last executing test programs: 3m3.343894549s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) 3m0.245922862s ago: executing program 0 (id=142): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x7, 0x0) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 2m57.28541633s ago: executing program 0 (id=151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 2m57.151745376s ago: executing program 0 (id=152): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003740)={{{@in=@broadcast, @in6=@private2, 0x4e23, 0x3, 0x4e21, 0x0, 0x2, 0x80, 0x100, 0x16}, {0x83, 0x8000000000000001, 0x4, 0x0, 0x2, 0x8001, 0x9, 0x469d}, {0x5, 0xb6, 0x101, 0x8000}, 0x1ff, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d3, 0x6c}, 0x2, @in6=@private2, 0x3500, 0x2, 0x1, 0x8, 0x522, 0x4, 0xffffffff}}, 0xe8) unshare(0x64000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb4e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x7d, &(0x7f0000000240)=""/125, 0x41000, 0x4d, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x1, 0x6}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x7, 0x4c5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x1, 0x4, 0x3}, {0x4, 0x4, 0x9, 0xa}, {0x2, 0x3, 0xd, 0x8}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 2m50.569817279s ago: executing program 0 (id=159): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x100000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) personality(0x4100001) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 2m50.30301952s ago: executing program 0 (id=163): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002", @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x1f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0), 0x10, 0x4}, 0x94) 2m39.355696002s ago: executing program 3 (id=175): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x73f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in6=@empty, 0x4e21, 0x7, 0x4e21, 0x3c7, 0xa, 0x20, 0x80, 0x16, r8, r9}, {0xfffffffffffffbc3, 0x7, 0x1, 0x80000001, 0x200, 0x0, 0x12a, 0x2}, {0x9, 0x39, 0x7, 0xfffffffffffff67a}, 0x5cca, 0x6e6bb6, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d2, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3505, 0x4, 0x1, 0x6, 0x2, 0x4d, 0xf}}, 0xe8) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000180)={0x4, 0xc, 0x43, 0x3ecb5dc7, 0x8, "605477c39fc0b013ab2184911da981a0becd4d", 0x9b, 0x72}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000c6fdffff010000000100ffffffffffffffff00"], 0x0, 0x26}, 0x28) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) 2m36.109280881s ago: executing program 3 (id=178): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 2m35.503776547s ago: executing program 3 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3961, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') read$ptp(r3, &(0x7f00000000c0)=""/65, 0x41) read$FUSE(r3, &(0x7f0000002740)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x231a, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m35.092020065s ago: executing program 32 (id=163): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002", @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x1f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0), 0x10, 0x4}, 0x94) 2m34.127910077s ago: executing program 3 (id=183): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m32.063901465s ago: executing program 3 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4bfb, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 2m29.911858168s ago: executing program 3 (id=189): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 2m27.085175769s ago: executing program 33 (id=189): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 17.827983683s ago: executing program 2 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@orlov}, {@minixdf}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 15.10252821s ago: executing program 2 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0), 0x0) 14.307882195s ago: executing program 2 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) 10.622177663s ago: executing program 2 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10.514779878s ago: executing program 5 (id=444): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 10.116813525s ago: executing program 5 (id=445): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0xfffffffffffffffa, {0x1, 0xfffffffffffffffd, 0x2202, 0x1ffff, 0x7, 0x8, {0x1, 0x100000000, 0x6, 0x280000000, 0x4, 0x10002, 0x7d79, 0x1, 0xa, 0xc000, 0x7b, r1, r2, 0xcf, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.115967035s ago: executing program 4 (id=446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0), 0x0) 8.889435488s ago: executing program 4 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) 7.989283097s ago: executing program 5 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) readahead(r3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000cee7654b4eedeaa0ae00a52fa20382aa0d0205680adb238e11000000000000"], 0x50) 7.732515998s ago: executing program 2 (id=450): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="90010000100013070000000000000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="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"], 0x190}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 5.943592715s ago: executing program 4 (id=451): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0x100}, 0x1c) 4.011944668s ago: executing program 5 (id=453): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 3.859670484s ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 3.393379744s ago: executing program 2 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x1) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 3.295989009s ago: executing program 1 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0), 0x0) 3.222845682s ago: executing program 4 (id=457): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0xfffffffffffffffa, {0x1, 0xfffffffffffffffd, 0x2202, 0x1ffff, 0x7, 0x8, {0x1, 0x100000000, 0x6, 0x280000000, 0x4, 0x10002, 0x7d79, 0x1, 0xa, 0xc000, 0x7b, r2, r3, 0xcf, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.091970187s ago: executing program 1 (id=458): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x1, 0x7f, 0x4041, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x7}, 0x50) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e23, 0xf0, @remote, 0x2}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}, 0x1, {[0x6, 0x7, 0x3, 0x4, 0x5, 0x3f6e, 0x4, 0x3]}}, 0x5c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0xe43c) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000240)=0x4) listen(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502406005eb1d6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) 2.875680597s ago: executing program 1 (id=459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="ed"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.691938345s ago: executing program 5 (id=460): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x101800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000280)={0x2, 0x1, 0x8, 0x2, 0xc33}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000001c0), 0x5005) socket$unix(0x1, 0x3ca16085c549546c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="000001000000000000"], 0x1c}}, 0x4000054) 2.507884102s ago: executing program 1 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f0000000040)={0x0, "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"}) mmap(&(0x7f0000961000/0x4000)=nil, 0x4000, 0x100000f, 0x2172, 0xffffffffffffffff, 0x0) 2.153289878s ago: executing program 4 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000020000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1, 0x2}, 0x20) 1.957145366s ago: executing program 5 (id=463): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) 284.789548ms ago: executing program 1 (id=464): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003740)={{{@in=@broadcast, @in6=@private2, 0x4e23, 0x3, 0x4e21, 0x0, 0x2, 0x80, 0x100, 0x16}, {0x83, 0x8000000000000001, 0x4, 0x0, 0x2, 0x8001, 0x9, 0x469d}, {0x5, 0xb6, 0x101, 0x8000}, 0x1ff, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d3, 0x6c}, 0x2, @in6=@private2, 0x3500, 0x2, 0x1, 0x8, 0x522, 0x4, 0xffffffff}}, 0xe8) unshare(0x64000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb4e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x7d, &(0x7f0000000240)=""/125, 0x41000, 0x4d, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x1, 0x6}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x7, 0x4c5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x1, 0x4, 0x3}, {0x4, 0x4, 0x9, 0xa}, {0x2, 0x3, 0xd, 0x8}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 0s ago: executing program 4 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2030000aaaaaaaa2aaa86dd60010100fe08"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 66.932622][ T5774] cgroup: Unknown subsys name 'net' [ 67.065772][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.803098][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.047076][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.058765][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.059254][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.066740][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.075151][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.081967][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.095604][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.102975][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.103782][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.110848][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.117715][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.124943][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.133349][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.139641][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.146226][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.153157][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.160638][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.167617][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.180467][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.181908][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.196505][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.206450][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.231736][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.245382][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.639063][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.645652][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.742506][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 71.768154][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 71.796552][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 71.895450][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 72.020689][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.027928][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.035448][ T5789] bridge_slave_0: entered allmulticast mode [ 72.043425][ T5789] bridge_slave_0: entered promiscuous mode [ 72.064163][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.071448][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.078882][ T5787] bridge_slave_0: entered allmulticast mode [ 72.085722][ T5787] bridge_slave_0: entered promiscuous mode [ 72.104236][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.111526][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.118950][ T5789] bridge_slave_1: entered allmulticast mode [ 72.125754][ T5789] bridge_slave_1: entered promiscuous mode [ 72.132915][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.140212][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.147358][ T5786] bridge_slave_0: entered allmulticast mode [ 72.154433][ T5786] bridge_slave_0: entered promiscuous mode [ 72.162327][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.169841][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.177227][ T5787] bridge_slave_1: entered allmulticast mode [ 72.184967][ T5787] bridge_slave_1: entered promiscuous mode [ 72.230811][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.238404][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.245602][ T5786] bridge_slave_1: entered allmulticast mode [ 72.253370][ T5786] bridge_slave_1: entered promiscuous mode [ 72.294743][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.307588][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.334122][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.370927][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.382952][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.405420][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.412884][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.420381][ T5788] bridge_slave_0: entered allmulticast mode [ 72.427315][ T5788] bridge_slave_0: entered promiscuous mode [ 72.449817][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.484822][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.492101][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.499677][ T5788] bridge_slave_1: entered allmulticast mode [ 72.506556][ T5788] bridge_slave_1: entered promiscuous mode [ 72.528418][ T5789] team0: Port device team_slave_0 added [ 72.550255][ T5787] team0: Port device team_slave_0 added [ 72.570810][ T5789] team0: Port device team_slave_1 added [ 72.580006][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.593046][ T5786] team0: Port device team_slave_0 added [ 72.601461][ T5787] team0: Port device team_slave_1 added [ 72.622938][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.640167][ T5786] team0: Port device team_slave_1 added [ 72.709798][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.716783][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.743395][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.755710][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.763051][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.790014][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.825530][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.833320][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.859548][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.877854][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.885173][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.911512][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.932914][ T5788] team0: Port device team_slave_0 added [ 72.944177][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.951239][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.977711][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.990804][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.997781][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.024395][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.045686][ T5788] team0: Port device team_slave_1 added [ 73.112903][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.119981][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.147217][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.186121][ T5787] hsr_slave_0: entered promiscuous mode [ 73.193134][ T5787] hsr_slave_1: entered promiscuous mode [ 73.205730][ T5789] hsr_slave_0: entered promiscuous mode [ 73.212116][ T5789] hsr_slave_1: entered promiscuous mode [ 73.220705][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.228957][ T5789] Cannot create hsr debugfs directory [ 73.228974][ T51] Bluetooth: hci0: command tx timeout [ 73.240817][ T5792] Bluetooth: hci1: command tx timeout [ 73.250199][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.257285][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.283523][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.309586][ T5792] Bluetooth: hci3: command tx timeout [ 73.314266][ T51] Bluetooth: hci2: command tx timeout [ 73.327083][ T5786] hsr_slave_0: entered promiscuous mode [ 73.334101][ T5786] hsr_slave_1: entered promiscuous mode [ 73.340306][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.347862][ T5786] Cannot create hsr debugfs directory [ 73.455473][ T5788] hsr_slave_0: entered promiscuous mode [ 73.461930][ T5788] hsr_slave_1: entered promiscuous mode [ 73.469069][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.476668][ T5788] Cannot create hsr debugfs directory [ 73.833387][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.844905][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.857018][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.867117][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.946083][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.957921][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.976419][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.990176][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.074606][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.093292][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.105178][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.116119][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.244777][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.255402][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.280680][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.304183][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.312751][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.356916][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.382342][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.389854][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.421856][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.429058][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.456631][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.482706][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.505331][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.546322][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.553543][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.565050][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.572202][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.587894][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.633447][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.640660][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.677654][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.684862][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.870475][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.915272][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.945152][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.952402][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.010797][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.018020][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.137263][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.261742][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.309173][ T51] Bluetooth: hci0: command tx timeout [ 75.314671][ T51] Bluetooth: hci1: command tx timeout [ 75.370913][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.388897][ T51] Bluetooth: hci2: command tx timeout [ 75.398599][ T51] Bluetooth: hci3: command tx timeout [ 75.435109][ T5789] veth0_vlan: entered promiscuous mode [ 75.466726][ T5789] veth1_vlan: entered promiscuous mode [ 75.504088][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.562757][ T5787] veth0_vlan: entered promiscuous mode [ 75.585716][ T5787] veth1_vlan: entered promiscuous mode [ 75.619923][ T5789] veth0_macvtap: entered promiscuous mode [ 75.633149][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.654742][ T5789] veth1_macvtap: entered promiscuous mode [ 75.694830][ T5787] veth0_macvtap: entered promiscuous mode [ 75.702537][ T5786] veth0_vlan: entered promiscuous mode [ 75.731454][ T5787] veth1_macvtap: entered promiscuous mode [ 75.746231][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.757227][ T5786] veth1_vlan: entered promiscuous mode [ 75.783958][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.795766][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805516][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.816406][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.825298][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880593][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.894783][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.906359][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.921989][ T5788] veth0_vlan: entered promiscuous mode [ 75.946108][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.957652][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.970915][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.983042][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992043][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001551][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.010349][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.024164][ T5786] veth0_macvtap: entered promiscuous mode [ 76.037365][ T5786] veth1_macvtap: entered promiscuous mode [ 76.047785][ T5788] veth1_vlan: entered promiscuous mode [ 76.124604][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.136329][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.146219][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.159180][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.170897][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.224909][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.235631][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.247969][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.258898][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.271007][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.298808][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.317404][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.333593][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.335186][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.351497][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.361281][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.439288][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.449662][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.455243][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.457505][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.473524][ T5788] veth0_macvtap: entered promiscuous mode [ 76.493462][ T5788] veth1_macvtap: entered promiscuous mode [ 76.515678][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.527660][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538776][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.553325][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.563239][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.574043][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.586481][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.631200][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.646683][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.657309][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.668715][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.683904][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.695054][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.706723][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.743198][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.754547][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.764507][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.774399][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.785884][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796399][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.843655][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.868531][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.908494][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.953041][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.033428][ T5878] xt_bpf: check failed: parse error [ 77.388368][ T51] Bluetooth: hci1: command tx timeout [ 77.394265][ T51] Bluetooth: hci0: command tx timeout [ 77.468136][ T51] Bluetooth: hci2: command tx timeout [ 77.474671][ T5792] Bluetooth: hci3: command tx timeout [ 77.863082][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.878075][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.967917][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.029241][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.874063][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.397621][ T5901] syz.0.8[5901]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.469556][ T5792] Bluetooth: hci0: command tx timeout [ 79.475057][ T5792] Bluetooth: hci1: command tx timeout [ 79.497923][ T5901] loop0: detected capacity change from 0 to 2048 [ 79.548283][ T51] Bluetooth: hci2: command tx timeout [ 79.553863][ T5792] Bluetooth: hci3: command tx timeout [ 79.604585][ T5901] EXT4-fs (loop0): failed to initialize system zone (-117) [ 79.604755][ T5901] EXT4-fs (loop0): mount failed [ 79.609581][ T5909] syz.1.9[5909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.610979][ T5909] syz.1.9[5909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.616909][ T27] audit: type=1326 audit(1764081667.581:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480598f749 code=0x7ffc0000 [ 79.618743][ T27] audit: type=1326 audit(1764081667.591:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f480598f749 code=0x7ffc0000 [ 79.619124][ T27] audit: type=1326 audit(1764081667.591:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480598f749 code=0x7ffc0000 [ 79.619390][ T27] audit: type=1326 audit(1764081667.591:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480598f749 code=0x7ffc0000 [ 79.936520][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.001216][ T5917] loop3: detected capacity change from 0 to 64 [ 80.025599][ T27] audit: type=1326 audit(1764081667.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.1.16" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f480598f749 code=0x0 [ 80.497731][ T5926] loop2: detected capacity change from 0 to 8192 [ 80.684126][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.024355][ T5932] fuse: Bad value for 'fd' [ 83.730748][ T5963] hub 8-0:1.0: USB hub found [ 83.736391][ T5963] hub 8-0:1.0: 1 port detected [ 83.761383][ T5963] loop1: detected capacity change from 0 to 1024 [ 83.785997][ T5963] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 83.796563][ T5963] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 83.806619][ T5963] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.811906][ T5967] loop2: detected capacity change from 0 to 64 [ 83.825678][ T5963] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #5: comm syz.1.25: unexpected bad inode w/o EXT4_IGET_BAD [ 83.840889][ T5963] EXT4-fs (loop1): no journal found [ 83.846157][ T5963] EXT4-fs (loop1): can't get journal size [ 83.857369][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.914232][ T5985] loop3: detected capacity change from 0 to 512 [ 85.976307][ T5985] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.011795][ T5985] EXT4-fs: inline encryption not supported [ 86.038131][ T5985] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.112048][ T5985] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.148169][ T5985] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.210957][ T5985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.317002][ T5985] EXT4-fs (loop3): 1 truncate cleaned up [ 87.441578][ T23] cfg80211: failed to load regulatory.db [ 87.939017][ T5985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.647809][ T6006] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 90.089629][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.436991][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 90.824751][ T6025] loop0: detected capacity change from 0 to 256 [ 90.858278][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.893076][ T6025] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 90.954558][ T27] audit: type=1800 audit(1764081678.921:7): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="file1" dev="loop0" ino=1048617 res=0 errno=0 [ 91.278050][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 91.299098][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.318017][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.335680][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.358119][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.117448][ T8] usb 3-1: config 0 descriptor?? [ 92.173288][ T6029] syz.0.44 (6029) used greatest stack depth: 20424 bytes left [ 92.434002][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 93.515388][ T8] usb 3-1: USB disconnect, device number 2 [ 94.824679][ T6037] loop0: detected capacity change from 0 to 40427 [ 94.898099][ T6037] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 94.906181][ T6037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.994589][ T6037] F2FS-fs (loop0): invalid crc value [ 95.035747][ T6037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.065491][ T6046] Bluetooth: MGMT ver 1.22 [ 95.288783][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.295840][ T6037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.318551][ T6037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.107366][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.346197][ T27] audit: type=1804 audit(1764081684.311:8): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.47" name="/newroot/16/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 96.459201][ T27] audit: type=1804 audit(1764081684.311:9): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.47" name="/newroot/16/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 97.205479][ T6075] loop1: detected capacity change from 0 to 256 [ 97.271860][ T6075] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 97.391330][ T6075] syz.1.58: attempt to access beyond end of device [ 97.391330][ T6075] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 97.431884][ T6075] syz.1.58: attempt to access beyond end of device [ 97.431884][ T6075] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 97.448240][ T6075] syz.1.58: attempt to access beyond end of device [ 97.448240][ T6075] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 97.552730][ T27] audit: type=1800 audit(1764081685.431:10): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.58" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 99.027958][ C1] sched: RT throttling activated [ 99.857620][ T6093] loop0: detected capacity change from 0 to 256 [ 99.865227][ T6093] exfat: Deprecated parameter 'utf8' [ 99.874338][ T6093] exfat: Deprecated parameter 'utf8' [ 99.884474][ T6093] exfat: Deprecated parameter 'utf8' [ 99.905835][ T6093] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 99.914288][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 100.036386][ T6095] netlink: 52 bytes leftover after parsing attributes in process `syz.1.65'. [ 100.372721][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 100.917413][ T6098] loop0: detected capacity change from 0 to 40427 [ 100.988253][ T6098] F2FS-fs (loop0): invalid crc value [ 101.018177][ T6098] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.178686][ T6098] F2FS-fs (loop0): Start checkpoint disabled! [ 101.202754][ T6098] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 101.482119][ T6099] loop2: detected capacity change from 0 to 40427 [ 101.555360][ T6099] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.575720][ T6099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.634863][ T6099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.660446][ T42] kworker/u4:2: attempt to access beyond end of device [ 101.660446][ T42] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 101.716462][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.736193][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.798389][ T6113] fuse: Bad value for 'fd' [ 101.813273][ T6099] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.836524][ T6099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.888266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.896977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.905862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.914510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.923230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.003090][ T6113] Zero length message leads to an empty skb [ 102.046701][ T6104] loop1: detected capacity change from 0 to 40427 [ 102.076156][ T6104] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.085539][ T6104] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.166548][ T6104] F2FS-fs (loop1): invalid crc value [ 102.206939][ T6104] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 102.260069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.305395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.314382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.610620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.650182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.087447][ T6124] loop1: detected capacity change from 0 to 256 [ 104.099173][ T6124] exfat: Deprecated parameter 'utf8' [ 104.128475][ T6124] exfat: Deprecated parameter 'utf8' [ 104.133855][ T6124] exfat: Deprecated parameter 'utf8' [ 104.191497][ T6124] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 105.661844][ T6144] loop2: detected capacity change from 0 to 256 [ 105.757307][ T6147] overlayfs: failed to resolve './file0': -2 [ 108.221631][ T6144] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.397378][ T6144] syz.2.81: attempt to access beyond end of device [ 108.397378][ T6144] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 108.415511][ T6144] syz.2.81: attempt to access beyond end of device [ 108.415511][ T6144] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 108.429656][ T6144] syz.2.81: attempt to access beyond end of device [ 108.429656][ T6144] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 108.513371][ T27] audit: type=1800 audit(1764081696.411:11): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.81" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 112.057521][ T6161] loop2: detected capacity change from 0 to 256 [ 112.066756][ T6161] exfat: Deprecated parameter 'utf8' [ 112.072880][ T6161] exfat: Deprecated parameter 'utf8' [ 112.078593][ T6161] exfat: Deprecated parameter 'utf8' [ 112.222011][ T6161] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 112.670757][ T6175] loop3: detected capacity change from 0 to 128 [ 112.737725][ T6175] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.774924][ T6175] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.855176][ T6184] loop1: detected capacity change from 0 to 16 [ 112.882483][ T6184] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.097099][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.290852][ T6189] process 'syz.1.94' launched './file0' with NULL argv: empty string added [ 113.370791][ T6194] loop3: detected capacity change from 0 to 2048 [ 113.423870][ T6194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.442996][ T6194] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.508974][ T6194] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.96: bg 0: block 345: padding at end of block bitmap is not set [ 113.526208][ T6194] EXT4-fs (loop3): Remounting filesystem read-only [ 113.584849][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.679870][ T6202] loop3: detected capacity change from 0 to 256 [ 113.683869][ T6202] exfat: Deprecated parameter 'utf8' [ 113.693749][ T6200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.694696][ T6202] exfat: Deprecated parameter 'utf8' [ 113.718036][ T6202] exfat: Deprecated parameter 'utf8' [ 113.740413][ T6202] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 114.118386][ T6209] gtp0: entered promiscuous mode [ 114.169813][ T6212] fuse: Bad value for 'fd' [ 114.369743][ T27] audit: type=1326 audit(1764081702.341:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f58f749 code=0x7ffc0000 [ 114.403919][ T27] audit: type=1326 audit(1764081702.341:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8a9f58f749 code=0x7ffc0000 [ 114.428462][ T27] audit: type=1326 audit(1764081702.341:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f58f749 code=0x7ffc0000 [ 114.461417][ T27] audit: type=1326 audit(1764081702.341:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f58f749 code=0x7ffc0000 [ 114.516809][ T27] audit: type=1326 audit(1764081702.341:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8a9f58f749 code=0x7ffc0000 [ 114.908165][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.908365][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 115.570301][ T6228] loop2: detected capacity change from 0 to 512 [ 115.747777][ T6228] ======================================================= [ 115.747777][ T6228] WARNING: The mand mount option has been deprecated and [ 115.747777][ T6228] and is ignored by this kernel. Remove the mand [ 115.747777][ T6228] option from the mount to silence this warning. [ 115.747777][ T6228] ======================================================= [ 116.221126][ T6233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.110'. [ 116.332493][ T6228] tmpfs: Unknown parameter 'nolazytime6ÆÄ„Äš“Smº¬DÂåŸþLýAm´ý9õr´ÁQ!TÍ"‰Þa.ôe€Ûù×U' [ 116.356384][ T6236] gtp0: entered promiscuous mode [ 116.357335][ T6238] loop3: detected capacity change from 0 to 512 [ 116.675507][ T6242] loop1: detected capacity change from 0 to 256 [ 117.047187][ T6244] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 117.056676][ T6244] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 117.066361][ T6244] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.107659][ T27] audit: type=1800 audit(1764081705.011:17): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.108" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 117.303630][ T6242] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.139843][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 119.461043][ T6262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.120'. [ 119.645887][ T5829] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.690878][ T5829] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.651786][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.003447][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.045304][ T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.073496][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.109161][ T23] usb 1-1: config 0 descriptor?? [ 122.061466][ T23] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 122.101270][ T6292] loop2: detected capacity change from 0 to 512 [ 122.145098][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input7 [ 122.172165][ T6292] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.181820][ T6292] EXT4-fs: inline encryption not supported [ 122.187758][ T6292] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.196355][ T6292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 122.209946][ T6292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.302850][ T6292] EXT4-fs (loop2): 1 truncate cleaned up [ 122.326177][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.687032][ T6302] netlink: 52 bytes leftover after parsing attributes in process `syz.1.134'. [ 122.883861][ T23] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 123.538767][ T23] usb 1-1: USB disconnect, device number 2 [ 123.680031][ T6308] fido_id[6308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 126.065914][ T6305] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 126.726630][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.213618][ T6332] gtp0: entered promiscuous mode [ 128.277526][ T6341] syzkaller0: entered promiscuous mode [ 128.283549][ T6341] syzkaller0: entered allmulticast mode [ 128.622179][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.147'. [ 128.869646][ T6352] loop2: detected capacity change from 0 to 512 [ 128.877048][ T6352] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.892243][ T6352] EXT4-fs: inline encryption not supported [ 129.226640][ T6352] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.656984][ T6352] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.666228][ T6352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.690971][ T6352] EXT4-fs (loop2): 1 truncate cleaned up [ 129.757479][ T6352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.838473][ T6366] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 131.123703][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.137043][ T6374] gtp0: entered promiscuous mode [ 131.258006][ T6378] loop3: detected capacity change from 0 to 256 [ 131.421358][ T6378] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 131.488000][ T6378] syz.3.154: attempt to access beyond end of device [ 131.488000][ T6378] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 131.511330][ T6378] syz.3.154: attempt to access beyond end of device [ 131.511330][ T6378] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 131.525759][ T6378] syz.3.154: attempt to access beyond end of device [ 131.525759][ T6378] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 131.596624][ T27] audit: type=1800 audit(1764081719.511:18): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.154" name="file1" dev="loop3" ino=1048623 res=0 errno=0 [ 132.475556][ T6381] syz.1.156[6381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.475707][ T6381] syz.1.156[6381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.285543][ T6384] loop1: detected capacity change from 0 to 2048 [ 134.059559][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.066113][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.238408][ T6384] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 136.588776][ T6391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.157'. [ 136.882911][ T6399] fuse: Bad value for 'fd' [ 138.537737][ T6408] loop2: detected capacity change from 0 to 256 [ 138.545828][ T6408] exfat: Unknown parameter 'fsmagic' [ 142.458294][ T5793] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.555265][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 142.718404][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 142.807686][ T6424] netlink: 52 bytes leftover after parsing attributes in process `syz.1.169'. [ 143.041713][ T6429] fuse: Invalid rootmode [ 143.292457][ T6432] loop3: detected capacity change from 0 to 8192 [ 147.672757][ T6443] loop2: detected capacity change from 0 to 256 [ 147.836191][ T6443] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.966359][ T6443] syz.2.174: attempt to access beyond end of device [ 147.966359][ T6443] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 147.999076][ T6443] syz.2.174: attempt to access beyond end of device [ 147.999076][ T6443] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 148.013448][ T6443] syz.2.174: attempt to access beyond end of device [ 148.013448][ T6443] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 148.066299][ T27] audit: type=1800 audit(1764081735.991:19): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.174" name="file1" dev="loop2" ino=1048624 res=0 errno=0 [ 148.808462][ T6443] syz.2.174 (6443) used greatest stack depth: 20264 bytes left [ 149.043691][ T6434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.482814][ T6450] loop1: detected capacity change from 0 to 512 [ 150.499927][ T6450] EXT4-fs: inline encryption not supported [ 150.517778][ T6450] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.546028][ T6450] EXT4-fs: Ignoring removed bh option [ 150.690824][ T6450] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.703152][ T6450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.724298][ T6450] EXT4-fs (loop1): 1 truncate cleaned up [ 150.731673][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.605452][ T6462] loop2: detected capacity change from 0 to 256 [ 151.718235][ T6462] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 151.797421][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.802910][ T6461] syz.2.177: attempt to access beyond end of device [ 151.802910][ T6461] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 151.822909][ T6461] syz.2.177: attempt to access beyond end of device [ 151.822909][ T6461] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 151.844226][ T6461] syz.2.177: attempt to access beyond end of device [ 151.844226][ T6461] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 151.882979][ T27] audit: type=1800 audit(1764081739.851:20): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.177" name="file1" dev="loop2" ino=1048625 res=0 errno=0 [ 153.161940][ T6473] loop3: detected capacity change from 0 to 2048 [ 153.305621][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.465141][ T6480] loop2: detected capacity change from 0 to 256 [ 153.631392][ T6480] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 154.558562][ T6481] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 154.592761][ T6484] loop1: detected capacity change from 0 to 512 [ 154.685992][ T6484] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 154.765418][ T6484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 154.833523][ T6484] EXT4-fs (loop1): orphan cleanup on readonly fs [ 154.898230][ T6484] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.185: bad orphan inode 267 [ 154.973155][ T6484] EXT4-fs (loop1): Remounting filesystem read-only [ 155.009903][ T6484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 155.383233][ T6489] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 155.419704][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.430692][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.440030][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.450120][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.457992][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.465820][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.529859][ T6489] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 155.557380][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 155.592896][ T5787] syz-executor (5787) used greatest stack depth: 20112 bytes left [ 155.608778][ T6484] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 155.648452][ T6484] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 155.695169][ T6484] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 155.732761][ T6484] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 155.820336][ T6484] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000007. [ 155.944866][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 155.991004][ T6148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.082557][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.242851][ T6496] loop2: detected capacity change from 0 to 512 [ 156.332836][ T6496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.389815][ T6496] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.423427][ T6496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.188: bg 0: block 248: padding at end of block bitmap is not set [ 156.451915][ T6496] Quota error (device loop2): write_blk: dquota write failed [ 156.460341][ T6496] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 156.470698][ T6496] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.188: Failed to acquire dquot type 1 [ 156.499490][ T6496] EXT4-fs (loop2): 1 truncate cleaned up [ 156.528128][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.319370][ T6148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.548809][ T51] Bluetooth: hci3: command tx timeout [ 158.405467][ T6500] loop1: detected capacity change from 0 to 512 [ 158.440686][ T6148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.458392][ T6500] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.491114][ T6500] EXT4-fs: inline encryption not supported [ 158.545230][ T6500] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.586650][ T6500] EXT4-fs (loop1): Test dummy encryption mode enabled [ 158.626398][ T6500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.710465][ T6500] EXT4-fs (loop1): 1 truncate cleaned up [ 158.717731][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.739165][ T6148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.394851][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.719433][ T51] Bluetooth: hci3: command tx timeout [ 160.032352][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 160.106845][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.464349][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.192'. [ 160.719429][ T6518] loop2: detected capacity change from 0 to 2048 [ 160.877867][ T6518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.795285][ T51] Bluetooth: hci3: command tx timeout [ 162.011920][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.022378][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.031778][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.044632][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.053208][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.061349][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.270653][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.278074][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.305726][ T6487] bridge_slave_0: entered allmulticast mode [ 162.329729][ T6487] bridge_slave_0: entered promiscuous mode [ 162.405363][ T6528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.464234][ T6528] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 162.481065][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.503982][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.542032][ T6487] bridge_slave_1: entered allmulticast mode [ 162.571556][ T6487] bridge_slave_1: entered promiscuous mode [ 163.041818][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.052574][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.878248][ T51] Bluetooth: hci3: command tx timeout [ 164.036031][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.108428][ T51] Bluetooth: hci1: command tx timeout [ 165.359479][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 165.666248][ T6487] team0: Port device team_slave_0 added [ 165.806308][ T6487] team0: Port device team_slave_1 added [ 166.050860][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.066842][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.186464][ T6559] loop2: detected capacity change from 0 to 512 [ 166.198488][ T6559] EXT4-fs: Ignoring removed nobh option [ 166.206942][ T51] Bluetooth: hci1: command tx timeout [ 166.249928][ T6559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.312670][ T6559] EXT4-fs (loop2): 1 truncate cleaned up [ 166.324256][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.480440][ T27] audit: type=1800 audit(1764081754.401:21): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 166.619468][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.748038][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.038115][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 167.103312][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.229748][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.320767][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.409765][ T5875] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.484438][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.678733][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.772050][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.866272][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.903833][ T5875] usb 3-1: Product: syz [ 167.993574][ T5875] usb 3-1: Manufacturer: syz [ 168.049752][ T5875] usb 3-1: SerialNumber: syz [ 168.181837][ T5875] usb 3-1: selecting invalid altsetting 1 [ 168.268076][ T51] Bluetooth: hci1: command tx timeout [ 169.666090][ T6487] hsr_slave_0: entered promiscuous mode [ 169.673196][ T6487] hsr_slave_1: entered promiscuous mode [ 169.680970][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.690152][ T6487] Cannot create hsr debugfs directory [ 170.349041][ T51] Bluetooth: hci1: command tx timeout [ 170.853886][ T5875] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 170.860580][ T5875] cdc_ncm 3-1:1.0: bind() failure [ 170.874840][ T5875] cdc_ncm 3-1:1.1: invalid descriptor buffer length [ 170.883851][ T5875] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 170.892594][ T5875] cdc_ncm 3-1:1.1: bind() failure [ 170.907295][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.063555][ T5875] usb 3-1: USB disconnect, device number 3 [ 171.245960][ T6148] hsr_slave_0: left promiscuous mode [ 171.280375][ T6148] hsr_slave_1: left promiscuous mode [ 171.314994][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.361592][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.385710][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.393548][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.401691][ T6148] bridge_slave_1: left allmulticast mode [ 171.407390][ T6148] bridge_slave_1: left promiscuous mode [ 171.415403][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.441274][ T6148] bridge_slave_0: left allmulticast mode [ 171.446998][ T6148] bridge_slave_0: left promiscuous mode [ 171.470858][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.540138][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 171.606299][ T6592] loop1: detected capacity change from 0 to 512 [ 172.605523][ T6148] veth1_macvtap: left promiscuous mode [ 172.631548][ T6148] veth0_macvtap: left promiscuous mode [ 172.663706][ T6148] veth1_vlan: left promiscuous mode [ 172.689922][ T6148] veth0_vlan: left promiscuous mode [ 173.848685][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 173.964194][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 174.043912][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.137279][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.401179][ T6601] loop1: detected capacity change from 0 to 512 [ 175.428243][ T6601] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 175.522249][ T6601] block device autoloading is deprecated and will be removed. [ 175.536742][ T6601] EXT4-fs (loop1): external journal has bad superblock [ 175.581507][ T6148] bond0 (unregistering): Released all slaves [ 175.727184][ T6591] netlink: 52 bytes leftover after parsing attributes in process `syz.2.204'. [ 175.958975][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 177.064108][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.119937][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.127239][ T6521] bridge_slave_0: entered allmulticast mode [ 177.135850][ T6521] bridge_slave_0: entered promiscuous mode [ 177.145554][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.158201][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.165481][ T6521] bridge_slave_1: entered allmulticast mode [ 177.225956][ T6521] bridge_slave_1: entered promiscuous mode [ 177.287786][ T6487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.082762][ T6487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.111019][ T6487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.184583][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.242132][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.258052][ T6487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.374291][ T6521] team0: Port device team_slave_0 added [ 178.421367][ T6521] team0: Port device team_slave_1 added [ 178.474910][ T6633] loop1: detected capacity change from 0 to 256 [ 178.485913][ T6633] exfat: Unknown parameter 'fsmagic' [ 179.935858][ T6148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.019471][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.056464][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.106410][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.157976][ T6148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.185493][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.222546][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.305531][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.419783][ T6148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.731104][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.975754][ T6521] hsr_slave_0: entered promiscuous mode [ 180.996428][ T6521] hsr_slave_1: entered promiscuous mode [ 181.101222][ T6649] netlink: 52 bytes leftover after parsing attributes in process `syz.2.213'. [ 181.863987][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.024095][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.195327][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.202580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.230752][ T6675] loop1: detected capacity change from 0 to 512 [ 182.251696][ T6675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.314171][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.321459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.473776][ T6675] EXT4-fs (loop1): 1 truncate cleaned up [ 182.706315][ T6675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.955914][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.023931][ T6675] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.218: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 183.076722][ T6675] EXT4-fs (loop1): Remounting filesystem read-only [ 183.083538][ T6675] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.218: Deleting old file: nlink 4, error=-117 [ 183.362433][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.466562][ T6521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.491775][ T6521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.614352][ T6521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.634813][ T6692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.220'. [ 183.660057][ T6521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.833982][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.369918][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.412582][ T6148] hsr_slave_0: left promiscuous mode [ 184.487249][ T6148] hsr_slave_1: left promiscuous mode [ 184.505312][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.528298][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.553484][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.571601][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.608814][ T6148] bridge_slave_1: left allmulticast mode [ 184.624823][ T6148] bridge_slave_1: left promiscuous mode [ 184.635200][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.695956][ T6148] bridge_slave_0: left allmulticast mode [ 184.727997][ T6148] bridge_slave_0: left promiscuous mode [ 184.742307][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.807633][ T6148] veth1_macvtap: left promiscuous mode [ 184.821245][ T6148] veth0_macvtap: left promiscuous mode [ 184.826981][ T6148] veth1_vlan: left promiscuous mode [ 184.848411][ T6148] veth0_vlan: left promiscuous mode [ 185.532921][ T6743] loop1: detected capacity change from 0 to 256 [ 185.571935][ T6743] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 185.930715][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 186.016570][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 186.125671][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.133305][ T6750] fuse: Bad value for 'fd' [ 186.249366][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.705626][ T6754] loop1: detected capacity change from 0 to 2048 [ 186.825443][ T6754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.942868][ T6148] bond0 (unregistering): Released all slaves [ 188.207412][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.228'. [ 188.247696][ T6487] veth0_vlan: entered promiscuous mode [ 188.370165][ T6487] veth1_vlan: entered promiscuous mode [ 188.436885][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.542323][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.550425][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.601299][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.608555][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.609525][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.727527][ T6487] veth0_macvtap: entered promiscuous mode [ 188.849296][ T6487] veth1_macvtap: entered promiscuous mode [ 188.977332][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.015443][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.027119][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.043100][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.055707][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.091345][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.194922][ T6775] loop2: detected capacity change from 0 to 256 [ 189.205986][ T6775] exfat: Unknown parameter 'fsmagic' [ 189.414212][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.532961][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.663588][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.815072][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.166115][ T6487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.181091][ T5793] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.182704][ T6487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.292512][ T6487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.476312][ T6487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.745648][ T6784] loop1: detected capacity change from 0 to 512 [ 191.753121][ T6784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.887501][ T6784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.021037][ T6784] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 192.029712][ T6784] System zones: 0-2, 18-18, 34-34 [ 192.065818][ T6784] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.238: iget: immutable or append flags not allowed on symlinks [ 192.082310][ T6784] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.238: Bad quota inode: 4, type: 1 [ 192.103603][ T6784] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.123516][ T6784] EXT4-fs (loop1): mount failed [ 193.389772][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.456914][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.489345][ T6796] fuse: Bad value for 'fd' [ 193.598287][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.624634][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.664175][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.515621][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.526939][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.632801][ T6815] netlink: 52 bytes leftover after parsing attributes in process `syz.2.242'. [ 195.762181][ T6521] veth0_vlan: entered promiscuous mode [ 195.805371][ T6521] veth1_vlan: entered promiscuous mode [ 195.853321][ T6825] loop4: detected capacity change from 0 to 512 [ 195.898499][ T6825] EXT4-fs (loop4): Test dummy encryption mode enabled [ 195.905348][ T6825] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.945007][ T6521] veth0_macvtap: entered promiscuous mode [ 195.963849][ T6521] veth1_macvtap: entered promiscuous mode [ 195.981040][ T6825] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.245: bad orphan inode 131083 [ 196.019865][ T6825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.090399][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.166889][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.184373][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.198817][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.214173][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.317829][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.330671][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.370622][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.470379][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.482083][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.492541][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.503665][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.526520][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.557818][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.622334][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 196.632156][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.320609][ T6521] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.389027][ T6521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.433882][ T6521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.471590][ T6521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.520522][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.1.251'. [ 198.525304][ T6849] loop2: detected capacity change from 0 to 512 [ 198.565895][ T27] audit: type=1326 audit(1764081786.531:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66098f749 code=0x7ffc0000 [ 198.602802][ T6849] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.630814][ T6849] EXT4-fs: inline encryption not supported [ 198.673853][ T27] audit: type=1326 audit(1764081786.561:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd66098f749 code=0x7ffc0000 [ 198.678877][ T6849] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.749040][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.759237][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.775086][ T27] audit: type=1326 audit(1764081786.561:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66098f749 code=0x7ffc0000 [ 198.834559][ T6849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 198.873189][ T6849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.895262][ T6849] EXT4-fs (loop2): 1 truncate cleaned up [ 198.903453][ T6849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.931174][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.968654][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.064308][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 199.982901][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.278786][ T6880] Bluetooth: MGMT ver 1.22 [ 200.287395][ T6881] loop2: detected capacity change from 0 to 512 [ 200.520414][ T6881] tmpfs: Unknown parameter 'nolazytime6ÆÄ„Äš“Smº¬DÂåŸþLýAm´ý9õr´ÁQ!TÍ"‰Þa.ôe€Ûù×U' [ 200.587782][ T6889] loop4: detected capacity change from 0 to 128 [ 202.147012][ T6901] loop5: detected capacity change from 0 to 4096 [ 202.190982][ T6901] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.368939][ T6901] EXT4-fs (loop5): Test dummy encryption mode enabled [ 204.649441][ T6910] loop1: detected capacity change from 0 to 512 [ 204.663690][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.718318][ T6910] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.757544][ T6910] EXT4-fs: inline encryption not supported [ 204.838143][ T6910] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.875867][ T6910] EXT4-fs (loop1): Test dummy encryption mode enabled [ 204.922791][ T6910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.116867][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.261'. [ 205.426994][ T6910] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 205.438077][ T6910] EXT4-fs: failed to create workqueue [ 205.591307][ T6910] EXT4-fs (loop1): mount failed [ 206.032478][ T6929] syzkaller0: entered promiscuous mode [ 206.076092][ T6929] syzkaller0: entered allmulticast mode [ 207.714226][ T6521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.745356][ T6979] overlayfs: overlapping lowerdir path [ 213.623363][ T6982] random: crng reseeded on system resumption [ 215.432056][ T27] audit: type=1326 audit(1764081803.401:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.5.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 216.032764][ T27] audit: type=1326 audit(1764081803.421:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.5.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 216.085024][ T27] audit: type=1326 audit(1764081803.431:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.5.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 216.118943][ T27] audit: type=1326 audit(1764081803.431:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.5.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 216.152000][ T27] audit: type=1326 audit(1764081803.431:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.5.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 216.755456][ T7001] loop5: detected capacity change from 0 to 512 [ 216.763078][ T7001] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.770168][ T7001] EXT4-fs: inline encryption not supported [ 216.776251][ T7001] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.784221][ T7001] EXT4-fs (loop5): Test dummy encryption mode enabled [ 216.800597][ T7001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.821348][ T7001] EXT4-fs (loop5): 1 truncate cleaned up [ 216.829724][ T7001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.876485][ T6521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.583913][ T7012] loop5: detected capacity change from 0 to 8192 [ 218.647091][ T6970] lo: Caught tx_queue_len zero misconfig [ 218.703918][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 220.198178][ T6997] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 220.208197][ T6997] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 220.218511][ T6997] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 220.230664][ T27] audit: type=1800 audit(1764081808.161:30): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.283" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 220.695362][ T7036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.971652][ T7075] loop4: detected capacity change from 0 to 2048 [ 225.058117][ T7075] Alternate GPT is invalid, using primary GPT. [ 225.065579][ T7075] loop4: p2 p3 p7 [ 225.615774][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 225.616859][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 225.647490][ T6299] udevd[6299]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 227.112774][ T7103] loop2: detected capacity change from 0 to 512 [ 227.777455][ T7107] loop1: detected capacity change from 0 to 512 [ 227.856251][ T7107] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 228.949765][ T7107] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6 [ 230.688525][ T7136] overlayfs: failed to resolve './file1': -2 [ 231.435374][ T7142] loop5: detected capacity change from 0 to 512 [ 231.512503][ T7142] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.545827][ T7142] EXT4-fs: inline encryption not supported [ 231.557987][ T7142] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.579696][ T7142] EXT4-fs (loop5): Test dummy encryption mode enabled [ 231.587652][ T7142] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 231.728628][ T7142] EXT4-fs (loop5): 1 truncate cleaned up [ 231.744122][ T7142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.539187][ T6521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.977481][ T7164] loop1: detected capacity change from 0 to 512 [ 233.990449][ T7164] ext2: Unknown parameter 'smackfsfloor' [ 236.506214][ T7183] loop5: detected capacity change from 0 to 256 [ 236.943817][ T7183] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 237.330134][ T7189] loop2: detected capacity change from 0 to 8192 [ 237.441177][ T7189] netlink: 160 bytes leftover after parsing attributes in process `syz.2.326'. [ 239.769488][ T7199] fuse: Unknown parameter '0x0000000000000004' [ 240.057528][ T7202] loop5: detected capacity change from 0 to 512 [ 240.147270][ T7202] ext4: Unknown parameter 'nouser_xattr' [ 240.238557][ T5800] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.228051][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 242.269648][ T7230] loop1: detected capacity change from 0 to 512 [ 242.277076][ T7230] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.328078][ T7230] EXT4-fs: inline encryption not supported [ 242.344600][ T7230] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.378110][ T7230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 242.406464][ T7230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.428407][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 242.443155][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.466033][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.485814][ T7236] fuse: Unknown parameter '0x0000000000000004' [ 242.512790][ T7230] EXT4-fs (loop1): 1 truncate cleaned up [ 242.524273][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.559689][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.604835][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.616015][ T7241] loop4: detected capacity change from 0 to 512 [ 242.656761][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.664436][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.738403][ T7241] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.912729][ T23] usb 3-1: config 0 descriptor?? [ 243.162659][ T27] audit: type=1800 audit(1764081830.981:31): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.340" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 243.366849][ T23] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 243.428911][ T23] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 243.553638][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 243.659724][ T7222] loop2: detected capacity change from 0 to 128 [ 243.669360][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.721235][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.775074][ T7222] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.804282][ T23] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 243.873617][ T7222] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.155798][ T23] usb 3-1: USB disconnect, device number 4 [ 244.313085][ T7269] loop5: detected capacity change from 0 to 256 [ 244.505392][ T7269] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 244.871468][ T7262] loop1: detected capacity change from 0 to 1024 [ 244.931882][ T7262] EXT4-fs: Ignoring removed bh option [ 244.954226][ T7266] loop4: detected capacity change from 0 to 4096 [ 245.028320][ T7262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.064925][ T7266] EXT4-fs (loop4): Test dummy encryption mode enabled [ 245.171727][ T7262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.190319][ T7266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.217584][ T7268] fido_id[7268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 245.395791][ T27] audit: type=1800 audit(1764081833.361:32): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.343" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 247.268640][ T7266] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 247.338590][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.876411][ T7288] fuse: Bad value for 'fd' [ 247.887809][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.223110][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.240767][ T7295] fuse: Unknown parameter '0x0000000000000004' [ 249.422286][ T7299] loop2: detected capacity change from 0 to 512 [ 249.459759][ T7299] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.466261][ T7299] EXT4-fs: inline encryption not supported [ 249.508077][ T7299] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.522413][ T7299] EXT4-fs (loop2): Test dummy encryption mode enabled [ 249.552051][ T7299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.647622][ T7299] EXT4-fs (loop2): 1 truncate cleaned up [ 250.683195][ T7299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.398789][ T7327] loop5: detected capacity change from 0 to 256 [ 252.594494][ T7327] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 253.260624][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.876053][ T7337] fuse: Unknown parameter 'fd0x0000000000000004' [ 256.411658][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.418956][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.715685][ T27] audit: type=1326 audit(1764081844.681:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 256.794306][ T7356] loop2: detected capacity change from 0 to 1024 [ 256.808224][ T27] audit: type=1326 audit(1764081844.681:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 256.829078][ T7356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.898813][ T27] audit: type=1326 audit(1764081844.681:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 256.976896][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.993061][ T27] audit: type=1326 audit(1764081844.681:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.088043][ T27] audit: type=1326 audit(1764081844.681:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.189643][ T27] audit: type=1326 audit(1764081844.681:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.229169][ T27] audit: type=1326 audit(1764081844.681:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.251967][ T27] audit: type=1326 audit(1764081844.681:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.276525][ T27] audit: type=1326 audit(1764081844.721:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.299436][ T27] audit: type=1326 audit(1764081844.731:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7e49f8f749 code=0x7ffc0000 [ 257.817751][ T7388] loop4: detected capacity change from 0 to 512 [ 257.922397][ T7388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.013607][ T7388] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.721813][ T7400] loop1: detected capacity change from 0 to 1024 [ 258.807343][ T7400] EXT4-fs: Ignoring removed bh option [ 258.867486][ T7400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.052407][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.082766][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.667837][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.912450][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.048164][ T5828] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 260.388075][ T5828] usb 5-1: device descriptor read/64, error -71 [ 261.018109][ T5828] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 261.164260][ T7426] overlayfs: missing 'lowerdir' [ 261.974497][ T5828] usb 5-1: device descriptor read/64, error -71 [ 262.504665][ T5828] usb usb5-port1: attempt power cycle [ 263.058893][ T7432] loop5: detected capacity change from 0 to 512 [ 263.093066][ T7432] EXT4-fs: Ignoring removed i_version option [ 263.191941][ T7432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.412983][ T6521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.491950][ T6436] tipc: Subscription rejected, illegal request [ 265.229223][ T7481] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.346512][ T7481] wireguard0: entered promiscuous mode [ 267.886908][ T7481] wireguard0: entered allmulticast mode [ 276.640970][ T7597] loop2: detected capacity change from 0 to 256 [ 277.837823][ T7597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 279.286303][ T7608] loop4: detected capacity change from 0 to 8192 [ 279.611206][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 281.157318][ T7623] overlayfs: overlapping lowerdir path [ 285.115141][ T7660] loop5: detected capacity change from 0 to 512 [ 285.264810][ T7660] tmpfs: Unknown parameter 'nolazytime6ÆÄ„Äš“Smº¬DÂåŸþLýAm´ý9õr´ÁQ!TÍ"‰Þa.ôe€Ûù×U' [ 289.110470][ T7674] overlayfs: overlapping lowerdir path [ 289.197690][ T7672] loop4: detected capacity change from 0 to 256 [ 289.656333][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 289.656349][ T27] audit: type=1326 audit(1764081877.601:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 289.687474][ T7684] loop2: detected capacity change from 0 to 512 [ 289.695751][ T7684] EXT4-fs: Ignoring removed orlov option [ 289.701494][ T7684] EXT4-fs: Ignoring removed i_version option [ 290.126166][ T7684] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.429: corrupted in-inode xattr: invalid ea_ino [ 290.150529][ T7684] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.429: couldn't read orphan inode 15 (err -117) [ 290.209730][ T7684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.571028][ T27] audit: type=1326 audit(1764081877.601:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 290.790044][ T27] audit: type=1326 audit(1764081877.601:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.026432][ T27] audit: type=1326 audit(1764081877.611:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.182417][ T27] audit: type=1326 audit(1764081877.611:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.204818][ T27] audit: type=1326 audit(1764081877.611:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.283745][ T7702] gtp0: entered promiscuous mode [ 291.307519][ T27] audit: type=1326 audit(1764081877.621:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.338743][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 291.464665][ T27] audit: type=1326 audit(1764081877.621:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.607928][ T27] audit: type=1326 audit(1764081877.621:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9e5c78f749 code=0x7ffc0000 [ 291.755834][ T27] audit: type=1326 audit(1764081877.621:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e5c78f783 code=0x7ffc0000 [ 292.026190][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.848187][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 293.068295][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 293.087202][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.149135][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.208171][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.272709][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.497699][ T7698] loop5: detected capacity change from 0 to 40427 [ 293.539917][ T7698] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 294.483512][ T7698] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.565480][ T7698] F2FS-fs (loop5): invalid crc value [ 294.593811][ T7698] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 295.211312][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.348258][ T7742] capability: warning: `syz.5.440' uses deprecated v2 capabilities in a way that may be insecure [ 296.060995][ T8] usb 2-1: config 0 descriptor?? [ 296.308950][ T7743] loop1: detected capacity change from 0 to 128 [ 296.498464][ T7743] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.614273][ T7743] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.248553][ T6148] Bluetooth: hci4: Frame reassembly failed (-84) [ 298.131000][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 298.155618][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 298.177215][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.199119][ T8] usb 2-1: USB disconnect, device number 2 [ 299.234224][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.822814][ T7790] overlayfs: overlapping lowerdir path [ 301.031875][ T7791] loop2: detected capacity change from 0 to 8192 [ 301.364011][ T7791] netlink: 160 bytes leftover after parsing attributes in process `syz.2.450'. [ 304.171548][ T7819] syzkaller0: create flow: hash 1250016793 index 1 [ 304.664334][ T7813] syzkaller0: delete flow: hash 1250016793 index 1 [ 306.950305][ T7844] loop5: detected capacity change from 0 to 1024 [ 307.129696][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.293982][ T7844] ================================================================== [ 307.302128][ T7844] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 307.309905][ T7844] Read of size 18446744073709551588 at addr ffff88807d0c2840 by task syz.5.463/7844 [ 307.319308][ T7844] [ 307.321662][ T7844] CPU: 0 PID: 7844 Comm: syz.5.463 Not tainted syzkaller #0 [ 307.328986][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.339080][ T7844] Call Trace: [ 307.342388][ T7844] [ 307.345348][ T7844] dump_stack_lvl+0x16c/0x230 [ 307.350077][ T7844] ? read_lock_is_recursive+0x20/0x20 [ 307.355495][ T7844] ? show_regs_print_info+0x20/0x20 [ 307.360747][ T7844] ? load_image+0x3b0/0x3b0 [ 307.365292][ T7844] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 307.370709][ T7844] ? __virt_addr_valid+0x18c/0x540 [ 307.375866][ T7844] ? __virt_addr_valid+0x469/0x540 [ 307.381021][ T7844] print_report+0xac/0x220 [ 307.385487][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 307.391007][ T7844] kasan_report+0x117/0x150 [ 307.395556][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 307.401105][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 307.406603][ T7844] kasan_check_range+0x288/0x290 [ 307.411582][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 307.417165][ T7844] __asan_memmove+0x29/0x70 [ 307.421711][ T7844] ext4_xattr_set_entry+0x94b/0x1e90 [ 307.427047][ T7844] ext4_xattr_block_set+0xae3/0x32a0 [ 307.432414][ T7844] ? ext4_destroy_inode+0x200/0x200 [ 307.437652][ T7844] ? proc_nr_inodes+0x230/0x230 [ 307.442545][ T7844] ? do_raw_spin_unlock+0x121/0x230 [ 307.447807][ T7844] ? _raw_spin_unlock+0x28/0x40 [ 307.452711][ T7844] ? ext4_xattr_block_find+0x350/0x350 [ 307.458226][ T7844] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 307.463693][ T7844] ext4_xattr_set_handle+0x10a1/0x1290 [ 307.469211][ T7844] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 307.475245][ T7844] ? __ext4_journal_start_sb+0x259/0x570 [ 307.480920][ T7844] ext4_xattr_set+0x22d/0x320 [ 307.485653][ T7844] ? end_current_label_crit_section+0x170/0x170 [ 307.491978][ T7844] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 307.497578][ T7844] ? posix_xattr_acl+0x93/0xb0 [ 307.502383][ T7844] ? evm_protect_xattr+0x36d/0x7a0 [ 307.507535][ T7844] ? ext4_xattr_trusted_get+0x40/0x40 [ 307.512954][ T7844] __vfs_setxattr+0x431/0x470 [ 307.517673][ T7844] __vfs_setxattr_noperm+0x12d/0x5e0 [ 307.522995][ T7844] vfs_setxattr+0x16c/0x2f0 [ 307.527531][ T7844] ? xattr_permission+0x470/0x470 [ 307.532588][ T7844] ? __mnt_want_write+0x223/0x2a0 [ 307.537649][ T7844] ? path_setxattr+0x314/0x550 [ 307.542450][ T7844] path_setxattr+0x362/0x550 [ 307.547101][ T7844] ? simple_xattrs_free+0x150/0x150 [ 307.552375][ T7844] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 307.558408][ T7844] ? lock_chain_count+0x20/0x20 [ 307.563388][ T7844] __x64_sys_lsetxattr+0xb8/0xd0 [ 307.568360][ T7844] do_syscall_64+0x55/0xb0 [ 307.572820][ T7844] ? clear_bhb_loop+0x40/0x90 [ 307.577532][ T7844] ? clear_bhb_loop+0x40/0x90 [ 307.582243][ T7844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.588165][ T7844] RIP: 0033:0x7f7e49f8f749 [ 307.592616][ T7844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.612266][ T7844] RSP: 002b:00007f7e4adc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 307.620727][ T7844] RAX: ffffffffffffffda RBX: 00007f7e4a1e5fa0 RCX: 00007f7e49f8f749 [ 307.628726][ T7844] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 307.636724][ T7844] RBP: 00007f7e4a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 307.644727][ T7844] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 307.652733][ T7844] R13: 00007f7e4a1e6038 R14: 00007f7e4a1e5fa0 R15: 00007ffc80bb23a8 [ 307.660760][ T7844] [ 307.663822][ T7844] [ 307.666170][ T7844] Allocated by task 7844: [ 307.670521][ T7844] kasan_set_track+0x4e/0x70 [ 307.675147][ T7844] __kasan_kmalloc+0x8f/0xa0 [ 307.679788][ T7844] __kmalloc_node_track_caller+0xb2/0x230 [ 307.685565][ T7844] kmemdup+0x2b/0x70 [ 307.689501][ T7844] ext4_xattr_block_set+0x9e5/0x32a0 [ 307.694839][ T7844] ext4_xattr_set_handle+0x10a1/0x1290 [ 307.700338][ T7844] ext4_xattr_set+0x22d/0x320 [ 307.705234][ T7844] __vfs_setxattr+0x431/0x470 [ 307.709960][ T7844] __vfs_setxattr_noperm+0x12d/0x5e0 [ 307.715285][ T7844] vfs_setxattr+0x16c/0x2f0 [ 307.719828][ T7844] path_setxattr+0x362/0x550 [ 307.724467][ T7844] __x64_sys_lsetxattr+0xb8/0xd0 [ 307.729454][ T7844] do_syscall_64+0x55/0xb0 [ 307.733917][ T7844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.739850][ T7844] [ 307.742285][ T7844] The buggy address belongs to the object at ffff88807d0c2800 [ 307.742285][ T7844] which belongs to the cache kmalloc-1k of size 1024 [ 307.756375][ T7844] The buggy address is located 64 bytes inside of [ 307.756375][ T7844] 1024-byte region [ffff88807d0c2800, ffff88807d0c2c00) [ 307.769701][ T7844] [ 307.772063][ T7844] The buggy address belongs to the physical page: [ 307.778496][ T7844] page:ffffea0001f43000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d0c0 [ 307.788693][ T7844] head:ffffea0001f43000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 307.797667][ T7844] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 307.805690][ T7844] page_type: 0xffffffff() [ 307.810053][ T7844] raw: 00fff00000000840 ffff888017841dc0 ffffea0001751e00 dead000000000002 [ 307.818662][ T7844] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 307.827260][ T7844] page dumped because: kasan: bad access detected [ 307.833699][ T7844] page_owner tracks the page as allocated [ 307.839442][ T7844] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3450, tgid 3450 (kworker/u4:11), ts 95688246727, free_ts 95638439014 [ 307.860323][ T7844] post_alloc_hook+0x1cd/0x210 [ 307.865136][ T7844] get_page_from_freelist+0x195c/0x19f0 [ 307.870735][ T7844] __alloc_pages+0x1e3/0x460 [ 307.875367][ T7844] alloc_slab_page+0x5d/0x170 [ 307.880082][ T7844] new_slab+0x87/0x2e0 [ 307.884186][ T7844] ___slab_alloc+0xc6d/0x1300 [ 307.888890][ T7844] __kmem_cache_alloc_node+0x1a2/0x260 [ 307.894382][ T7844] __kmalloc+0xa4/0x240 [ 307.898668][ T7844] ieee802_11_parse_elems_full+0xb9/0x2080 [ 307.904503][ T7844] ieee80211_inform_bss+0x107/0x1060 [ 307.909821][ T7844] rdev_inform_bss+0x106/0x410 [ 307.914615][ T7844] cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 307.920796][ T7844] ieee80211_bss_info_update+0x70b/0x930 [ 307.926465][ T7844] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 307.932741][ T7844] ieee80211_iface_work+0x717/0xc70 [ 307.938064][ T7844] cfg80211_wiphy_work+0x225/0x260 [ 307.943215][ T7844] page last free stack trace: [ 307.947901][ T7844] free_unref_page_prepare+0x7ce/0x8e0 [ 307.953402][ T7844] free_unref_page+0x32/0x2e0 [ 307.958215][ T7844] __unfreeze_partials+0x1cf/0x210 [ 307.963388][ T7844] put_cpu_partial+0x17c/0x250 [ 307.968199][ T7844] __slab_free+0x31d/0x410 [ 307.972684][ T7844] qlist_free_all+0x75/0xe0 [ 307.977217][ T7844] kasan_quarantine_reduce+0x143/0x160 [ 307.982711][ T7844] __kasan_slab_alloc+0x22/0x80 [ 307.987590][ T7844] slab_post_alloc_hook+0x6e/0x4d0 [ 307.992907][ T7844] __kmem_cache_alloc_node+0x13e/0x260 [ 307.998399][ T7844] __kmalloc+0xa4/0x240 [ 308.002591][ T7844] tomoyo_realpath_from_path+0xe3/0x5d0 [ 308.008175][ T7844] tomoyo_path_number_perm+0x1ea/0x590 [ 308.013665][ T7844] security_path_chown+0xe1/0x140 [ 308.018721][ T7844] chown_common+0x3aa/0x5a0 [ 308.023251][ T7844] do_fchownat+0x168/0x270 [ 308.027721][ T7844] [ 308.030075][ T7844] Memory state around the buggy address: [ 308.035735][ T7844] ffff88807d0c2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.043829][ T7844] ffff88807d0c2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.051915][ T7844] >ffff88807d0c2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.059995][ T7844] ^ [ 308.066178][ T7844] ffff88807d0c2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.074275][ T7844] ffff88807d0c2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.082363][ T7844] ================================================================== [ 308.134994][ T7844] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 308.142258][ T7844] CPU: 0 PID: 7844 Comm: syz.5.463 Not tainted syzkaller #0 [ 308.149578][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.159662][ T7844] Call Trace: [ 308.162970][ T7844] [ 308.165923][ T7844] dump_stack_lvl+0x16c/0x230 [ 308.170658][ T7844] ? show_regs_print_info+0x20/0x20 [ 308.175902][ T7844] ? load_image+0x3b0/0x3b0 [ 308.180447][ T7844] panic+0x2c0/0x710 [ 308.184377][ T7844] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.190563][ T7844] ? bpf_jit_dump+0xd0/0xd0 [ 308.195097][ T7844] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 308.201023][ T7844] ? _raw_spin_unlock+0x40/0x40 [ 308.205904][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 308.211417][ T7844] check_panic_on_warn+0x84/0xa0 [ 308.216395][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 308.221892][ T7844] end_report+0x6f/0x140 [ 308.226167][ T7844] kasan_report+0x128/0x150 [ 308.230706][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 308.236206][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 308.241701][ T7844] kasan_check_range+0x288/0x290 [ 308.246667][ T7844] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 308.252181][ T7844] __asan_memmove+0x29/0x70 [ 308.256741][ T7844] ext4_xattr_set_entry+0x94b/0x1e90 [ 308.262090][ T7844] ext4_xattr_block_set+0xae3/0x32a0 [ 308.267412][ T7844] ? ext4_destroy_inode+0x200/0x200 [ 308.272652][ T7844] ? proc_nr_inodes+0x230/0x230 [ 308.277538][ T7844] ? do_raw_spin_unlock+0x121/0x230 [ 308.282771][ T7844] ? _raw_spin_unlock+0x28/0x40 [ 308.287664][ T7844] ? ext4_xattr_block_find+0x350/0x350 [ 308.293154][ T7844] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 308.298561][ T7844] ext4_xattr_set_handle+0x10a1/0x1290 [ 308.304061][ T7844] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 308.310083][ T7844] ? __ext4_journal_start_sb+0x259/0x570 [ 308.315752][ T7844] ext4_xattr_set+0x22d/0x320 [ 308.320475][ T7844] ? end_current_label_crit_section+0x170/0x170 [ 308.326753][ T7844] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 308.332345][ T7844] ? posix_xattr_acl+0x93/0xb0 [ 308.337147][ T7844] ? evm_protect_xattr+0x36d/0x7a0 [ 308.342322][ T7844] ? ext4_xattr_trusted_get+0x40/0x40 [ 308.347919][ T7844] __vfs_setxattr+0x431/0x470 [ 308.352674][ T7844] __vfs_setxattr_noperm+0x12d/0x5e0 [ 308.357999][ T7844] vfs_setxattr+0x16c/0x2f0 [ 308.362532][ T7844] ? xattr_permission+0x470/0x470 [ 308.367584][ T7844] ? __mnt_want_write+0x223/0x2a0 [ 308.372656][ T7844] ? path_setxattr+0x314/0x550 [ 308.377462][ T7844] path_setxattr+0x362/0x550 [ 308.382093][ T7844] ? simple_xattrs_free+0x150/0x150 [ 308.387334][ T7844] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 308.393345][ T7844] ? lock_chain_count+0x20/0x20 [ 308.398230][ T7844] __x64_sys_lsetxattr+0xb8/0xd0 [ 308.403198][ T7844] do_syscall_64+0x55/0xb0 [ 308.407650][ T7844] ? clear_bhb_loop+0x40/0x90 [ 308.412360][ T7844] ? clear_bhb_loop+0x40/0x90 [ 308.417073][ T7844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.422999][ T7844] RIP: 0033:0x7f7e49f8f749 [ 308.427452][ T7844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.447360][ T7844] RSP: 002b:00007f7e4adc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 308.455818][ T7844] RAX: ffffffffffffffda RBX: 00007f7e4a1e5fa0 RCX: 00007f7e49f8f749 [ 308.463823][ T7844] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 308.471829][ T7844] RBP: 00007f7e4a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 308.479834][ T7844] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 308.487836][ T7844] R13: 00007f7e4a1e6038 R14: 00007f7e4a1e5fa0 R15: 00007ffc80bb23a8 [ 308.495853][ T7844] [ 308.499183][ T7844] Kernel Offset: disabled [ 308.503511][ T7844] Rebooting in 86400 seconds..