE5OSxEy+dOL57sf7x0/KhO5+88fzXJ/96/6mbH/2QxMk4VF1WH8duGY3R6mfSl36Em7y+25V1WdLtBvBY0k2zZ30rj8MxHD2VVBODnWwZANAu70XEGgCwzySO/wCwz9S+B7i/upKrTd39RqKz7r4WEQPr8deub64v6a1esxuoXAcdup9sujKSRMTILtQ/GhHXbp25kU5R7QfX0oBOuHI1Is6NjG7d/ydb7lnYqRe2W7jWX3kZfWT2fjv+QDd9m45/Xm40/ss8HP9Eg/FPf4Nt93H8+/afub0L1TSVjv9erbu37UFd/FUjPdXcfypjvr7k/IVCPt23/TcixqKvP81PVIo2HrmN3fv7XrP668d/v3/67pdp/enrRonM7d7+ze+ZnipPPWncNXevRjzT2yj+5GH/J03Gv6dbrOPNVz78otmyNP403tq0Nf72Wrse8VzD/t/oy2Tb+xPHK6vDeG2laOCbnz8falZ/ff+nU1r/tVtnduXcohVp/w9tH/9IUn+/Zmnndfx4ffi7ZsuaxH9jo0Tj9f9A8k4lfaA67/JUubwwEXEgeSvNDmyaf2zjvbV8rXwa/9izjbf/9Wobr//pOeG5FuPvvfPrV48ff3ul8U/vqP93nrj5YLanWf2t9f9kJTVWndPK/q/VBj7JZwcAAAAAAAAAAAAAAAAAAAAAAAAArcpExKFIMtmH6Uwmm11/hvf/YyhTKJbKR84XF+eno/Ks7JHoy9R+6nK47vdQJ6q/h1/LH3sk/2JE/C8iPusfrOSzuWJhutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDVwSbP/0/90t/t1gEAbTPQ7QYAAB3n+A8A+8/Ojv+DbWsHANA5zv8BYP9p+fh/rr3tAAA6x/k/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbXb61Kl0WvtzdSWX5qcvLS3OFi8dnc6XZrNzi7lsrrhwMTtTLM4U8tlcca7pP7qy/lIoFi9Oxvzi5fFyvlQeLy0tn50rLs6Xz16Ym5rJn833dSwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhdaWl5dqpQyC9IbJsY3BvN2DOJ3tgTzZBoW6J+LzHYvR0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB73TwAAAP//6HkqDQ==") open(&(0x7f0000000200)='./bus\x00', 0x14d27e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x9c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c685c3405e043204c6900102030109028a00010000c0050904ae0001649f17fd0724060001130005240034fc0d240f010a000000020065080106241a06002d09050e080800020501500d4b58d495f5477221478d37dbe3d763c9cc456d5c1d26406b8f9869a41051febb5d5999b41935e9714fee60d9b98c855653fe7d570986d6e4042f326a158f0e5743b520"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 10.7383899s ago: executing program 3 (id=242): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 8.225678763s ago: executing program 4 (id=253): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000e00000000000000f7ffffff18", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183500000300000000000000000000008510000005000000184900ff0000000000000000180100002020782500000000002020207b1af8ff000000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x5, 0x1, 0x6, 0x16}, {0x3, 0x1, 0x1, 0xd}, {0x0, 0x3ff, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') 7.201965569s ago: executing program 4 (id=254): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) 5.358879656s ago: executing program 0 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0xc1a, 0x5}, @timestamp, @timestamp, @mss], 0x4) 5.331489798s ago: executing program 4 (id=260): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000006c0), 0x24, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="be", 0x1}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 5.197291699s ago: executing program 3 (id=261): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff0100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 5.153770633s ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1600050b) 5.023934644s ago: executing program 3 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x68b4e9f5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b65, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xee13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 4.988026337s ago: executing program 1 (id=264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000e00000000000000f7ffffff18", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183500000300000000000000000000008510000005000000184900ff0000000000000000180100002020782500000000002020207b1af8ff000000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x5, 0x1, 0x6, 0x16}, {0x3, 0x1, 0x1, 0xd}, {0x0, 0x3ff, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') 4.852881259s ago: executing program 4 (id=265): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) syz_emit_ethernet(0x131a, &(0x7f0000001100)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x12e4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5"}, {0x21, 0x7, "b8a3e100908f616400000002000000000000000000000000d899641c98819dcd41f1b62f2f1614c700008879e66485201a0015ca837473"}, {0x2, 0x6, "925d23d4962b02d6d27d37fc7d7a4c3a6c452abc1b8ec91ca7ae1918e4fbf972fa86d43eece5c24d58f3c951fabb8d0fee1d8e"}, {0x1f, 0x200, "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"}]}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000010c0)='kfree\x00', r6, 0x0, 0x1}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000000000000000320000000c009900000000001200000005001c01"], 0x28}}, 0x0) 4.841760119s ago: executing program 3 (id=266): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1) r1 = syz_create_resource$binfmt(&(0x7f0000019400)='./file0\x00') execveat$binfmt(r0, r1, &(0x7f0000019540)={[&(0x7f0000019440)='syzkaller\x00', &(0x7f0000019480)='sched_switch\x00', &(0x7f00000194c0)='sched_switch\x00', &(0x7f0000019500)='f2fs\x00']}, &(0x7f0000019800)={[&(0x7f0000019580)='syzkaller\x00', 0x0, 0x0, 0x0, &(0x7f00000196c0)='syzkaller\x00', &(0x7f0000019700)='net/if_inet6\x00', &(0x7f00000197c0)='\x87\x00\x1a\x00\x00', 0x0, &(0x7f0000019900)='\x00']}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019940)=ANY=[@ANYBLOB="0900000004000000000000000000000000000000bea4ca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000020059dbc94de6144e9c5155ea906cbad6d3f35f7396452c107e728ee5fde7f2a5d68c2eef4473c429ed0a30a0c5a6921613a997032fae6a5690420ea7b842a861095e14374867aaaf5e816519cb46b3faa1578ae6048a56946a5674c2735192d4ba2c2c97ad3318c477be502b32cc5184a4f3ad43eea5a36d411756cec6e95861a7d65be43ba29455475360780bc354498ea105bffe5de7edaacec"], 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x80, 0x8}}, 0x30) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000019880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000198c0)='mlxsw_sp_acl_tcam_vregion_rehash_rollback_failed\x00', r4, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_procfs(r5, &(0x7f0000000040)='net/if_inet6\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) sendfile(r2, r3, 0x0, 0x100001) 4.460794002s ago: executing program 2 (id=267): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000001010103000000000000001b0a04"], 0x14}}, 0x0) 3.978873333s ago: executing program 4 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) 3.89644051s ago: executing program 1 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r2) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) 3.89573828s ago: executing program 4 (id=270): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000240), 0x1, 0x793, &(0x7f0000000a40)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14d27e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x9c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c685c3405e043204c6900102030109028a00010000c0050904ae0001649f17fd0724060001130005240034fc0d240f010a000000020065080106241a06002d09050e080800020501500d4b58d495f5477221478d37dbe3d763c9cc456d5c1d26406b8f9869a41051febb5d5999b41935e9714fee60d9b98c855653fe7d570986d6e4042f326a158f0e5743b520"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 3.632654052s ago: executing program 1 (id=271): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.788442834s ago: executing program 1 (id=272): epoll_create1(0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x800000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x14) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 1.862523672s ago: executing program 2 (id=273): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff0100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 1.551736798s ago: executing program 1 (id=274): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.199232758s ago: executing program 2 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x80000000) 1.094542157s ago: executing program 3 (id=276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63", 0x8}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) unshare(0x2a020400) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16=r1, @ANYBLOB="0000000000006e2b8b5904d0cbc698b1dd00"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f65921fe4f3bdc7dcc98fbf550edc621eae8bee3c4fc178c73e8817e1eabc40475daf8449515a0553c29907d86f75e700acfe812695f47c496ed"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x0) 1.016963474s ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x8) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='./bus\x00', 0x83000b05) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001440)='./bus\x00', 0x80000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) preadv2(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x8}) 229.828631ms ago: executing program 2 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 0s ago: executing program 2 (id=279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000e00000000000000f7ffffff18", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183500000300000000000000000000008510000005000000184900ff0000000000000000180100002020782500000000002020207b1af8ff000000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x5, 0x1, 0x6, 0x16}, {0x3, 0x1, 0x1, 0xd}, {0x0, 0x3ff, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000540)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') kernel console output (not intermixed with test programs): becomes ready [ 57.662195][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.672286][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.682051][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.690983][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.698139][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.708135][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.719790][ T3567] device veth1_vlan entered promiscuous mode [ 57.754716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.765739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.784896][ T3568] device veth0_vlan entered promiscuous mode [ 57.792900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.801320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.812255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.839735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.849849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.859108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.868183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.877468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.887649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.896568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.905467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.915085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.929837][ T3567] device veth0_macvtap entered promiscuous mode [ 57.940565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.949472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.958718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.970916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.980213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.993648][ T3568] device veth1_vlan entered promiscuous mode [ 58.003750][ T3567] device veth1_macvtap entered promiscuous mode [ 58.025752][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.034653][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.043393][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.052550][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.074438][ T3566] device veth0_vlan entered promiscuous mode [ 58.082552][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.092108][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.101399][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.112815][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.137130][ T3568] device veth0_macvtap entered promiscuous mode [ 58.151671][ T3566] device veth1_vlan entered promiscuous mode [ 58.162958][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.174049][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.182997][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.194547][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.205232][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.216409][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.226853][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.249151][ T3568] device veth1_macvtap entered promiscuous mode [ 58.270743][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.296389][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.309689][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.323066][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.331406][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.341536][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.351336][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.361287][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.370874][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.380165][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.393791][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.407698][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.420952][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.432951][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.459531][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.470721][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.481840][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.491751][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.504212][ T3567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.513735][ T3567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.524232][ T3567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.533361][ T3567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561495][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.570257][ T3568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.580481][ T3568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.589574][ T3568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.599201][ T3568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.617832][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.627017][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.646055][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.661951][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.700534][ T3566] device veth0_macvtap entered promiscuous mode [ 58.737531][ T3566] device veth1_macvtap entered promiscuous mode [ 58.750104][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.758986][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.767246][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.776851][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.853214][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.863585][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.873128][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.883292][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.892644][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.901964][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.910157][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.921714][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.932224][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.942737][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.953961][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.964581][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.975433][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.986355][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.997044][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.008085][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.024774][ T3566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.034066][ T3566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.043305][ T3566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.055667][ T3566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.081247][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.092131][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.101161][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.110839][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.121251][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.130257][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.140463][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.148752][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.158687][ T3614] Bluetooth: hci2: command 0x040f tx timeout [ 59.158976][ T3612] Bluetooth: hci0: command 0x040f tx timeout [ 59.168724][ T3614] Bluetooth: hci3: command 0x040f tx timeout [ 59.188798][ T3569] device veth0_vlan entered promiscuous mode [ 59.211841][ T3571] device veth0_vlan entered promiscuous mode [ 59.238617][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 59.238649][ T3614] Bluetooth: hci1: command 0x040f tx timeout [ 59.258368][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.274531][ T3571] device veth1_vlan entered promiscuous mode [ 59.276911][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.314743][ T3569] device veth1_vlan entered promiscuous mode [ 59.343707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.352022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.360686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.368917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.400939][ T3571] device veth0_macvtap entered promiscuous mode [ 59.411993][ T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.424342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.436676][ T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.439417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.454910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.464027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.477935][ T3571] device veth1_macvtap entered promiscuous mode [ 59.497159][ T459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.513742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.521696][ T459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.529771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.537843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.562436][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.574081][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.584210][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.594685][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.604580][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.615205][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.626725][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.649754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.660153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.672355][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.683497][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.693623][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.704504][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.714714][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.726582][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.744972][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.773322][ T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.781849][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.802499][ T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.806691][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.819210][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.849998][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.860482][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.899721][ T3569] device veth0_macvtap entered promiscuous mode [ 59.925885][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.941366][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.950520][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.962082][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.988050][ T3647] loop1: detected capacity change from 0 to 256 [ 59.994510][ T3569] device veth1_macvtap entered promiscuous mode [ 59.999880][ T459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.016377][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.043381][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.046173][ T459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.064762][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.075820][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.085762][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.096665][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.107330][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.118124][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.131493][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.142052][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.153380][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.168436][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.195910][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.212640][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.223674][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.232480][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.243167][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.286425][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.301785][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.313515][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.325646][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.336585][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.347434][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.358432][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.370957][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.382748][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.422078][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.443326][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.467234][ T3569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.483310][ T3569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.495059][ T3569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.513960][ T3569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.565044][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.574831][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.592881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.702288][ T26] audit: type=1326 audit(1728670206.589:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 60.749316][ T26] audit: type=1326 audit(1728670206.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 60.789257][ T26] audit: type=1326 audit(1728670206.619:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 60.813264][ T26] audit: type=1326 audit(1728670206.619:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 60.836435][ T26] audit: type=1326 audit(1728670206.619:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 60.903864][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.923615][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.954932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.958826][ T26] audit: type=1326 audit(1728670206.619:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 61.027554][ T26] audit: type=1326 audit(1728670206.619:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 61.073043][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.086271][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.132916][ T26] audit: type=1326 audit(1728670206.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 61.176842][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.182491][ T26] audit: type=1326 audit(1728670206.629:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 61.211860][ T26] audit: type=1326 audit(1728670206.629:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3649 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 61.238113][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.247596][ T3616] Bluetooth: hci0: command 0x0419 tx timeout [ 61.264238][ T3616] Bluetooth: hci3: command 0x0419 tx timeout [ 61.277567][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.319572][ T3616] Bluetooth: hci1: command 0x0419 tx timeout [ 61.330452][ T3616] Bluetooth: hci4: command 0x0419 tx timeout [ 61.340947][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.601699][ T3664] loop4: detected capacity change from 0 to 512 [ 61.669850][ T3669] team0: Device ipvlan2 failed to register rx_handler [ 61.704241][ T3664] EXT4-fs (loop4): Ignoring removed oldalloc option [ 61.765915][ T3664] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.8: Parent and EA inode have the same ino 15 [ 61.829266][ T3664] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.873721][ T3664] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.8: Parent and EA inode have the same ino 15 [ 61.897205][ T3664] EXT4-fs (loop4): 1 orphan inode deleted [ 61.903979][ T3664] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,errors=continue,. Quota mode: none. [ 62.057852][ T3678] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9'. [ 62.108434][ T3676] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9'. [ 62.249942][ T3568] syz-executor (3568) used greatest stack depth: 18776 bytes left [ 62.366177][ T3686] loop4: detected capacity change from 0 to 512 [ 62.488834][ T3686] EXT4-fs (loop4): Ignoring removed orlov option [ 62.597670][ T3686] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 62.627169][ T3686] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 62.888675][ T3694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.166550][ T3701] loop0: detected capacity change from 0 to 512 [ 63.192842][ T3699] loop4: detected capacity change from 0 to 2048 [ 63.198050][ T3694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.266959][ T3701] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.18: casefold flag without casefold feature [ 63.287586][ T3701] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.18: couldn't read orphan inode 15 (err -117) [ 63.302007][ T3701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.316677][ T3699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.360516][ T3694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.656565][ T3707] loop3: detected capacity change from 0 to 512 [ 63.783680][ T3707] EXT4-fs (loop3): Ignoring removed orlov option [ 63.844575][ T3707] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 63.868518][ T3614] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.892826][ T3694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.934387][ T3707] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 64.042598][ T3696] chnl_net:caif_netlink_parms(): no params data found [ 64.228907][ T3614] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 64.238129][ T3614] usb 5-1: config 0 has no interface number 0 [ 64.280214][ T3694] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.342936][ T3694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.374323][ T3694] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.466927][ T3694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.468658][ T3614] usb 5-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 64.494802][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.505665][ T3722] loop3: detected capacity change from 0 to 2048 [ 64.515094][ T3614] usb 5-1: Product: syz [ 64.520864][ T3614] usb 5-1: Manufacturer: syz [ 64.535746][ T3614] usb 5-1: SerialNumber: syz [ 64.548589][ T3614] usb 5-1: config 0 descriptor?? [ 64.555139][ T3696] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.573906][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.610140][ T3696] device bridge_slave_0 entered promiscuous mode [ 64.610875][ T3722] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.638900][ T3722] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 64.671518][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.900890][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.952586][ T3696] device bridge_slave_1 entered promiscuous mode [ 64.999200][ T3613] Bluetooth: hci2: command 0x0409 tx timeout [ 65.336090][ T3726] loop2: detected capacity change from 0 to 512 [ 65.388077][ T3696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.433490][ T3696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.459288][ T3726] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.634605][ T3726] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.23: casefold flag without casefold feature [ 65.659108][ T3726] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.23: couldn't read orphan inode 16 (err -117) [ 65.778127][ T3736] binder: BINDER_SET_CONTEXT_MGR already set [ 65.784642][ T3736] binder: 3731:3736 ioctl 4018620d 200001c0 returned -16 [ 65.985293][ T3726] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.358729][ T3726] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 66.418897][ T3696] team0: Port device team_slave_0 added [ 66.475017][ T3710] loop0: detected capacity change from 0 to 40427 [ 66.488872][ T3696] team0: Port device team_slave_1 added [ 66.538466][ T3710] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 66.545175][ T3710] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 66.728970][ T3614] usb 5-1: USB disconnect, device number 2 [ 66.751483][ T3710] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 66.889092][ T3749] loop2: detected capacity change from 0 to 512 [ 67.178715][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 67.187968][ T3696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.207352][ T3696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.247365][ T3749] EXT4-fs (loop2): Ignoring removed orlov option [ 67.247547][ T3696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.283448][ T3696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.291350][ T3696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.356283][ T3749] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.378335][ T3696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.479530][ T3749] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 67.563686][ T3754] loop4: detected capacity change from 0 to 512 [ 67.612108][ T3696] device hsr_slave_0 entered promiscuous mode [ 67.640302][ T3696] device hsr_slave_1 entered promiscuous mode [ 67.661589][ T3696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.694136][ T3696] Cannot create hsr debugfs directory [ 67.715507][ T3754] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.774207][ T3754] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 67.934125][ T3762] loop3: detected capacity change from 0 to 512 [ 68.062065][ T3762] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.29: casefold flag without casefold feature [ 68.104930][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.116302][ T3762] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 68.129068][ T3762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.332763][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.452246][ T3771] loop4: detected capacity change from 0 to 512 [ 68.507786][ T3771] EXT4-fs (loop4): Ignoring removed orlov option [ 68.512425][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.551373][ T3771] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 68.571852][ T3771] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 68.699811][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.963387][ T3780] binder: BINDER_SET_CONTEXT_MGR already set [ 68.970291][ T3780] binder: 3776:3780 ioctl 4018620d 200001c0 returned -16 [ 69.217901][ T3782] loop2: detected capacity change from 0 to 2048 [ 69.238315][ T3616] Bluetooth: hci2: command 0x040f tx timeout [ 69.341515][ T3784] loop4: detected capacity change from 0 to 2048 [ 69.581641][ T3784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.582858][ T3782] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.608588][ T3784] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 69.661593][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 69.661610][ T26] audit: type=1800 audit(1728670215.549:25): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 70.234222][ T1078] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.315213][ T3801] loop0: detected capacity change from 0 to 2048 [ 70.435874][ T3804] loop4: detected capacity change from 0 to 512 [ 70.476944][ T3786] loop3: detected capacity change from 0 to 40427 [ 70.536929][ T3804] EXT4-fs (loop4): Ignoring removed orlov option [ 70.545028][ T3786] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 70.562950][ T3786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 70.598743][ T1078] usb 3-1: config 0 has an invalid interface number: 174 but max is 0 [ 70.601306][ T3801] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 70.607886][ T1078] usb 3-1: config 0 has no interface number 0 [ 70.669293][ T3804] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 70.708818][ T3804] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 70.778565][ T3786] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 70.789942][ T1078] usb 3-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 70.789976][ T1078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.789999][ T1078] usb 3-1: Product: syz [ 70.790015][ T1078] usb 3-1: Manufacturer: syz [ 70.790032][ T1078] usb 3-1: SerialNumber: syz [ 70.793392][ T1078] usb 3-1: config 0 descriptor?? [ 71.031139][ T3786] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 71.042151][ T3786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.181121][ T26] audit: type=1804 audit(1728670217.069:26): pid=3828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.37" name="/newroot/9/file1/file1" dev="loop3" ino=10 res=1 errno=0 [ 71.287409][ T3696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.318522][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 71.375138][ T3696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.403294][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.414941][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.529756][ T3832] kernel profiling enabled (shift: 17) [ 72.103789][ T3696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.127639][ T3834] loop4: detected capacity change from 0 to 512 [ 72.171598][ T3696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.203215][ T3834] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.42: casefold flag without casefold feature [ 72.288564][ T3834] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.42: couldn't read orphan inode 15 (err -117) [ 72.318499][ T3834] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.671992][ T3569] attempt to access beyond end of device [ 72.671992][ T3569] loop3: rw=2049, want=45104, limit=40427 [ 72.890454][ T3696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.919814][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.931741][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.965440][ T3696] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.021706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.044849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.063391][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.070567][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.115471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.180205][ T1078] usb 3-1: USB disconnect, device number 2 [ 73.337711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.356624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.436207][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.443479][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.578402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.613461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.835878][ T3696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.864473][ T3696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.872845][ T3866] loop3: detected capacity change from 0 to 1024 [ 73.891726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.935178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.950422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.963313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.988075][ T3869] binder: BINDER_SET_CONTEXT_MGR already set [ 73.994414][ T3869] binder: 3863:3869 ioctl 4018620d 200001c0 returned -16 [ 74.041841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.114102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.134569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.214928][ T3866] EXT4-fs (loop3): Ignoring removed oldalloc option [ 74.400148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.440006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.714500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.848194][ T3874] loop0: detected capacity change from 0 to 2048 [ 74.855563][ T3866] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000005,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,usrjquota=,,errors=continue. Quota mode: none. [ 74.901732][ T154] device hsr_slave_0 left promiscuous mode [ 74.936539][ T3874] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.947765][ T154] device hsr_slave_1 left promiscuous mode [ 74.954575][ T3874] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 74.965152][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.973092][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.982188][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.984734][ T3883] loop2: detected capacity change from 0 to 512 [ 74.989806][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.012163][ T154] device bridge_slave_1 left promiscuous mode [ 75.024837][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.183079][ T154] device bridge_slave_0 left promiscuous mode [ 75.226570][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.280584][ T3883] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.53: casefold flag without casefold feature [ 75.294719][ T3883] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.53: couldn't read orphan inode 15 (err -117) [ 75.307864][ T3883] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.538897][ T3866] loop_set_status: loop3 () has still dirty pages (nrpages=49) [ 75.734050][ T3885] loop4: detected capacity change from 0 to 40427 [ 75.750293][ T154] device veth1_macvtap left promiscuous mode [ 75.796379][ T154] device veth0_macvtap left promiscuous mode [ 75.802170][ T3569] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 75.804111][ T154] device veth1_vlan left promiscuous mode [ 75.833991][ T154] device veth0_vlan left promiscuous mode [ 75.846080][ T3885] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 75.867771][ T3885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 75.879182][ T3569] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 75.919434][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 75.951971][ T3569] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 75.954792][ T3893] loop0: detected capacity change from 0 to 512 [ 75.990507][ T3885] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 76.041011][ T3569] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 76.053603][ T3896] loop2: detected capacity change from 0 to 2048 [ 76.074622][ T3893] EXT4-fs (loop0): Ignoring removed orlov option [ 76.084272][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 76.107359][ T3569] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 76.145866][ T3893] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 76.167484][ T3893] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 76.183898][ T3885] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 76.192952][ T3569] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 76.215685][ T3885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.233237][ T26] audit: type=1804 audit(1728670222.119:27): pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.52" name="/newroot/13/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 76.286363][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 76.388697][ T3896] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.433482][ T3569] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 76.461649][ T26] audit: type=1800 audit(1728670222.349:28): pid=3896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 76.482325][ T3569] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 76.788352][ T3812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.847383][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 76.896013][ T3569] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 77.004290][ T3569] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 77.103084][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.168096][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.235500][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.261325][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.278768][ T3812] usb 3-1: config 0 has an invalid interface number: 174 but max is 0 [ 77.282264][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.299515][ T3571] attempt to access beyond end of device [ 77.299515][ T3571] loop4: rw=2049, want=45104, limit=40427 [ 77.300774][ T3569] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 77.344027][ T3812] usb 3-1: config 0 has no interface number 0 [ 77.405797][ T3906] loop0: detected capacity change from 0 to 1024 [ 77.526789][ T154] team0 (unregistering): Port device team_slave_1 removed [ 77.598913][ T3812] usb 3-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 77.611121][ T3906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.628817][ T154] team0 (unregistering): Port device team_slave_0 removed [ 77.648912][ T26] audit: type=1326 audit(1728670223.539:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 77.673645][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.681186][ T3812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.700167][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.730036][ T3812] usb 3-1: Product: syz [ 77.742780][ T26] audit: type=1326 audit(1728670223.559:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f819fced897 code=0x7ffc0000 [ 77.773250][ T3812] usb 3-1: Manufacturer: syz [ 77.798349][ T3812] usb 3-1: SerialNumber: syz [ 77.805458][ T3812] usb 3-1: config 0 descriptor?? [ 77.825880][ T26] audit: type=1326 audit(1728670223.589:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 77.849058][ T26] audit: type=1326 audit(1728670223.589:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 77.873380][ T26] audit: type=1326 audit(1728670223.589:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 77.908038][ T154] bond0 (unregistering): Released all slaves [ 77.951788][ T26] audit: type=1326 audit(1728670223.589:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 77.991323][ T26] audit: type=1326 audit(1728670223.589:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 78.046867][ T26] audit: type=1326 audit(1728670223.589:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f819fceeff9 code=0x7ffc0000 [ 78.068959][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 79.483578][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.519306][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.564724][ T3696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.804853][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.826259][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.922793][ T3931] binder: BINDER_SET_CONTEXT_MGR already set [ 79.929050][ T3931] binder: 3927:3931 ioctl 4018620d 200001c0 returned -16 [ 80.083427][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.097924][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.116940][ T3696] device veth0_vlan entered promiscuous mode [ 80.173266][ T3696] device veth1_vlan entered promiscuous mode [ 80.200955][ T3935] loop0: detected capacity change from 0 to 512 [ 80.296267][ T3696] device veth0_macvtap entered promiscuous mode [ 80.340418][ T3696] device veth1_macvtap entered promiscuous mode [ 80.370272][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.383873][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.464445][ T3935] EXT4-fs (loop0): Ignoring removed orlov option [ 80.483536][ T3812] usb 3-1: USB disconnect, device number 3 [ 80.528964][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.537663][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.580680][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.590992][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.625134][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.689863][ T3935] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 80.707603][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.743365][ T3944] loop4: detected capacity change from 0 to 1024 [ 80.760258][ T3935] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 80.762538][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.794611][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.812040][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.828357][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.848029][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.868572][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.879859][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.894561][ T3696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.906331][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.919810][ T3944] ======================================================= [ 80.919810][ T3944] WARNING: The mand mount option has been deprecated and [ 80.919810][ T3944] and is ignored by this kernel. Remove the mand [ 80.919810][ T3944] option from the mount to silence this warning. [ 80.919810][ T3944] ======================================================= [ 80.994327][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.008531][ T3944] EXT4-fs (loop4): error: journal path ./file1 is not a block device [ 81.023242][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.081506][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.168808][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.195171][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.243788][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.260187][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.271164][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.282135][ T3696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.294613][ T3696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.307123][ T3696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.320685][ T3696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.329915][ T3696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.339108][ T3696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.347969][ T3696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.509543][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.530080][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.683248][ T1075] cfg80211: failed to load regulatory.db [ 82.317026][ T3947] loop2: detected capacity change from 0 to 40427 [ 82.364206][ T3962] loop0: detected capacity change from 0 to 512 [ 82.378816][ T3947] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 82.390358][ T3947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 82.470501][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.494084][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.541674][ T3962] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.74: casefold flag without casefold feature [ 82.580092][ T3962] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.74: couldn't read orphan inode 15 (err -117) [ 82.589689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.605935][ T3962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.612313][ T3947] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.816556][ T3971] binder: BINDER_SET_CONTEXT_MGR already set [ 82.823862][ T3971] binder: 3963:3971 ioctl 4018620d 200001c0 returned -16 [ 82.981299][ T3798] Bluetooth: hci3: command 0x0409 tx timeout [ 83.291783][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.348392][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.414072][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.431509][ T3947] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 83.474281][ T3947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.573168][ T3943] chnl_net:caif_netlink_parms(): no params data found [ 83.580114][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 83.580129][ T26] audit: type=1804 audit(1728670229.459:38): pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.68" name="/newroot/12/file1/file1" dev="loop2" ino=10 res=1 errno=0 [ 83.785666][ T3980] loop4: detected capacity change from 0 to 2048 [ 83.811334][ T3982] syz.0.78[3982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.811446][ T3982] syz.0.78[3982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.310108][ T3980] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.404186][ T26] audit: type=1800 audit(1728670230.289:39): pid=3980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.77" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 84.528667][ T3566] attempt to access beyond end of device [ 84.528667][ T3566] loop2: rw=2049, want=45104, limit=40427 [ 84.615523][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.625848][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.646410][ T3943] device bridge_slave_0 entered promiscuous mode [ 84.702265][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.714242][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.728341][ T1075] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.747554][ T3943] device bridge_slave_1 entered promiscuous mode [ 84.795564][ T3943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.989741][ T3943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.238616][ T1075] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 85.334095][ T1075] usb 5-1: config 0 has no interface number 0 [ 85.708609][ T1075] usb 5-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 85.738439][ T3943] team0: Port device team_slave_0 added [ 85.745482][ T1075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.778691][ T1075] usb 5-1: Product: syz [ 85.782999][ T1075] usb 5-1: Manufacturer: syz [ 85.803762][ T3797] Bluetooth: hci3: command 0x041b tx timeout [ 85.845375][ T1075] usb 5-1: SerialNumber: syz [ 85.877136][ T1075] usb 5-1: config 0 descriptor?? [ 85.887106][ T4004] loop2: detected capacity change from 0 to 512 [ 85.913877][ T3943] team0: Port device team_slave_1 added [ 85.923400][ T4004] EXT4-fs (loop2): Ignoring removed orlov option [ 85.990077][ T4004] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 86.034149][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.045722][ T4004] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 86.064544][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.092102][ T3943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.105272][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.112680][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.151224][ T3943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.149882][ T3943] device hsr_slave_0 entered promiscuous mode [ 87.163104][ T3943] device hsr_slave_1 entered promiscuous mode [ 87.182284][ T3943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.199769][ T3943] Cannot create hsr debugfs directory [ 87.428714][ T4021] loop2: detected capacity change from 0 to 512 [ 87.496838][ T3943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.528522][ T4021] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.84: casefold flag without casefold feature [ 87.574831][ T4021] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.84: couldn't read orphan inode 15 (err -117) [ 87.588530][ T4021] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.684690][ T3943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.878504][ T3797] Bluetooth: hci3: command 0x040f tx timeout [ 88.008646][ T3943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.126146][ T1075] usb 5-1: USB disconnect, device number 3 [ 88.331665][ T4027] binder: BINDER_SET_CONTEXT_MGR already set [ 88.337750][ T4027] binder: 4024:4027 ioctl 4018620d 200001c0 returned -16 [ 89.310981][ T3943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.513154][ T4035] loop2: detected capacity change from 0 to 512 [ 89.613939][ T4035] EXT4-fs (loop2): Ignoring removed orlov option [ 90.037254][ T4035] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 90.298420][ T4035] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 90.365283][ T3799] Bluetooth: hci3: command 0x0419 tx timeout [ 90.600107][ T3943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.665936][ T3943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.761239][ T3943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.841518][ T3943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.095496][ T3943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.168416][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.197523][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.244709][ T3943] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.130622][ T4052] loop2: detected capacity change from 0 to 512 [ 92.148941][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.179010][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.197912][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.205310][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.234372][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.245196][ T4052] EXT4-fs (loop2): Ignoring removed orlov option [ 92.266000][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.287141][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.294496][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.294845][ T4042] loop4: detected capacity change from 0 to 40427 [ 92.334510][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.340611][ T4052] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 92.366342][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.370108][ T4052] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff) [ 92.399509][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.428508][ T4042] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 92.434895][ T4042] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 92.505825][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.540877][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.570638][ T4042] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.606968][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.636994][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.666409][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.677176][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.711598][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.734700][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.760562][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.768413][ T4042] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 92.775566][ T4042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.784480][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.851785][ T26] audit: type=1804 audit(1728670238.739:40): pid=4042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.89" name="/newroot/22/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 93.194663][ T4066] loop2: detected capacity change from 0 to 2048 [ 93.266177][ T4042] attempt to access beyond end of device [ 93.266177][ T4042] loop4: rw=10241, want=53256, limit=40427 [ 93.279665][ T4042] attempt to access beyond end of device [ 93.279665][ T4042] loop4: rw=2049, want=53264, limit=40427 [ 93.498975][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.509406][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.545456][ T3943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.607696][ T3571] attempt to access beyond end of device [ 93.607696][ T3571] loop4: rw=2049, want=45104, limit=40427 [ 93.696072][ T4066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.707692][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.739440][ T26] audit: type=1800 audit(1728670239.629:41): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.95" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 93.779470][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.843328][ T3943] device veth0_vlan entered promiscuous mode [ 93.869417][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.887992][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.941210][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.955545][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.048660][ T4078] binder: BINDER_SET_CONTEXT_MGR already set [ 94.055296][ T4078] binder: 4073:4078 ioctl 4018620d 200001c0 returned -16 [ 94.289357][ T3943] device veth1_vlan entered promiscuous mode [ 94.467961][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.507044][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.558729][ T3799] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.600450][ T3943] device veth0_macvtap entered promiscuous mode [ 94.632992][ T3943] device veth1_macvtap entered promiscuous mode [ 94.736688][ T4084] loop4: detected capacity change from 0 to 512 [ 94.744429][ T4086] loop0: detected capacity change from 0 to 512 [ 94.798640][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.809440][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.820862][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.832230][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.844242][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.854933][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.858480][ T4086] EXT4-fs (loop0): Ignoring removed orlov option [ 94.865219][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.882765][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.893459][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.899645][ T4084] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.96: casefold flag without casefold feature [ 94.904690][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.929366][ T3799] usb 3-1: config 0 has an invalid interface number: 174 but max is 0 [ 94.937682][ T3799] usb 3-1: config 0 has no interface number 0 [ 94.947069][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.956180][ T4084] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.96: couldn't read orphan inode 15 (err -117) [ 94.981384][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.983296][ T4084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.996479][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.015927][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.018157][ T4086] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 95.025570][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.056238][ T4086] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 95.098566][ T3799] usb 3-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 95.107648][ T3799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.170480][ T3799] usb 3-1: Product: syz [ 95.186509][ T3799] usb 3-1: Manufacturer: syz [ 95.208564][ T3799] usb 3-1: SerialNumber: syz [ 95.236698][ T3799] usb 3-1: config 0 descriptor?? [ 95.304398][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.317309][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.328840][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.340770][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.350984][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.362839][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.372899][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.383496][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.394396][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.405009][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.418047][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.464628][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.477451][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.637266][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 95.667852][ T3943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681262][ T3943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.690805][ T3943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.700372][ T3943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.084309][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 96.495532][ T4111] loop4: detected capacity change from 0 to 512 [ 96.543329][ T154] device hsr_slave_0 left promiscuous mode [ 96.555681][ T154] device hsr_slave_1 left promiscuous mode [ 96.570597][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.585533][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.588433][ T4111] EXT4-fs (loop4): Ignoring removed orlov option [ 96.600099][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.620249][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.653192][ T154] device bridge_slave_1 left promiscuous mode [ 96.670753][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.697490][ T154] device bridge_slave_0 left promiscuous mode [ 96.713002][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.726052][ T4111] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 96.758124][ T154] device veth1_macvtap left promiscuous mode [ 96.764908][ T4111] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff) [ 96.780703][ T154] device veth0_macvtap left promiscuous mode [ 96.787186][ T154] device veth1_vlan left promiscuous mode [ 96.793678][ T154] device veth0_vlan left promiscuous mode [ 96.838433][ T1078] Bluetooth: hci2: command 0x0409 tx timeout [ 97.376960][ T4123] binder: BINDER_SET_CONTEXT_MGR already set [ 97.383172][ T4123] binder: 4120:4123 ioctl 4018620d 200001c0 returned -16 [ 97.625207][ T4116] loop0: detected capacity change from 0 to 40427 [ 97.641625][ T154] team0 (unregistering): Port device team_slave_1 removed [ 97.695932][ T154] team0 (unregistering): Port device team_slave_0 removed [ 97.718075][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.746948][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.881087][ T3799] usb 3-1: USB disconnect, device number 4 [ 97.936627][ T4116] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 97.943295][ T154] bond0 (unregistering): Released all slaves [ 97.968819][ T4116] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 98.033568][ T4116] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 98.073621][ T4135] loop4: detected capacity change from 0 to 512 [ 98.175126][ T4135] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.110: casefold flag without casefold feature [ 98.211585][ T4135] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.110: couldn't read orphan inode 15 (err -117) [ 98.234133][ T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.259287][ T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.267601][ T4116] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 98.278053][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.278481][ T4116] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.309530][ T4135] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.333181][ T26] audit: type=1804 audit(1728670244.219:42): pid=4116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.106" name="/newroot/34/file1/file1" dev="loop0" ino=10 res=1 errno=0 [ 98.481301][ T4142] loop2: detected capacity change from 0 to 512 [ 98.547924][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.590904][ T4087] chnl_net:caif_netlink_parms(): no params data found [ 98.605399][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.633307][ T4142] EXT4-fs (loop2): Ignoring removed orlov option [ 98.703945][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.777151][ T4142] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 98.834741][ T4142] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff) [ 98.883070][ T4154] loop3: detected capacity change from 0 to 2048 [ 98.919905][ T1078] Bluetooth: hci2: command 0x041b tx timeout [ 99.008736][ T4154] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.008186][ T4087] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.052279][ T4087] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.079747][ T4154] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff) [ 99.110975][ T4087] device bridge_slave_0 entered promiscuous mode [ 99.135277][ T4162] loop2: detected capacity change from 0 to 512 [ 99.222827][ T4087] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.243047][ T4087] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.255770][ T4087] device bridge_slave_1 entered promiscuous mode [ 99.292301][ T4162] EXT4-fs (loop2): Ignoring removed orlov option [ 99.661916][ T4162] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 99.703186][ T4162] ext4 filesystem being mounted at /27/bus supports timestamps until 2038 (0x7fffffff) [ 99.909532][ T4087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.921631][ T3567] attempt to access beyond end of device [ 99.921631][ T3567] loop0: rw=2049, want=45104, limit=40427 [ 99.961438][ T4087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.049966][ T4169] loop3: detected capacity change from 0 to 2048 [ 100.115353][ T4087] team0: Port device team_slave_0 added [ 100.166880][ T4087] team0: Port device team_slave_1 added [ 100.241265][ T4169] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.369301][ T26] audit: type=1800 audit(1728670246.259:43): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.116" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 100.485998][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.517639][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.594830][ T4087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.611096][ T4176] binder: 4175:4176 ioctl c0306201 20000380 returned -14 [ 100.621771][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.631842][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.736225][ T4087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.749500][ T3799] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.838116][ T4184] loop0: detected capacity change from 0 to 512 [ 100.916539][ T4087] device hsr_slave_0 entered promiscuous mode [ 100.928892][ T4184] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.120: casefold flag without casefold feature [ 100.970024][ T4087] device hsr_slave_1 entered promiscuous mode [ 100.976991][ T4184] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.120: couldn't read orphan inode 15 (err -117) [ 100.997956][ T4087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.006878][ T1078] Bluetooth: hci2: command 0x040f tx timeout [ 101.028641][ T4087] Cannot create hsr debugfs directory [ 101.066382][ T4184] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.138506][ T3799] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 101.146813][ T3799] usb 4-1: config 0 has no interface number 0 [ 101.338563][ T3799] usb 4-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 101.362562][ T3799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.428395][ T3799] usb 4-1: Product: syz [ 101.448710][ T3799] usb 4-1: Manufacturer: syz [ 101.478689][ T3799] usb 4-1: SerialNumber: syz [ 101.506059][ T3799] usb 4-1: config 0 descriptor?? [ 101.627248][ T4087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.699327][ T4194] loop2: detected capacity change from 0 to 512 [ 101.792218][ T4087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.939808][ T4194] EXT4-fs (loop2): Ignoring removed orlov option [ 101.980980][ T4087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.153791][ T4194] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 102.183804][ T4202] loop0: detected capacity change from 0 to 2048 [ 102.191671][ T4087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.234080][ T4194] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff) [ 102.386037][ T4202] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.407378][ T4202] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 102.468715][ T4087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.490715][ T4087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.517680][ T4087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.547577][ T4087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.078734][ T3797] Bluetooth: hci2: command 0x0419 tx timeout [ 103.195755][ T4212] loop2: detected capacity change from 0 to 512 [ 103.263500][ T4212] EXT4-fs (loop2): Ignoring removed orlov option [ 103.265172][ T4087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.318939][ T4212] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 103.334494][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.350743][ T4212] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 103.404555][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.416620][ T4087] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.520742][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.556705][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.616695][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.623932][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.643565][ T3799] usb 4-1: USB disconnect, device number 2 [ 103.799030][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.807750][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.846257][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.860882][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.868053][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.876146][ T4216] binder: 4215:4216 ioctl c0306201 20000380 returned -14 [ 104.055733][ T4221] 9pnet: p9_fd_create_tcp (4221): problem connecting socket to 127.0.0.1 [ 104.075154][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.095976][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.160289][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.190153][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.204207][ T4224] loop3: detected capacity change from 0 to 512 [ 104.211881][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.257437][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.267562][ T4207] loop4: detected capacity change from 0 to 40427 [ 104.288772][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.312277][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.347160][ T4224] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.132: casefold flag without casefold feature [ 104.350579][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.376075][ T4207] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 104.435338][ T4207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 104.451992][ T4087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.463656][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.465698][ T4224] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.132: couldn't read orphan inode 15 (err -117) [ 104.495671][ T4207] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 104.513583][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.545040][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.564693][ T4224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.576937][ T26] audit: type=1326 audit(1728670250.459:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.809089][ T26] audit: type=1326 audit(1728670250.459:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.829191][ T4207] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 104.864050][ T26] audit: type=1326 audit(1728670250.459:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.886683][ T26] audit: type=1326 audit(1728670250.459:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.910725][ T26] audit: type=1326 audit(1728670250.459:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.944347][ T26] audit: type=1326 audit(1728670250.459:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.975357][ T26] audit: type=1326 audit(1728670250.459:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 104.998283][ T4207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.016333][ T26] audit: type=1326 audit(1728670250.459:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 105.147817][ T26] audit: type=1804 audit(1728670251.039:52): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.127" name="/newroot/32/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 105.796302][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.815541][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.892961][ T4087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.031115][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.066393][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.099594][ T3571] attempt to access beyond end of device [ 106.099594][ T3571] loop4: rw=2049, want=45104, limit=40427 [ 106.154349][ T4250] loop0: detected capacity change from 0 to 512 [ 106.215298][ T4087] device veth0_vlan entered promiscuous mode [ 106.242187][ T4252] loop3: detected capacity change from 0 to 2048 [ 106.250450][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.267777][ T4250] EXT4-fs (loop0): Ignoring removed orlov option [ 106.290236][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.322733][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.336916][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.396179][ T4252] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.408696][ T4250] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 106.461808][ T4087] device veth1_vlan entered promiscuous mode [ 106.513335][ T4250] ext4 filesystem being mounted at /43/bus supports timestamps until 2038 (0x7fffffff) [ 106.534595][ T26] audit: type=1800 audit(1728670252.419:53): pid=4252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 106.664924][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.698693][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.719694][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.739139][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.848334][ T3799] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.863325][ T4087] device veth0_macvtap entered promiscuous mode [ 106.873686][ T4260] loop0: detected capacity change from 0 to 2048 [ 106.891553][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.904561][ T4262] loop4: detected capacity change from 0 to 512 [ 106.925338][ T4087] device veth1_macvtap entered promiscuous mode [ 106.953032][ T4262] EXT4-fs (loop4): Ignoring removed orlov option [ 107.008569][ T4260] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.034274][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.045438][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.055539][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.069106][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.079931][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.090851][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.100890][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.111356][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.121295][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.133245][ T4260] ext4 filesystem being mounted at /44/bus supports timestamps until 2038 (0x7fffffff) [ 107.155478][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.172599][ T4262] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 107.196750][ T4262] ext4 filesystem being mounted at /33/bus supports timestamps until 2038 (0x7fffffff) [ 107.208566][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.223431][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.246178][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.283730][ T4265] binder: 4264:4265 ioctl c0306201 20000380 returned -14 [ 107.407911][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.458572][ T3799] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 107.486730][ T3799] usb 4-1: config 0 has no interface number 0 [ 107.497341][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.822281][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.865293][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.888642][ T3799] usb 4-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 107.904115][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.938512][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.957693][ T3799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.976363][ T3799] usb 4-1: Product: syz [ 107.982110][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.006970][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.008694][ T3799] usb 4-1: Manufacturer: syz [ 108.018536][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.032148][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.037343][ T4276] loop2: detected capacity change from 0 to 512 [ 108.043995][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.061298][ T3799] usb 4-1: SerialNumber: syz [ 108.072508][ T3799] usb 4-1: config 0 descriptor?? [ 108.114218][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.143512][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.158802][ T4276] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.146: casefold flag without casefold feature [ 108.180151][ T4279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.145'. [ 108.197445][ T4276] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 108.223843][ T4087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.282665][ T4087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.294862][ T4276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.359153][ T4279] unsupported nlmsg_type 40 [ 108.490404][ T4087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893492][ T4087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.217092][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.278458][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.297927][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.408286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 109.417389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.426444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.435440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.444432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.453383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.462386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.471851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.480839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.489780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.832569][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.861184][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.904516][ T4296] loop0: detected capacity change from 0 to 512 [ 109.971999][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.044651][ T4296] EXT4-fs (loop0): Ignoring removed orlov option [ 110.148014][ T3799] usb 4-1: USB disconnect, device number 3 [ 110.166829][ T4296] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 110.192374][ T4296] ext4 filesystem being mounted at /46/bus supports timestamps until 2038 (0x7fffffff) [ 110.222782][ T154] device hsr_slave_0 left promiscuous mode [ 110.291639][ T154] device hsr_slave_1 left promiscuous mode [ 110.357163][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.378604][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.579519][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.587020][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.693186][ T154] device bridge_slave_1 left promiscuous mode [ 110.711069][ T4289] loop4: detected capacity change from 0 to 40427 [ 110.730296][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.046930][ T4289] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 111.201130][ T4289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 111.347166][ T154] device bridge_slave_0 left promiscuous mode [ 111.358446][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.373025][ T4312] loop0: detected capacity change from 0 to 512 [ 111.435683][ T4316] loop1: detected capacity change from 0 to 2048 [ 111.460627][ T154] device veth1_macvtap left promiscuous mode [ 111.476616][ T154] device veth0_macvtap left promiscuous mode [ 111.483151][ T154] device veth1_vlan left promiscuous mode [ 111.511025][ T4312] EXT4-fs (loop0): Ignoring removed orlov option [ 111.525072][ T154] device veth0_vlan left promiscuous mode [ 111.572214][ T4316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.591455][ T4289] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 111.622049][ T4312] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 111.638477][ T4316] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 111.703544][ T4324] binder: BINDER_SET_CONTEXT_MGR already set [ 111.709790][ T4324] binder: 4310:4324 ioctl 4018620d 200001c0 returned -16 [ 111.745479][ T4312] ext4 filesystem being mounted at /47/bus supports timestamps until 2038 (0x7fffffff) [ 113.124417][ T4337] serio: Serial port pts0 [ 113.177822][ T4339] loop1: detected capacity change from 0 to 512 [ 113.285101][ T4339] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.161: casefold flag without casefold feature [ 113.307219][ T154] team0 (unregistering): Port device team_slave_1 removed [ 113.324400][ T4339] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.161: couldn't read orphan inode 15 (err -117) [ 113.351152][ T154] team0 (unregistering): Port device team_slave_0 removed [ 113.388099][ T4346] loop4: detected capacity change from 0 to 1024 [ 113.405650][ T4339] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.425028][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.478165][ T4348] loop0: detected capacity change from 0 to 512 [ 113.504102][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.572684][ T4348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.641156][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.658902][ T4348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 113.702411][ T4348] EXT4-fs (loop0): 1 truncate cleaned up [ 113.742217][ T4348] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,lazytime,debug_want_extra_isize=0x000000000000002e,lazytime,quota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 113.837833][ T4346] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 113.912227][ T154] bond0 (unregistering): Released all slaves [ 113.914732][ T4355] loop1: detected capacity change from 0 to 2048 [ 113.997325][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.057777][ T26] audit: type=1800 audit(1728670259.939:54): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.164" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 114.082441][ T4362] loop4: detected capacity change from 0 to 512 [ 114.102371][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.117404][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.123180][ T4362] EXT4-fs (loop4): Ignoring removed orlov option [ 114.265412][ T4362] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 114.328551][ T4362] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 114.358362][ T1078] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.662039][ T4373] binder: BINDER_SET_CONTEXT_MGR already set [ 114.668075][ T4373] binder: 4367:4373 ioctl 4018620d 200001c0 returned -16 [ 114.686945][ T4364] loop2: detected capacity change from 0 to 8192 [ 115.510703][ T4364] loop2: p3 p4 < > [ 115.516209][ T4364] loop2: p3 start 619312 is beyond EOD, truncated [ 115.609331][ T4378] loop4: detected capacity change from 0 to 512 [ 115.638646][ T1078] usb 2-1: config 0 has an invalid interface number: 174 but max is 0 [ 115.646862][ T1078] usb 2-1: config 0 has no interface number 0 [ 115.674096][ T4378] EXT4-fs (loop4): Ignoring removed orlov option [ 115.766470][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 115.797351][ T4378] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.828952][ T4378] ext4 filesystem being mounted at /40/bus supports timestamps until 2038 (0x7fffffff) [ 115.868679][ T1078] usb 2-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 115.884733][ T1078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.933768][ T1078] usb 2-1: Product: syz [ 115.962028][ T1078] usb 2-1: Manufacturer: syz [ 115.966673][ T1078] usb 2-1: SerialNumber: syz [ 115.999341][ T1078] usb 2-1: config 0 descriptor?? [ 116.025243][ T4384] loop2: detected capacity change from 0 to 2048 [ 116.092805][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 116.188393][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.331366][ T4392] loop3: detected capacity change from 0 to 512 [ 116.348165][ T4384] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 116.962792][ T4398] netlink: 3 bytes leftover after parsing attributes in process `syz.4.176'. [ 116.978785][ T4398] 0ªX¹¦À: renamed from caif0 [ 116.980984][ T4392] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.175: casefold flag without casefold feature [ 117.007566][ T4398] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 117.024579][ T4392] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 117.070279][ T4392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.143905][ T4376] loop0: detected capacity change from 0 to 40427 [ 117.528744][ T4376] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 117.535215][ T4376] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 118.175462][ T4402] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 118.189802][ T1078] usb 2-1: USB disconnect, device number 2 [ 118.207901][ T4376] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 118.290078][ T4411] loop3: detected capacity change from 0 to 512 [ 118.387211][ T4411] EXT4-fs (loop3): Ignoring removed orlov option [ 118.641420][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 118.658487][ T4411] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 119.445538][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 119.693748][ T4430] loop4: detected capacity change from 0 to 512 [ 119.811213][ T4436] binder: BINDER_SET_CONTEXT_MGR already set [ 119.817365][ T4436] binder: 4424:4436 ioctl 4018620d 200001c0 returned -16 [ 119.836311][ T4425] team0: Port device team_slave_1 removed [ 119.972771][ T4430] EXT4-fs (loop4): Ignoring removed orlov option [ 119.993352][ T4435] loop3: detected capacity change from 0 to 2048 [ 120.072114][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 120.171200][ T4430] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 120.240062][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.437595][ T4450] loop2: detected capacity change from 0 to 2048 [ 120.705197][ T4460] loop3: detected capacity change from 0 to 512 [ 120.850608][ T4450] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.912956][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 120.944704][ T4450] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff) [ 120.955960][ T4460] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.190: casefold flag without casefold feature [ 120.986686][ T4460] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.190: couldn't read orphan inode 15 (err -117) [ 121.071107][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.099509][ T4468] loop4: detected capacity change from 0 to 2048 [ 122.554278][ T4492] loop0: detected capacity change from 0 to 512 [ 122.596465][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.683547][ T26] audit: type=1800 audit(1728670268.569:55): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.191" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 123.158686][ T3617] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.529306][ T4492] EXT4-fs (loop0): Ignoring removed orlov option [ 123.628562][ T3617] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 123.648650][ T3617] usb 5-1: config 0 has no interface number 0 [ 123.671392][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 123.726662][ T4492] ext4 filesystem being mounted at /55/bus supports timestamps until 2038 (0x7fffffff) [ 123.738045][ T26] audit: type=1326 audit(1728670269.629:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 123.763016][ T4502] capability: warning: `syz.2.197' uses 32-bit capabilities (legacy support in use) [ 123.824968][ T26] audit: type=1326 audit(1728670269.649:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 123.926592][ T26] audit: type=1326 audit(1728670269.649:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 123.998300][ T3617] usb 5-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 124.007398][ T3617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.013960][ T26] audit: type=1326 audit(1728670269.699:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 124.048629][ T3617] usb 5-1: Product: syz [ 124.052943][ T3617] usb 5-1: Manufacturer: syz [ 124.103592][ T26] audit: type=1326 audit(1728670269.699:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 124.130858][ T3617] usb 5-1: config 0 descriptor?? [ 124.175100][ T4518] loop2: detected capacity change from 0 to 512 [ 124.198879][ T3617] usb 5-1: can't set config #0, error -71 [ 124.233781][ T3617] usb 5-1: USB disconnect, device number 4 [ 124.303121][ T4518] EXT4-fs (loop2): Ignoring removed orlov option [ 124.574414][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 124.607410][ T4528] binder: 4523:4528 ioctl c0306201 20000380 returned -14 [ 124.635785][ T4518] ext4 filesystem being mounted at /52/bus supports timestamps until 2038 (0x7fffffff) [ 124.651533][ T4532] loop3: detected capacity change from 0 to 2048 [ 124.654782][ T4496] loop1: detected capacity change from 0 to 40427 [ 124.712626][ T4496] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 124.759700][ T4496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 124.794831][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.824812][ T4496] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 124.852757][ T4532] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 124.991512][ T4542] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 125.161786][ T4496] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 125.177711][ T4496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.523755][ T26] audit: type=1804 audit(1728670271.409:61): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.196" name="/newroot/10/file1/file1" dev="loop1" ino=10 res=1 errno=0 [ 126.347632][ T4546] sched: RT throttling activated [ 126.999599][ T4549] loop0: detected capacity change from 0 to 2048 [ 127.172396][ T4559] loop4: detected capacity change from 0 to 512 [ 127.255218][ T4549] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 127.276769][ T4087] attempt to access beyond end of device [ 127.276769][ T4087] loop1: rw=2049, want=45104, limit=40427 [ 127.317308][ T4559] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.210: casefold flag without casefold feature [ 127.366868][ T4559] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 127.508339][ T4559] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.734721][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 127.768564][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 128.204878][ T4575] loop1: detected capacity change from 0 to 2048 [ 128.232302][ T4578] syz.3.215 uses obsolete (PF_INET,SOCK_PACKET) [ 128.370383][ T26] audit: type=1326 audit(1728670274.249:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.407525][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.520158][ T26] audit: type=1326 audit(1728670274.289:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.542757][ T4583] loop2: detected capacity change from 0 to 512 [ 128.551580][ T26] audit: type=1326 audit(1728670274.289:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.574915][ T26] audit: type=1326 audit(1728670274.309:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.597560][ T26] audit: type=1326 audit(1728670274.309:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.620018][ T26] audit: type=1326 audit(1728670274.319:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.646170][ T4583] EXT4-fs (loop2): Ignoring removed orlov option [ 128.663925][ T26] audit: type=1326 audit(1728670274.319:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.698585][ T26] audit: type=1326 audit(1728670274.319:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.731566][ T4583] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 128.778620][ T26] audit: type=1326 audit(1728670274.319:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.801018][ T26] audit: type=1326 audit(1728670274.319:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 128.801624][ T4583] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 128.838342][ T3617] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.985875][ T4587] Invalid ELF header magic: != ELF [ 129.240993][ T4592] binder: BINDER_SET_CONTEXT_MGR already set [ 129.247022][ T4592] binder: 4588:4592 ioctl 4018620d 200001c0 returned -16 [ 129.524344][ T3617] usb 2-1: config 0 has an invalid interface number: 174 but max is 0 [ 129.555559][ T3617] usb 2-1: config 0 has no interface number 0 [ 130.167675][ T3617] usb 2-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 130.238784][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.299021][ T3617] usb 2-1: Product: syz [ 130.307469][ T3617] usb 2-1: Manufacturer: syz [ 130.332856][ T3617] usb 2-1: SerialNumber: syz [ 130.350352][ T4600] loop2: detected capacity change from 0 to 2048 [ 130.360083][ T3617] usb 2-1: config 0 descriptor?? [ 130.417046][ T4604] loop4: detected capacity change from 0 to 512 [ 130.542961][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.571308][ T4604] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.224: casefold flag without casefold feature [ 130.638662][ T4600] ext4 filesystem being mounted at /55/bus supports timestamps until 2038 (0x7fffffff) [ 130.666442][ T4604] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 130.728466][ T4604] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.980419][ T4613] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 132.328127][ T4602] loop3: detected capacity change from 0 to 40427 [ 132.571025][ T4602] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 132.625054][ T4602] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 132.852180][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883884][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.945624][ T4602] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 133.365866][ T3617] usb 2-1: USB disconnect, device number 3 [ 133.528539][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 133.528559][ T26] audit: type=1326 audit(1728670279.369:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 133.707255][ T26] audit: type=1326 audit(1728670279.369:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 133.718142][ T4634] loop1: detected capacity change from 0 to 512 [ 133.817210][ T26] audit: type=1326 audit(1728670279.369:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 133.937034][ T26] audit: type=1326 audit(1728670279.369:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 133.945606][ T4637] loop2: detected capacity change from 0 to 512 [ 133.968422][ T4634] EXT4-fs (loop1): Ignoring removed orlov option [ 133.979890][ T26] audit: type=1326 audit(1728670279.369:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd7809ff9 code=0x7ffc0000 [ 134.103599][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 134.179101][ T4637] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 134.208684][ T4637] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff) [ 134.218801][ T4634] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 134.914230][ T4652] loop1: detected capacity change from 0 to 2048 [ 135.035405][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.088520][ T4652] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 135.135378][ T4654] binder: 4649:4654 ioctl c0306201 20000380 returned -14 [ 135.494122][ T4662] loop2: detected capacity change from 0 to 512 [ 135.541636][ T4662] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.239: casefold flag without casefold feature [ 135.565309][ T4662] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.239: couldn't read orphan inode 15 (err -117) [ 135.602747][ T4665] loop0: detected capacity change from 0 to 2048 [ 135.608628][ T4662] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.909234][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.998309][ T26] audit: type=1800 audit(1728670281.879:82): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.241" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 136.354531][ T4682] loop1: detected capacity change from 0 to 512 [ 136.368402][ T3614] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.448364][ T4682] EXT4-fs (loop1): Ignoring removed orlov option [ 136.547308][ T4682] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 136.588436][ T4682] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 136.748661][ T3614] usb 1-1: config 0 has an invalid interface number: 174 but max is 0 [ 136.772586][ T3614] usb 1-1: config 0 has no interface number 0 [ 136.988763][ T3614] usb 1-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 137.026499][ T3614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.074074][ T3614] usb 1-1: Product: syz [ 137.123144][ T3614] usb 1-1: Manufacturer: syz [ 137.127788][ T3614] usb 1-1: SerialNumber: syz [ 137.939790][ T3614] usb 1-1: config 0 descriptor?? [ 138.145518][ T4702] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 138.163113][ T4700] loop1: detected capacity change from 0 to 2048 [ 138.661235][ T4707] binder: BINDER_SET_CONTEXT_MGR already set [ 138.667632][ T4707] binder: 4703:4707 ioctl 4018620d 200001c0 returned -16 [ 139.235592][ T4700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.295850][ T4700] ext4 filesystem being mounted at /20/bus supports timestamps until 2038 (0x7fffffff) [ 139.610476][ T4712] loop4: detected capacity change from 0 to 512 [ 139.732759][ T4716] syz.1.255 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.804348][ T4712] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.254: casefold flag without casefold feature [ 139.824771][ T4712] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.254: couldn't read orphan inode 15 (err -117) [ 139.919857][ T4712] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.989169][ T4721] loop2: detected capacity change from 0 to 512 [ 141.319088][ T3614] usb 1-1: USB disconnect, device number 2 [ 141.355574][ T4721] EXT4-fs (loop2): Ignoring removed orlov option [ 141.477855][ T4721] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 141.542147][ T4721] ext4 filesystem being mounted at /66/bus supports timestamps until 2038 (0x7fffffff) [ 141.931735][ T4749] binder: BINDER_SET_CONTEXT_MGR already set [ 141.937816][ T4749] binder: 4739:4749 ioctl 4018620d 200001c0 returned -16 [ 142.344711][ T4752] loop2: detected capacity change from 0 to 2048 [ 142.555817][ T4752] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.567370][ T4752] ext4 filesystem being mounted at /67/bus supports timestamps until 2038 (0x7fffffff) [ 142.851329][ T4759] loop4: detected capacity change from 0 to 2048 [ 142.952149][ T4764] loop1: detected capacity change from 0 to 512 [ 142.980556][ T4748] loop3: detected capacity change from 0 to 40427 [ 143.188608][ T4748] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 143.193101][ T4764] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.271: casefold flag without casefold feature [ 143.196357][ T4759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.220321][ T4764] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.271: couldn't read orphan inode 15 (err -117) [ 143.253544][ T4748] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 143.295344][ T4764] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.380680][ T4748] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 143.395676][ T26] audit: type=1800 audit(1728670289.279:83): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.270" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 143.726759][ T4748] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 143.738412][ T1078] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.748406][ T4748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.840877][ T26] audit: type=1804 audit(1728670289.729:84): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.266" name="/newroot/28/file1/file1" dev="loop3" ino=10 res=1 errno=0 [ 144.118653][ T1078] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 144.924420][ T1078] usb 5-1: config 0 has no interface number 0 [ 145.112071][ T1078] usb 5-1: New USB device found, idVendor=045e, idProduct=0432, bcdDevice=90.c6 [ 145.162473][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.195513][ T1078] usb 5-1: Product: syz [ 145.218564][ T1078] usb 5-1: Manufacturer: syz [ 145.223251][ T1078] usb 5-1: SerialNumber: syz [ 145.266152][ T1078] usb 5-1: config 0 descriptor?? [ 145.360111][ T26] audit: type=1326 audit(1728670291.249:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 145.400456][ T3943] attempt to access beyond end of device [ 145.400456][ T3943] loop3: rw=2049, want=45104, limit=40427 [ 145.450070][ T26] audit: type=1326 audit(1728670291.279:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 145.534207][ T4787] loop2: detected capacity change from 0 to 512 [ 145.551279][ T26] audit: type=1326 audit(1728670291.279:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 145.600558][ T26] audit: type=1326 audit(1728670291.279:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31539ff9 code=0x7ffc0000 [ 145.767352][ T4787] EXT4-fs (loop2): Ignoring removed orlov option [ 146.026394][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 146.072138][ T4787] ext4 filesystem being mounted at /70/bus supports timestamps until 2038 (0x7fffffff) [ 146.844542][ T4799] binder: 4797:4799 ioctl c0306201 20000380 returned -14 [ 146.954059][ T4795] ------------[ cut here ]------------ [ 146.960111][ T4795] WARNING: CPU: 1 PID: 4795 at kernel/cgroup/cgroup.c:1424 cset_cgroup_from_root+0x1c7/0x230 [ 146.970351][ T4795] Modules linked in: [ 146.974277][ T4795] CPU: 1 PID: 4795 Comm: syz.3.276 Not tainted 5.15.167-syzkaller #0 [ 146.982364][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.992446][ T4795] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 146.998548][ T4795] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 147.018188][ T4795] RSP: 0018:ffffc90002f47958 EFLAGS: 00010083 [ 147.024288][ T4795] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 147.032282][ T4795] RDX: ffffc9000f172000 RSI: 0000000000000749 RDI: 000000000000074a [ 147.040265][ T4795] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 147.048313][ T4795] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a2b2000 [ 147.056271][ T4795] R13: dffffc0000000000 R14: ffff888075b5c000 R15: ffff88807e95c000 [ 147.064252][ T4795] FS: 00007f592c43e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 147.073258][ T4795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.079829][ T4795] CR2: 0000000020a0a000 CR3: 0000000072999000 CR4: 00000000003506e0 [ 147.087790][ T4795] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.095837][ T4795] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.103822][ T4795] Call Trace: [ 147.107103][ T4795] [ 147.110026][ T4795] ? __warn+0x15b/0x300 [ 147.114190][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.119644][ T4795] ? report_bug+0x1b7/0x2e0 [ 147.124163][ T4795] ? handle_bug+0x3d/0x70 [ 147.128480][ T4795] ? exc_invalid_op+0x16/0x40 [ 147.133245][ T4795] ? asm_exc_invalid_op+0x16/0x20 [ 147.138283][ T4795] ? cset_cgroup_from_root+0x65/0x230 [ 147.143667][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.149161][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.154638][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.160094][ T4795] cgroup_path_ns_locked+0x6c/0xd0 [ 147.165205][ T4795] proc_cpuset_show+0x27d/0x3f0 [ 147.170067][ T4795] proc_single_show+0xf6/0x180 [ 147.174822][ T4795] seq_read_iter+0x43a/0xd10 [ 147.179416][ T4795] seq_read+0x452/0x5c0 [ 147.183563][ T4795] ? seq_open+0x140/0x140 [ 147.187901][ T4795] ? _copy_from_user+0x10f/0x170 [ 147.192845][ T4795] ? common_file_perm+0x17d/0x1d0 [ 147.197871][ T4795] ? fsnotify_perm+0x442/0x590 [ 147.202689][ T4795] do_iter_read+0x4c6/0x760 [ 147.207206][ T4795] do_preadv+0x211/0x350 [ 147.211448][ T4795] ? do_writev+0x470/0x470 [ 147.215966][ T4795] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 147.221940][ T4795] ? vtime_user_exit+0x2d1/0x400 [ 147.226872][ T4795] ? syscall_enter_from_user_mode+0x2e/0x240 [ 147.233125][ T4795] ? lockdep_hardirqs_on+0x94/0x130 [ 147.238343][ T4795] ? syscall_enter_from_user_mode+0x2e/0x240 [ 147.244395][ T4795] do_syscall_64+0x3b/0xb0 [ 147.248813][ T4795] ? clear_bhb_loop+0x15/0x70 [ 147.253479][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.259363][ T4795] RIP: 0033:0x7f592dfc5ff9 [ 147.263776][ T4795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.283369][ T4795] RSP: 002b:00007f592c43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 147.291771][ T4795] RAX: ffffffffffffffda RBX: 00007f592e17df80 RCX: 00007f592dfc5ff9 [ 147.299729][ T4795] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000006 [ 147.307701][ T4795] RBP: 00007f592e038296 R08: 0000000000000000 R09: 0000000000000000 [ 147.315662][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.323620][ T4795] R13: 0000000000000000 R14: 00007f592e17df80 R15: 00007fff864dd748 [ 147.331630][ T4795] [ 147.334667][ T4795] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.341930][ T4795] CPU: 1 PID: 4795 Comm: syz.3.276 Not tainted 5.15.167-syzkaller #0 [ 147.349993][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.360036][ T4795] Call Trace: [ 147.363320][ T4795] [ 147.366251][ T4795] dump_stack_lvl+0x1e3/0x2d0 [ 147.370939][ T4795] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 147.376577][ T4795] ? panic+0x860/0x860 [ 147.380646][ T4795] ? cset_cgroup_from_root+0x180/0x230 [ 147.386094][ T4795] ? cset_cgroup_from_root+0x180/0x230 [ 147.391543][ T4795] panic+0x318/0x860 [ 147.395432][ T4795] ? __warn+0x16a/0x300 [ 147.399586][ T4795] ? fb_is_primary_device+0xd0/0xd0 [ 147.404786][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.410237][ T4795] __warn+0x2b2/0x300 [ 147.414239][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.419689][ T4795] report_bug+0x1b7/0x2e0 [ 147.424039][ T4795] handle_bug+0x3d/0x70 [ 147.428185][ T4795] exc_invalid_op+0x16/0x40 [ 147.432679][ T4795] asm_exc_invalid_op+0x16/0x20 [ 147.437627][ T4795] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 147.443693][ T4795] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 147.463394][ T4795] RSP: 0018:ffffc90002f47958 EFLAGS: 00010083 [ 147.469470][ T4795] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 147.477429][ T4795] RDX: ffffc9000f172000 RSI: 0000000000000749 RDI: 000000000000074a [ 147.485410][ T4795] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 147.493405][ T4795] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a2b2000 [ 147.501375][ T4795] R13: dffffc0000000000 R14: ffff888075b5c000 R15: ffff88807e95c000 [ 147.509348][ T4795] ? cset_cgroup_from_root+0x65/0x230 [ 147.514714][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.520173][ T4795] ? cset_cgroup_from_root+0x1c7/0x230 [ 147.525622][ T4795] cgroup_path_ns_locked+0x6c/0xd0 [ 147.530727][ T4795] proc_cpuset_show+0x27d/0x3f0 [ 147.535572][ T4795] proc_single_show+0xf6/0x180 [ 147.540327][ T4795] seq_read_iter+0x43a/0xd10 [ 147.544923][ T4795] seq_read+0x452/0x5c0 [ 147.549077][ T4795] ? seq_open+0x140/0x140 [ 147.553402][ T4795] ? _copy_from_user+0x10f/0x170 [ 147.558331][ T4795] ? common_file_perm+0x17d/0x1d0 [ 147.563346][ T4795] ? fsnotify_perm+0x442/0x590 [ 147.568104][ T4795] do_iter_read+0x4c6/0x760 [ 147.572609][ T4795] do_preadv+0x211/0x350 [ 147.576850][ T4795] ? do_writev+0x470/0x470 [ 147.581267][ T4795] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 147.587241][ T4795] ? vtime_user_exit+0x2d1/0x400 [ 147.592173][ T4795] ? syscall_enter_from_user_mode+0x2e/0x240 [ 147.598157][ T4795] ? lockdep_hardirqs_on+0x94/0x130 [ 147.603360][ T4795] ? syscall_enter_from_user_mode+0x2e/0x240 [ 147.609333][ T4795] do_syscall_64+0x3b/0xb0 [ 147.613738][ T4795] ? clear_bhb_loop+0x15/0x70 [ 147.618426][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.624314][ T4795] RIP: 0033:0x7f592dfc5ff9 [ 147.628720][ T4795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.648457][ T4795] RSP: 002b:00007f592c43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 147.656878][ T4795] RAX: ffffffffffffffda RBX: 00007f592e17df80 RCX: 00007f592dfc5ff9 [ 147.664854][ T4795] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000006 [ 147.672822][ T4795] RBP: 00007f592e038296 R08: 0000000000000000 R09: 0000000000000000 [ 147.681057][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.689115][ T4795] R13: 0000000000000000 R14: 00007f592e17df80 R15: 00007fff864dd748 [ 147.697089][ T4795] [ 148.798861][ T4795] Shutting down cpus with NMI [ 148.803952][ T4795] Kernel Offset: disabled [ 148.808574][ T4795] Rebooting in 86400 seconds..