last executing test programs: 6.573137439s ago: executing program 1 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x30, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$NL80211_CMD_JOIN_OCB(r4, 0x0, 0x20000000) unshare(0x62040200) 5.520690275s ago: executing program 3 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 5.21381451s ago: executing program 3 (id=699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x104, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 5.008551903s ago: executing program 2 (id=700): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 3.375290948s ago: executing program 2 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x210) connect$tipc(r4, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5", 0x48}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 3.20044336s ago: executing program 3 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x9, 0x6, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 3.076664253s ago: executing program 3 (id=703): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x11) 2.749666647s ago: executing program 0 (id=705): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.734885108s ago: executing program 1 (id=706): syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) 2.55019479s ago: executing program 0 (id=707): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.301060785s ago: executing program 2 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 2.239884715s ago: executing program 1 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 1.404690848s ago: executing program 3 (id=710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 1.399310328s ago: executing program 0 (id=711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.363766809s ago: executing program 3 (id=712): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) 1.225814801s ago: executing program 0 (id=713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.225109671s ago: executing program 2 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.145078442s ago: executing program 1 (id=715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.080511333s ago: executing program 2 (id=716): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x13796, 0xffffffffffffffff, 0x5, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000081000000000000000000800000f8ff", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) capget(0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000008c000000050000000000000036acebf9b39c7b0701ed68e61a927d7824d3d06e49c2a036bb8b7544ed1bc13a4bf5b96516f6a87033819c0dce218a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 1.012414814s ago: executing program 0 (id=717): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004000000"], 0x30}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@const={0x5, 0x0, 0x0, 0xa, 0x5}, @union={0x7, 0x8, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x100}, {0x6, 0x2, 0xfffffff1}, {0x3, 0x2, 0xff}, {0x2, 0x3, 0x3}, {0xb, 0x5, 0x7fff}, {0x6, 0x1, 0xf}, {0x8, 0x4, 0x9}, {0x0, 0x2, 0xffffffff}]}, @const={0x8, 0x0, 0x0, 0xa, 0x4}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x7}, {0xd, 0x1}, {0xf, 0x9}]}]}, {0x0, [0x2e, 0x5f, 0x0]}}, &(0x7f0000000440)=""/70, 0xc5, 0x46, 0x0, 0x8a10, 0x10000}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, r5, 0x14200, 0x7661c}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @IFLA_VF_PORTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0xe, 0x3, 0x10001, 0xffffffffffffffff, 0x1, '\x00', r5, r2, 0x2, 0x0, 0x0, 0x6}, 0x50) 810.017107ms ago: executing program 1 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000840900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) 45.423649ms ago: executing program 1 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 43.909239ms ago: executing program 2 (id=720): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 0 (id=721): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 64.016249][ T5774] cgroup: Unknown subsys name 'net' [ 64.150694][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.465346][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.925257][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.934867][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.937551][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.942929][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.951675][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.965016][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.972858][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.980305][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.996021][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.996152][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.004256][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.012768][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.018025][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.032412][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.032761][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.040912][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.047288][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.054379][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.062148][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.075523][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.083869][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.094290][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.105579][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.114120][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.530585][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 67.596059][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 67.626706][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.734234][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 67.773726][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.781675][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.789710][ T5786] bridge_slave_0: entered allmulticast mode [ 67.796759][ T5786] bridge_slave_0: entered promiscuous mode [ 67.841343][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.848971][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.856299][ T5786] bridge_slave_1: entered allmulticast mode [ 67.863021][ T5786] bridge_slave_1: entered promiscuous mode [ 67.879363][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.886560][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.894171][ T5785] bridge_slave_0: entered allmulticast mode [ 67.900871][ T5785] bridge_slave_0: entered promiscuous mode [ 67.941112][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.948413][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.956597][ T5785] bridge_slave_1: entered allmulticast mode [ 67.963315][ T5785] bridge_slave_1: entered promiscuous mode [ 67.980162][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.987375][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.994635][ T5784] bridge_slave_0: entered allmulticast mode [ 68.001372][ T5784] bridge_slave_0: entered promiscuous mode [ 68.021676][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.045579][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.052745][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.060536][ T5784] bridge_slave_1: entered allmulticast mode [ 68.067426][ T5784] bridge_slave_1: entered promiscuous mode [ 68.098141][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.105372][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.112625][ T5787] bridge_slave_0: entered allmulticast mode [ 68.119735][ T5787] bridge_slave_0: entered promiscuous mode [ 68.129242][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.140986][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.164066][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.173312][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.180917][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.188176][ T5787] bridge_slave_1: entered allmulticast mode [ 68.195172][ T5787] bridge_slave_1: entered promiscuous mode [ 68.228269][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.239369][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.282333][ T5786] team0: Port device team_slave_0 added [ 68.321387][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.332820][ T5786] team0: Port device team_slave_1 added [ 68.352641][ T5785] team0: Port device team_slave_0 added [ 68.362271][ T5784] team0: Port device team_slave_0 added [ 68.371027][ T5784] team0: Port device team_slave_1 added [ 68.378840][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.400565][ T5785] team0: Port device team_slave_1 added [ 68.447081][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.454269][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.480239][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.506583][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.513603][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.539887][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.561432][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.568584][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.595004][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.620827][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.627984][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.654303][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.674318][ T5787] team0: Port device team_slave_0 added [ 68.683749][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.690801][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.721101][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.734314][ T5787] team0: Port device team_slave_1 added [ 68.761359][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.768596][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.794917][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.824856][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.831832][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.858238][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.870828][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.878182][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.904900][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.945237][ T5786] hsr_slave_0: entered promiscuous mode [ 68.951642][ T5786] hsr_slave_1: entered promiscuous mode [ 68.986336][ T5784] hsr_slave_0: entered promiscuous mode [ 68.992923][ T5784] hsr_slave_1: entered promiscuous mode [ 68.999976][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.008050][ T5784] Cannot create hsr debugfs directory [ 69.052538][ T5785] hsr_slave_0: entered promiscuous mode [ 69.059553][ T5785] hsr_slave_1: entered promiscuous mode [ 69.066117][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.075040][ T5785] Cannot create hsr debugfs directory [ 69.104169][ T5788] Bluetooth: hci1: command tx timeout [ 69.104176][ T50] Bluetooth: hci0: command tx timeout [ 69.128847][ T5787] hsr_slave_0: entered promiscuous mode [ 69.136388][ T5787] hsr_slave_1: entered promiscuous mode [ 69.142491][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.150124][ T5787] Cannot create hsr debugfs directory [ 69.184210][ T5788] Bluetooth: hci2: command tx timeout [ 69.184292][ T50] Bluetooth: hci3: command tx timeout [ 69.523954][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.534483][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.543779][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.554648][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.621821][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.639432][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.652725][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.664271][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.755392][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.790658][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.804669][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.816574][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.879622][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.890334][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.901710][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.911699][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.946790][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.006866][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.031777][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.039218][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.083264][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.098602][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.105791][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.164713][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.178787][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.185985][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.206436][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.247965][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.255116][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.269705][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.302793][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.309978][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.352879][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.360107][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.380063][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.497614][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.510908][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.560630][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.610928][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.618149][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.679353][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.698821][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.706012][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.877573][ T5784] veth0_vlan: entered promiscuous mode [ 70.916185][ T5784] veth1_vlan: entered promiscuous mode [ 70.971426][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.017934][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.062869][ T5784] veth0_macvtap: entered promiscuous mode [ 71.149651][ T5784] veth1_macvtap: entered promiscuous mode [ 71.184180][ T50] Bluetooth: hci0: command tx timeout [ 71.189868][ T50] Bluetooth: hci1: command tx timeout [ 71.208032][ T5786] veth0_vlan: entered promiscuous mode [ 71.221204][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.230546][ T5785] veth0_vlan: entered promiscuous mode [ 71.249033][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.263162][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.270461][ T50] Bluetooth: hci3: command tx timeout [ 71.274819][ T5788] Bluetooth: hci2: command tx timeout [ 71.281666][ T5786] veth1_vlan: entered promiscuous mode [ 71.289802][ T5785] veth1_vlan: entered promiscuous mode [ 71.300541][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.311927][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321667][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.330650][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.436053][ T5787] veth0_vlan: entered promiscuous mode [ 71.452821][ T5786] veth0_macvtap: entered promiscuous mode [ 71.460796][ T5785] veth0_macvtap: entered promiscuous mode [ 71.479458][ T5787] veth1_vlan: entered promiscuous mode [ 71.492546][ T5785] veth1_macvtap: entered promiscuous mode [ 71.511863][ T5786] veth1_macvtap: entered promiscuous mode [ 71.577678][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.591388][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.600387][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.607036][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.614400][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637851][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.650700][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.659003][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.670650][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.681956][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.692465][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.706183][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.731598][ T5787] veth0_macvtap: entered promiscuous mode [ 71.746620][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.758724][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770327][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.781167][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.790237][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.799052][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.808004][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.842021][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.852753][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.862802][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.873308][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.884704][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.900568][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.909922][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.918896][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.927781][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945255][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.947136][ T5787] veth1_macvtap: entered promiscuous mode [ 71.956705][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.040686][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.054843][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.068423][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.079415][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.089891][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.101070][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.113498][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.158721][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.171996][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.183176][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.196689][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.207925][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.225401][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.246738][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.297015][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307035][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.322702][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.332286][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.358944][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.369456][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.459577][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.478165][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.256363][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.275820][ T5788] Bluetooth: hci1: command tx timeout [ 73.282125][ T5788] Bluetooth: hci0: command tx timeout [ 73.289081][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.344332][ T5788] Bluetooth: hci3: command tx timeout [ 73.344340][ T50] Bluetooth: hci2: command tx timeout [ 73.349473][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.364020][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.517294][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.564200][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.962499][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.979006][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.830194][ T5884] tty tty3: ldisc open failed (-12), clearing slot 2 [ 75.281235][ T5900] syz.3.5[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.328934][ T5900] loop3: detected capacity change from 0 to 4096 [ 75.337558][ T5900] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.403644][ T5901] Zero length message leads to an empty skb [ 76.739575][ T50] Bluetooth: hci1: command tx timeout [ 76.745437][ T5800] Bluetooth: hci3: command tx timeout [ 76.752090][ T50] Bluetooth: hci2: command tx timeout [ 76.758677][ T5788] Bluetooth: hci0: command tx timeout [ 78.283143][ T5898] sched: RT throttling activated [ 78.322049][ T5900] fscrypt: Error allocating hmac(sha512): -2 [ 78.664267][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.351114][ T5921] loop3: detected capacity change from 0 to 40427 [ 81.136577][ T5921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.218477][ T5921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.229684][ T5942] loop0: detected capacity change from 0 to 256 [ 82.301068][ T965] cfg80211: failed to load regulatory.db [ 83.351956][ T5955] loop1: detected capacity change from 0 to 128 [ 84.619138][ T5964] loop0: detected capacity change from 0 to 128 [ 84.651851][ T5964] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 84.995288][ T5969] loop2: detected capacity change from 0 to 1024 [ 85.006223][ T5969] ======================================================= [ 85.006223][ T5969] WARNING: The mand mount option has been deprecated and [ 85.006223][ T5969] and is ignored by this kernel. Remove the mand [ 85.006223][ T5969] option from the mount to silence this warning. [ 85.006223][ T5969] ======================================================= [ 85.046419][ T5969] EXT4-fs: Ignoring removed bh option [ 85.099152][ T5969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.181460][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.564651][ T5785] syz-executor: attempt to access beyond end of device [ 86.564651][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.580584][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 88.116635][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.687339][ T5988] loop0: detected capacity change from 0 to 256 [ 94.805524][ T6026] loop3: detected capacity change from 0 to 8192 [ 95.065630][ T6031] tipc: Failed to obtain node identity [ 95.071278][ T6031] tipc: Enabling of bearer rejected, failed to enable media [ 96.539188][ T6038] serio: Serial port ptm0 [ 96.900964][ T6053] loop3: detected capacity change from 0 to 128 [ 96.930850][ T6053] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.955232][ T6053] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.319180][ T6057] netlink: 'syz.3.41': attribute type 11 has an invalid length. [ 97.329858][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.398493][ T6060] loop1: detected capacity change from 0 to 256 [ 97.412742][ T6060] exfat: Deprecated parameter 'utf8' [ 97.493889][ T6060] exfat: Deprecated parameter 'utf8' [ 97.635209][ T6060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 97.901951][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.444049][ T5791] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.340866][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.366424][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.397060][ T5791] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.605813][ T6085] loop1: detected capacity change from 0 to 1024 [ 99.613338][ T6085] EXT4-fs: Ignoring removed bh option [ 99.629628][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.706077][ T6085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.834583][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.117049][ T5791] usb 3-1: config 0 descriptor?? [ 101.035912][ T6090] hub 6-0:1.0: USB hub found [ 101.063425][ T6090] hub 6-0:1.0: 1 port detected [ 101.281513][ T5791] usb 3-1: can't set config #0, error -71 [ 101.481855][ T5776] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 101.488237][ T5791] usb 3-1: USB disconnect, device number 2 [ 101.517970][ T5776] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 101.553790][ T5776] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 101.618482][ T5776] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 101.670293][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.900287][ T6097] fido_id[6097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.221975][ T6114] loop2: detected capacity change from 0 to 256 [ 103.295140][ T6114] FAT-fs (loop2): Directory bread(block 64) failed [ 103.301753][ T6114] FAT-fs (loop2): Directory bread(block 65) failed [ 103.329472][ T6114] FAT-fs (loop2): Directory bread(block 66) failed [ 103.348868][ T6114] FAT-fs (loop2): Directory bread(block 67) failed [ 103.389251][ T6114] FAT-fs (loop2): Directory bread(block 68) failed [ 103.409367][ T6114] FAT-fs (loop2): Directory bread(block 69) failed [ 103.426174][ T6114] FAT-fs (loop2): Directory bread(block 70) failed [ 103.453302][ T6114] FAT-fs (loop2): Directory bread(block 71) failed [ 103.478581][ T6114] FAT-fs (loop2): Directory bread(block 72) failed [ 103.493799][ T6114] FAT-fs (loop2): Directory bread(block 73) failed [ 103.662733][ T6118] loop3: detected capacity change from 0 to 256 [ 103.705759][ T6118] exfat: Deprecated parameter 'utf8' [ 103.727755][ T27] audit: type=1800 audit(1752023212.426:2): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 103.735106][ T6118] exfat: Deprecated parameter 'utf8' [ 104.021916][ T6120] syz.2.55: attempt to access beyond end of device [ 104.021916][ T6120] loop2: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 104.113391][ T6118] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 104.635607][ T2910] kworker/u4:8: attempt to access beyond end of device [ 104.635607][ T2910] loop2: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 104.657222][ T2910] kworker/u4:8: attempt to access beyond end of device [ 104.657222][ T2910] loop2: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 104.688549][ T2910] kworker/u4:8: attempt to access beyond end of device [ 104.688549][ T2910] loop2: rw=1, sector=1864, nr_sectors = 1576 limit=256 [ 105.311222][ T6133] loop2: detected capacity change from 0 to 512 [ 105.471168][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.484478][ T6133] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.690266][ T6126] loop1: detected capacity change from 0 to 512 [ 107.307412][ T6143] loop3: detected capacity change from 0 to 1024 [ 107.315455][ T6143] EXT4-fs: Ignoring removed bh option [ 107.442589][ T6143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.607151][ T6143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.686273][ T6126] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.60: corrupted in-inode xattr: invalid ea_ino [ 107.755377][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.972442][ T6126] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.60: couldn't read orphan inode 15 (err -117) [ 108.043803][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.638829][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.799457][ T6150] loop2: detected capacity change from 0 to 128 [ 109.869938][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.193891][ T6156] serio: Serial port ptm0 [ 111.120652][ T6164] hub 6-0:1.0: USB hub found [ 111.137785][ T6164] hub 6-0:1.0: 1 port detected [ 111.301006][ T6167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.594921][ T6171] loop0: detected capacity change from 0 to 256 [ 111.625106][ T6171] exfat: Deprecated parameter 'utf8' [ 111.636052][ T6171] exfat: Deprecated parameter 'utf8' [ 111.672916][ T6171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 115.850542][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 115.859666][ T6203] bridge_slave_1: left allmulticast mode [ 115.865599][ T6203] bridge_slave_1: left promiscuous mode [ 115.871972][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.218556][ T6203] bridge_slave_0: left allmulticast mode [ 116.224993][ T6203] bridge_slave_0: left promiscuous mode [ 116.230754][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.309219][ T6200] serio: Serial port ptm0 [ 116.693334][ T6209] hub 6-0:1.0: USB hub found [ 116.698386][ T6209] hub 6-0:1.0: 1 port detected [ 118.584929][ T6229] loop2: detected capacity change from 0 to 128 [ 118.606846][ T6229] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.730797][ T27] audit: type=1800 audit(1752023227.436:3): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.83" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 120.386169][ T6245] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 120.834552][ T6247] serio: Serial port ptm0 [ 121.790741][ T6254] loop0: detected capacity change from 0 to 128 [ 121.847275][ T6254] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 123.529470][ T6272] loop3: detected capacity change from 0 to 2048 [ 123.681019][ T6272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.661666][ T6283] loop0: detected capacity change from 0 to 512 [ 125.694808][ T6283] EXT4-fs: Ignoring removed bh option [ 125.792559][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.836686][ T6283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.889437][ T6283] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.824086][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.141751][ T6303] loop3: detected capacity change from 0 to 128 [ 127.178813][ T6303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 129.340332][ T6325] loop3: detected capacity change from 0 to 2048 [ 129.430064][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.597019][ T6325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.727450][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.091165][ T6353] loop3: detected capacity change from 0 to 128 [ 131.134083][ T6353] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 131.530538][ T6360] loop2: detected capacity change from 0 to 128 [ 132.020622][ T6355] loop0: detected capacity change from 0 to 40427 [ 132.056925][ T6355] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 132.083615][ T6355] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.125170][ T6355] F2FS-fs (loop0): invalid crc value [ 132.152649][ T6355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.427476][ T6355] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.446376][ T6355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.044475][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051031][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.932093][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.976873][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.051037][ T6400] loop0: detected capacity change from 0 to 128 [ 136.088031][ T6400] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 136.135304][ T6397] loop3: detected capacity change from 0 to 8192 [ 136.136876][ T6399] bridge0: entered allmulticast mode [ 136.144199][ T6402] kernel profiling enabled (shift: 17) [ 136.167485][ T6399] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 136.249287][ T6397] loop3: p1 < > p3 < p5 > p4 [ 136.255939][ T6393] netlink: 'syz.1.126': attribute type 16 has an invalid length. [ 136.270752][ T6397] loop3: partition table partially beyond EOD, truncated [ 136.297185][ T6393] netlink: 'syz.1.126': attribute type 17 has an invalid length. [ 136.314159][ T6397] loop3: p1 start 4294967040 is beyond EOD, truncated [ 136.336123][ T6393] bridge0: left allmulticast mode [ 136.671192][ T6409] loop3: detected capacity change from 0 to 1024 [ 136.683098][ T6409] EXT4-fs: Ignoring removed bh option [ 136.711693][ T6409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.796176][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.625361][ T5998] udevd[5998]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 137.645125][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 137.657565][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 139.741508][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.279009][ T6444] loop0: detected capacity change from 0 to 8192 [ 141.361446][ T6447] veth1_to_hsr: entered promiscuous mode [ 141.367662][ T6447] macsec1: entered promiscuous mode [ 141.373282][ T6447] macsec1: entered allmulticast mode [ 141.379511][ T6447] veth1_to_hsr: entered allmulticast mode [ 141.390447][ T6447] veth1_to_hsr: left allmulticast mode [ 141.403222][ T6444] loop0: p1 < > p3 < p5 > p4 [ 141.408986][ T6447] veth1_to_hsr: left promiscuous mode [ 141.419074][ T6444] loop0: partition table partially beyond EOD, truncated [ 141.439637][ T6444] loop0: p1 start 4294967040 is beyond EOD, truncated [ 141.880244][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 141.910938][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 141.921516][ T5998] udevd[5998]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 144.037808][ T6467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.823859][ T6500] loop3: detected capacity change from 0 to 2048 [ 148.859030][ T6500] EXT4-fs (loop3): inodes count not valid: 1 vs 32 [ 149.099586][ T6509] overlay: Unknown parameter '/' [ 149.211145][ T6510] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 150.761036][ T6506] loop2: detected capacity change from 0 to 512 [ 150.975087][ T6506] EXT4-fs (loop2): 1 truncate cleaned up [ 151.006524][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.816868][ T6535] loop0: detected capacity change from 0 to 1024 [ 152.824407][ T6535] EXT4-fs: Ignoring removed bh option [ 152.970219][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.058694][ T6535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.967146][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.953958][ T6586] loop1: detected capacity change from 0 to 512 [ 161.077986][ T6589] loop3: detected capacity change from 0 to 1024 [ 161.085797][ T6589] EXT4-fs: Ignoring removed bh option [ 161.098489][ T6589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.151372][ T6589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.194392][ T6586] EXT4-fs: Ignoring removed bh option [ 161.814548][ T6586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.873761][ T6586] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.986256][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.987724][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.290239][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.436385][ T6649] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.847100][ T6657] loop0: detected capacity change from 0 to 2048 [ 169.037113][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.960593][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 170.100761][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.002362][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 172.063868][ T5795] Bluetooth: hci0: command 0x0401 tx timeout [ 172.436362][ T6696] loop0: detected capacity change from 0 to 2048 [ 172.501747][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.825969][ T6711] loop1: detected capacity change from 0 to 2048 [ 173.888461][ T6711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.932567][ T6707] loop3: detected capacity change from 0 to 8192 [ 174.092554][ T6707] loop3: p1 < > p3 < p5 > p4 [ 174.124608][ T6707] loop3: partition table partially beyond EOD, truncated [ 174.162222][ T6711] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.180435][ T6707] loop3: p1 start 4294967040 is beyond EOD, truncated [ 174.233275][ T6711] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 94 with error 28 [ 174.248681][ T6711] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.248681][ T6711] [ 174.261532][ T6711] EXT4-fs (loop1): Total free blocks count 0 [ 174.268053][ T6711] EXT4-fs (loop1): Free/Dirty block details [ 174.283826][ T6711] EXT4-fs (loop1): free_blocks=2415919104 [ 174.293918][ T6711] EXT4-fs (loop1): dirty_blocks=96 [ 174.299080][ T6711] EXT4-fs (loop1): Block reservation details [ 174.339808][ T6711] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 174.484797][ T2965] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 174.560780][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 174.571150][ T5998] udevd[5998]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 174.584493][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 176.109303][ T6733] loop1: detected capacity change from 0 to 40427 [ 176.167549][ T6733] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.340704][ T6733] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.566820][ T5787] syz-executor: attempt to access beyond end of device [ 177.566820][ T5787] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.618943][ T5787] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.688276][ T6752] loop3: detected capacity change from 0 to 8192 [ 178.768064][ T6752] loop3: p1 < > p3 < p5 > p4 [ 178.772908][ T6752] loop3: partition table partially beyond EOD, truncated [ 178.799462][ T6752] loop3: p1 start 4294967040 is beyond EOD, truncated [ 179.091689][ T6754] loop3: detected capacity change from 0 to 2048 [ 179.101624][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 179.119469][ T5998] udevd[5998]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 179.127662][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.310153][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.446193][ T6763] hub 6-0:1.0: USB hub found [ 179.450697][ T6754] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.451071][ T6763] hub 6-0:1.0: 1 port detected [ 179.468942][ T6754] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 292 with error 28 [ 179.488678][ T6754] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.488678][ T6754] [ 179.498862][ T6754] EXT4-fs (loop3): Total free blocks count 0 [ 179.524782][ T6754] EXT4-fs (loop3): Free/Dirty block details [ 179.550825][ T6754] EXT4-fs (loop3): free_blocks=2415919104 [ 179.569776][ T6754] EXT4-fs (loop3): dirty_blocks=304 [ 179.590172][ T6754] EXT4-fs (loop3): Block reservation details [ 179.612753][ T6754] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 179.756269][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.844954][ T2910] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 183.594928][ T6802] loop1: detected capacity change from 0 to 128 [ 184.670246][ T6800] loop2: detected capacity change from 0 to 40427 [ 184.691088][ T6800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.699674][ T6800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.757085][ T6800] F2FS-fs (loop2): invalid crc value [ 184.841977][ T6800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.258152][ T6833] loop1: detected capacity change from 0 to 512 [ 187.317570][ T6833] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.347968][ T6833] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.366846][ T6833] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 187.640352][ T6833] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 187.886541][ T6833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 188.031397][ T6833] System zones: 0-2, 18-18, 34-34 [ 188.043672][ T6833] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.234: iget: bad i_size value: 360287970189639680 [ 188.059046][ T6833] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.234: couldn't read orphan inode 15 (err -117) [ 188.081155][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.443090][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.975298][ T5797] Bluetooth: hci0: command tx timeout [ 192.980768][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 192.983687][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 192.987497][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 194.268932][ T6884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.477999][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.484531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.619344][ T6892] loop2: detected capacity change from 0 to 1024 [ 194.626953][ T6892] EXT4-fs: Ignoring removed bh option [ 194.648844][ T6892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.848080][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.679726][ T6901] loop0: detected capacity change from 0 to 8192 [ 196.696945][ T6882] loop1: detected capacity change from 0 to 40427 [ 196.824658][ T6901] loop0: p1 < > p3 < p5 > p4 [ 196.829479][ T6901] loop0: partition table partially beyond EOD, truncated [ 196.850393][ T6882] F2FS-fs (loop1): invalid crc value [ 196.857959][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.887096][ T6901] loop0: p1 start 4294967040 is beyond EOD, truncated [ 196.939314][ T6882] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.218666][ T6882] F2FS-fs (loop1): Start checkpoint disabled! [ 197.478651][ T6770] udevd[6770]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 197.490645][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 197.516905][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 198.981705][ T6926] loop2: detected capacity change from 0 to 128 [ 199.013690][ T6926] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 201.824738][ T6940] loop0: detected capacity change from 0 to 1024 [ 201.833309][ T6940] EXT4-fs: Ignoring removed bh option [ 202.026813][ T6940] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.091796][ T6940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.069926][ T6955] loop2: detected capacity change from 0 to 256 [ 204.078562][ T6955] exfat: Deprecated parameter 'utf8' [ 204.084817][ T6955] exfat: Deprecated parameter 'utf8' [ 204.127949][ T6955] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 204.251042][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.851811][ T6961] bridge0: entered allmulticast mode [ 204.866949][ T6961] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 204.888583][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.271'. [ 206.104872][ T6979] loop2: detected capacity change from 0 to 128 [ 206.163731][ T6979] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 206.880831][ T6991] serio: Serial port ptm0 [ 208.570747][ T7005] loop2: detected capacity change from 0 to 256 [ 208.615077][ T7005] exfat: Deprecated parameter 'utf8' [ 208.713681][ T7005] exfat: Deprecated parameter 'utf8' [ 208.805674][ T7005] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 210.971118][ T7028] loop2: detected capacity change from 0 to 128 [ 211.039389][ T7028] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 212.458205][ T7036] loop1: detected capacity change from 0 to 1024 [ 212.466232][ T7036] EXT4-fs: Ignoring removed bh option [ 214.927033][ T7036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.015981][ T7036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.431193][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.199073][ T7055] loop0: detected capacity change from 0 to 256 [ 216.233979][ T7058] bridge0: entered allmulticast mode [ 216.239768][ T7058] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 216.271669][ T7055] exfat: Deprecated parameter 'utf8' [ 216.306657][ T7058] netlink: 'syz.2.298': attribute type 16 has an invalid length. [ 216.320908][ T7055] exfat: Deprecated parameter 'utf8' [ 216.350472][ T7058] netlink: 'syz.2.298': attribute type 17 has an invalid length. [ 216.387246][ T7058] bridge0: left allmulticast mode [ 216.387865][ T7055] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 216.551159][ T7063] serio: Serial port ptm0 [ 218.447768][ T7073] loop1: detected capacity change from 0 to 1024 [ 218.456199][ T7073] EXT4-fs: Ignoring removed bh option [ 218.754074][ T7073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.857556][ T7073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.517273][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.577189][ T7095] loop2: detected capacity change from 0 to 128 [ 222.728480][ T7110] loop0: detected capacity change from 0 to 8192 [ 222.786741][ T7110] loop0: p1 < > p3 < p5 > p4 [ 222.794718][ T7110] loop0: partition table partially beyond EOD, truncated [ 222.814734][ T7110] loop0: p1 start 4294967040 is beyond EOD, truncated [ 222.929876][ T7114] loop1: detected capacity change from 0 to 256 [ 222.960629][ T7114] exfat: Deprecated parameter 'utf8' [ 223.013730][ T7114] exfat: Deprecated parameter 'utf8' [ 223.046110][ T7114] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 223.994580][ T6770] udevd[6770]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 223.996034][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 224.029480][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 226.252904][ T7138] serio: Serial port ptm0 [ 226.919063][ T7154] netlink: 176 bytes leftover after parsing attributes in process `syz.3.325'. [ 228.026375][ T7167] loop0: detected capacity change from 0 to 512 [ 228.054803][ T7167] EXT4-fs: Ignoring removed bh option [ 228.116555][ T7167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.135011][ T7167] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.174822][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.334'. [ 230.708811][ T7191] serio: Serial port ptm0 [ 231.741947][ T7206] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 232.023321][ T7206] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 232.606753][ T7206] syz.1.338 (7206) used greatest stack depth: 18992 bytes left [ 236.145895][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.003237][ T7298] overlay: Unknown parameter '/' [ 243.108254][ T7299] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 249.462316][ T7341] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 249.698275][ T7352] loop0: detected capacity change from 0 to 1024 [ 249.705982][ T7352] EXT4-fs: Ignoring removed bh option [ 249.712372][ T7352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.744411][ T7352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.388183][ T7363] serio: Serial port ptm0 [ 250.973231][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.816390][ T7391] loop2: detected capacity change from 0 to 512 [ 254.839565][ T7391] EXT4-fs: Ignoring removed bh option [ 254.914756][ T7391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.943169][ T7391] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.249899][ T7400] serio: Serial port ptm0 [ 256.354084][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.360423][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.685067][ T7407] loop0: detected capacity change from 0 to 8192 [ 256.718859][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.746232][ T7407] loop0: p1 < > p3 < p5 > p4 [ 256.750989][ T7407] loop0: partition table partially beyond EOD, truncated [ 256.786195][ T7407] loop0: p1 start 4294967040 is beyond EOD, truncated [ 257.627065][ T7417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.922504][ T7425] loop2: detected capacity change from 0 to 1024 [ 257.934601][ T7425] EXT4-fs: Ignoring removed bh option [ 257.947499][ T7425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.139727][ T7425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.720341][ T7329] udevd[7329]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 258.747488][ T7340] udevd[7340]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 258.777725][ T7436] udevd[7436]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 259.503896][ T7438] overlay: Unknown parameter '/' [ 259.812413][ T7439] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 260.259617][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.608510][ T7449] serio: Serial port ptm0 [ 263.277623][ T7478] loop1: detected capacity change from 0 to 1024 [ 263.286007][ T7478] EXT4-fs: Ignoring removed bh option [ 263.429058][ T7480] overlayfs: failed to clone upperpath [ 264.637729][ T7478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.831368][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.621476][ T7498] serio: Serial port ptm0 [ 267.445767][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.271569][ T7528] overlay: Unknown parameter '/' [ 270.371959][ T7529] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 274.979673][ T7561] loop1: detected capacity change from 0 to 8192 [ 275.041629][ T7561] loop1: p1 < > p3 < p5 > p4 [ 275.060029][ T7561] loop1: partition table partially beyond EOD, truncated [ 275.067947][ T7561] loop1: p1 start 4294967040 is beyond EOD, truncated [ 275.210955][ T7563] overlayfs: failed to clone upperpath [ 276.262591][ T7340] udevd[7340]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 276.309073][ T7329] udevd[7329]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 276.329187][ T7436] udevd[7436]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 277.394840][ T7589] Driver unsupported XDP return value 0 on prog (id 244) dev N/A, expect packet loss! [ 279.894906][ T7625] loop2: detected capacity change from 0 to 128 [ 279.919617][ T7625] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 284.085384][ T7646] pim6reg1: entered promiscuous mode [ 284.090738][ T7646] pim6reg1: entered allmulticast mode [ 289.510200][ T7689] overlayfs: failed to clone upperpath [ 302.512874][ T7793] loop1: detected capacity change from 0 to 128 [ 302.674371][ T7799] overlayfs: failed to clone upperpath [ 303.253495][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.282125][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.374290][ T7800] bridge0: entered allmulticast mode [ 303.399144][ T7800] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 304.551690][ T7819] syz.0.503[7819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.551822][ T7819] syz.0.503[7819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.901258][ T7836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.162766][ T7855] wg2: entered promiscuous mode [ 308.178208][ T7855] wg2: entered allmulticast mode [ 309.182685][ T7867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.869642][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.880246][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.993611][ T7888] bridge0: entered allmulticast mode [ 311.012953][ T7888] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 315.986066][ T7941] hub 6-0:1.0: USB hub found [ 315.991954][ T7941] hub 6-0:1.0: 1 port detected [ 317.432172][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.441792][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.448566][ T7953] loop2: detected capacity change from 0 to 2048 [ 317.587765][ T7953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.343990][ T7953] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 318.437335][ T7953] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 586 with error 28 [ 318.449960][ T7953] EXT4-fs (loop2): This should not happen!! Data will be lost [ 318.449960][ T7953] [ 318.459967][ T7953] EXT4-fs (loop2): Total free blocks count 0 [ 318.469273][ T7953] EXT4-fs (loop2): Free/Dirty block details [ 318.485903][ T7953] EXT4-fs (loop2): free_blocks=2415919104 [ 318.497422][ T7953] EXT4-fs (loop2): dirty_blocks=592 [ 318.502778][ T7953] EXT4-fs (loop2): Block reservation details [ 318.530362][ T7953] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 318.738184][ T2910] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 320.582483][ T7987] hub 6-0:1.0: USB hub found [ 320.588296][ T7987] hub 6-0:1.0: 1 port detected [ 324.498951][ T8014] loop1: detected capacity change from 0 to 2048 [ 324.829017][ T8018] loop0: detected capacity change from 0 to 128 [ 324.837368][ T8018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.844198][ T8018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.854709][ T8018] EXT4-fs (loop0): Test dummy encryption mode enabled [ 324.931263][ T8018] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.945454][ T8018] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.963208][ T8014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.131928][ T8014] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 325.195631][ T8014] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 148 with error 28 [ 325.239035][ T8014] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.239035][ T8014] [ 325.262822][ T8014] EXT4-fs (loop1): Total free blocks count 0 [ 325.281534][ T8014] EXT4-fs (loop1): Free/Dirty block details [ 325.291606][ T8014] EXT4-fs (loop1): free_blocks=2415919104 [ 325.297823][ T8014] EXT4-fs (loop1): dirty_blocks=160 [ 325.303259][ T8014] EXT4-fs (loop1): Block reservation details [ 325.309879][ T8014] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 325.380001][ T2910] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 325.491533][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.391971][ T8039] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 326.976980][ T8051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.439066][ T8063] loop2: detected capacity change from 0 to 2048 [ 328.666161][ T8063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.789816][ T8073] loop1: detected capacity change from 0 to 128 [ 328.797317][ T8073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.805055][ T8073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.813563][ T8073] EXT4-fs (loop1): Test dummy encryption mode enabled [ 328.895859][ T8073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.918157][ T8073] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.928262][ T8077] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 329.555213][ T8063] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 329.609829][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.650394][ T8063] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 34 with error 28 [ 329.668531][ T8063] EXT4-fs (loop2): This should not happen!! Data will be lost [ 329.668531][ T8063] [ 329.683768][ T8063] EXT4-fs (loop2): Total free blocks count 0 [ 329.756898][ T8063] EXT4-fs (loop2): Free/Dirty block details [ 329.762866][ T8063] EXT4-fs (loop2): free_blocks=2415919104 [ 329.797826][ T8063] EXT4-fs (loop2): dirty_blocks=48 [ 329.814802][ T8063] EXT4-fs (loop2): Block reservation details [ 329.824290][ T8063] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 330.037840][ T2910] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 331.145936][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.343641][ T8139] overlayfs: failed to clone upperpath [ 338.057456][ T8163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.405869][ T8175] overlayfs: failed to clone upperpath [ 339.345553][ T8187] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 339.562070][ T8191] overlayfs: failed to clone upperpath [ 342.608718][ T8221] bridge0: entered allmulticast mode [ 342.619149][ T8221] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 344.233834][ T8243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.388637][ T8251] loop0: detected capacity change from 0 to 128 [ 345.404878][ T8251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.411552][ T8251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.442104][ T8251] EXT4-fs (loop0): Test dummy encryption mode enabled [ 345.544919][ T8251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.596583][ T8251] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.067275][ T8261] overlayfs: missing 'lowerdir' [ 346.743247][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.359763][ T8279] bridge0: left allmulticast mode [ 347.560032][ T8279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.944660][ T8295] loop1: detected capacity change from 0 to 128 [ 348.951964][ T8295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.959560][ T8295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.967609][ T8295] EXT4-fs (loop1): Test dummy encryption mode enabled [ 348.981251][ T8285] bridge0: entered allmulticast mode [ 348.984408][ T8295] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.011568][ T8285] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 349.092142][ T8295] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 349.332194][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.119203][ T8340] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 352.326265][ T8347] loop2: detected capacity change from 0 to 128 [ 352.475900][ T8349] loop1: detected capacity change from 0 to 2048 [ 352.529663][ T8349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.692982][ T8349] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 352.711385][ T8349] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 368 with error 28 [ 352.725878][ T8349] EXT4-fs (loop1): This should not happen!! Data will be lost [ 352.725878][ T8349] [ 352.735674][ T8349] EXT4-fs (loop1): Total free blocks count 0 [ 352.746764][ T8349] EXT4-fs (loop1): Free/Dirty block details [ 352.752897][ T8349] EXT4-fs (loop1): free_blocks=2415919104 [ 352.758817][ T8349] EXT4-fs (loop1): dirty_blocks=384 [ 352.781334][ T8349] EXT4-fs (loop1): Block reservation details [ 352.812043][ T8349] EXT4-fs (loop1): i_reserved_data_blocks=24 [ 354.193965][ T1035] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 357.784884][ T8412] bridge0: left allmulticast mode [ 357.803157][ T8412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.828143][ T8413] loop1: detected capacity change from 0 to 128 [ 358.093974][ T8416] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 358.138297][ T8418] vlan1: entered promiscuous mode [ 358.149742][ T8418] vlan1: entered allmulticast mode [ 358.162119][ T8418] veth0_vlan: entered allmulticast mode [ 359.127639][ T8431] wg2: entered promiscuous mode [ 359.241085][ T8431] wg2: entered allmulticast mode [ 362.572929][ T8483] overlayfs: missing 'lowerdir' [ 364.299680][ T8491] loop2: detected capacity change from 0 to 128 [ 364.307504][ T8491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.314772][ T8491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.327370][ T8491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 364.351564][ T8491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.373644][ T8491] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.697043][ T8501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.063901][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.941711][ T8534] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 367.402887][ T8540] [ 367.405272][ T8540] ====================================================== [ 367.412297][ T8540] WARNING: possible circular locking dependency detected [ 367.419336][ T8540] 6.6.96-syzkaller #0 Not tainted [ 367.424361][ T8540] ------------------------------------------------------ [ 367.431379][ T8540] syz.1.719/8540 is trying to acquire lock: [ 367.437274][ T8540] ffff8880b8e295a8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 367.445914][ T8540] [ 367.445914][ T8540] but task is already holding lock: [ 367.453275][ T8540] ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 367.462183][ T8540] [ 367.462183][ T8540] which lock already depends on the new lock. [ 367.462183][ T8540] [ 367.472591][ T8540] [ 367.472591][ T8540] the existing dependency chain (in reverse order) is: [ 367.481607][ T8540] [ 367.481607][ T8540] -> #1 (&base->lock){-.-.}-{2:2}: [ 367.488920][ T8540] _raw_spin_lock_irqsave+0xa8/0xf0 [ 367.494652][ T8540] lock_timer_base+0x123/0x270 [ 367.499950][ T8540] __mod_timer+0xf9/0xdb0 [ 367.504810][ T8540] queue_delayed_work_on+0x12a/0x1e0 [ 367.510596][ T8540] kvfree_call_rcu+0x541/0x780 [ 367.515861][ T8540] rtnl_register_internal+0x486/0x590 [ 367.521734][ T8540] rtnl_register+0x32/0x70 [ 367.526648][ T8540] ip_rt_init+0x2ec/0x390 [ 367.531475][ T8540] ip_init+0xe/0x20 [ 367.535781][ T8540] inet_init+0x2c1/0x3e0 [ 367.540526][ T8540] do_one_initcall+0x1fd/0x750 [ 367.545790][ T8540] do_initcall_level+0x137/0x1f0 [ 367.551223][ T8540] do_initcalls+0x69/0xd0 [ 367.556047][ T8540] kernel_init_freeable+0x3d2/0x570 [ 367.561737][ T8540] kernel_init+0x1d/0x1c0 [ 367.566563][ T8540] ret_from_fork+0x48/0x80 [ 367.571477][ T8540] ret_from_fork_asm+0x11/0x20 [ 367.576739][ T8540] [ 367.576739][ T8540] -> #0 (krc.lock){..-.}-{2:2}: [ 367.583748][ T8540] __lock_acquire+0x2ddb/0x7c80 [ 367.589095][ T8540] lock_acquire+0x197/0x410 [ 367.594094][ T8540] _raw_spin_lock+0x2e/0x40 [ 367.599094][ T8540] kvfree_call_rcu+0x15a/0x780 [ 367.604357][ T8540] trie_delete_elem+0x535/0x6a0 [ 367.609707][ T8540] bpf_prog_2fe495d516d5c300+0x45/0x49 [ 367.615673][ T8540] bpf_trace_run3+0x1e7/0x400 [ 367.620845][ T8540] __bpf_trace_timer_start+0x14a/0x1b0 [ 367.626803][ T8540] __traceiter_timer_start+0x77/0xc0 [ 367.632584][ T8540] enqueue_timer+0x398/0x530 [ 367.637669][ T8540] __mod_timer+0x977/0xdb0 [ 367.642582][ T8540] sk_reset_timer+0x23/0xc0 [ 367.647605][ T8540] tipc_sk_finish_conn+0x154/0x7e0 [ 367.653230][ T8540] tipc_socketpair+0x254/0x470 [ 367.658500][ T8540] __sys_socketpair+0x2b0/0x550 [ 367.663858][ T8540] __x64_sys_socketpair+0x9b/0xb0 [ 367.669382][ T8540] do_syscall_64+0x55/0xb0 [ 367.674299][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.680691][ T8540] [ 367.680691][ T8540] other info that might help us debug this: [ 367.680691][ T8540] [ 367.690895][ T8540] Possible unsafe locking scenario: [ 367.690895][ T8540] [ 367.698322][ T8540] CPU0 CPU1 [ 367.703662][ T8540] ---- ---- [ 367.709003][ T8540] lock(&base->lock); [ 367.713051][ T8540] lock(krc.lock); [ 367.719351][ T8540] lock(&base->lock); [ 367.725913][ T8540] lock(krc.lock); [ 367.729696][ T8540] [ 367.729696][ T8540] *** DEADLOCK *** [ 367.729696][ T8540] [ 367.737814][ T8540] 2 locks held by syz.1.719/8540: [ 367.742809][ T8540] #0: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 367.752092][ T8540] #1: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 367.761392][ T8540] [ 367.761392][ T8540] stack backtrace: [ 367.767274][ T8540] CPU: 0 PID: 8540 Comm: syz.1.719 Not tainted 6.6.96-syzkaller #0 [ 367.775156][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.785212][ T8540] Call Trace: [ 367.788476][ T8540] [ 367.791434][ T8540] dump_stack_lvl+0x16c/0x230 [ 367.796096][ T8540] ? load_image+0x3b0/0x3b0 [ 367.800577][ T8540] ? show_regs_print_info+0x20/0x20 [ 367.805753][ T8540] ? print_circular_bug+0x12b/0x1a0 [ 367.810929][ T8540] check_noncircular+0x2bd/0x3c0 [ 367.815845][ T8540] ? print_deadlock_bug+0x5d0/0x5d0 [ 367.821019][ T8540] ? lockdep_lock+0xe0/0x220 [ 367.825584][ T8540] ? _find_first_zero_bit+0xd3/0x100 [ 367.830846][ T8540] __lock_acquire+0x2ddb/0x7c80 [ 367.835710][ T8540] ? stack_trace_snprint+0xf0/0xf0 [ 367.840797][ T8540] ? __stack_depot_save+0x560/0x630 [ 367.845971][ T8540] ? verify_lock_unused+0x140/0x140 [ 367.851159][ T8540] ? kasan_save_stack+0x4d/0x60 [ 367.855990][ T8540] ? kasan_save_stack+0x3e/0x60 [ 367.860816][ T8540] ? __kasan_record_aux_stack+0xaf/0xc0 [ 367.866337][ T8540] ? kvfree_call_rcu+0xee/0x780 [ 367.871166][ T8540] ? trie_delete_elem+0x535/0x6a0 [ 367.876168][ T8540] ? bpf_prog_2fe495d516d5c300+0x45/0x49 [ 367.881774][ T8540] ? bpf_trace_run3+0x1e7/0x400 [ 367.886600][ T8540] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 367.892210][ T8540] ? __traceiter_timer_start+0x77/0xc0 [ 367.897645][ T8540] ? enqueue_timer+0x398/0x530 [ 367.902405][ T8540] ? __mod_timer+0x977/0xdb0 [ 367.906985][ T8540] ? sk_reset_timer+0x23/0xc0 [ 367.911646][ T8540] ? tipc_sk_finish_conn+0x154/0x7e0 [ 367.916934][ T8540] ? tipc_socketpair+0x254/0x470 [ 367.921846][ T8540] ? __sys_socketpair+0x2b0/0x550 [ 367.926847][ T8540] ? __x64_sys_socketpair+0x9b/0xb0 [ 367.932023][ T8540] ? do_syscall_64+0x55/0xb0 [ 367.936588][ T8540] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.942635][ T8540] lock_acquire+0x197/0x410 [ 367.947121][ T8540] ? kvfree_call_rcu+0x15a/0x780 [ 367.952039][ T8540] ? read_lock_is_recursive+0x20/0x20 [ 367.957388][ T8540] ? __phys_addr+0xba/0x170 [ 367.961867][ T8540] _raw_spin_lock+0x2e/0x40 [ 367.966362][ T8540] ? kvfree_call_rcu+0x15a/0x780 [ 367.971293][ T8540] kvfree_call_rcu+0x15a/0x780 [ 367.976049][ T8540] ? call_rcu+0x920/0x920 [ 367.980371][ T8540] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 367.986270][ T8540] ? _raw_spin_unlock+0x40/0x40 [ 367.991111][ T8540] trie_delete_elem+0x535/0x6a0 [ 367.995949][ T8540] bpf_prog_2fe495d516d5c300+0x45/0x49 [ 368.001390][ T8540] bpf_trace_run3+0x1e7/0x400 [ 368.006066][ T8540] ? bpf_trace_run3+0xf4/0x400 [ 368.010810][ T8540] ? bpf_trace_run2+0x3c0/0x3c0 [ 368.015641][ T8540] ? __bpf_trace_timer_start+0x133/0x1b0 [ 368.021280][ T8540] __bpf_trace_timer_start+0x14a/0x1b0 [ 368.026719][ T8540] ? debug_object_activate+0x2f7/0x4b0 [ 368.032160][ T8540] ? __bpf_trace_timer_class+0x100/0x100 [ 368.037775][ T8540] ? __rwlock_init+0x150/0x150 [ 368.042518][ T8540] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 368.048386][ T8540] ? _raw_spin_unlock+0x40/0x40 [ 368.053209][ T8540] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 368.058554][ T8540] ? _raw_spin_lock+0x40/0x40 [ 368.063205][ T8540] ? __bpf_trace_timer_class+0x100/0x100 [ 368.068821][ T8540] __traceiter_timer_start+0x77/0xc0 [ 368.074089][ T8540] enqueue_timer+0x398/0x530 [ 368.078657][ T8540] __mod_timer+0x977/0xdb0 [ 368.083061][ T8540] sk_reset_timer+0x23/0xc0 [ 368.087547][ T8540] tipc_sk_finish_conn+0x154/0x7e0 [ 368.092637][ T8540] tipc_socketpair+0x254/0x470 [ 368.097377][ T8540] __sys_socketpair+0x2b0/0x550 [ 368.102215][ T8540] __x64_sys_socketpair+0x9b/0xb0 [ 368.107220][ T8540] do_syscall_64+0x55/0xb0 [ 368.111616][ T8540] ? clear_bhb_loop+0x40/0x90 [ 368.116269][ T8540] ? clear_bhb_loop+0x40/0x90 [ 368.120920][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.126819][ T8540] RIP: 0033:0x7f352878e929 [ 368.131210][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.150815][ T8540] RSP: 002b:00007f3529586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 368.159220][ T8540] RAX: ffffffffffffffda RBX: 00007f35289b5fa0 RCX: 00007f352878e929 [ 368.167175][ T8540] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 368.175124][ T8540] RBP: 00007f3528810b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.183074][ T8540] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 368.191024][ T8540] R13: 0000000000000000 R14: 00007f35289b5fa0 R15: 00007fff0175c0b8 [ 368.198979][ T8540]