last executing test programs: 52.128672271s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$pokeuser(0x6, r0, 0x7, 0x0) getpid() recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 45.372266661s ago: executing program 2 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) getsockopt(r3, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) 44.460925494s ago: executing program 2 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, 0x0, &(0x7f0000001000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000020c0)='target_sequencer_start\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 39.251060891s ago: executing program 2 (id=44): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@data_err_abort}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@nodelalloc}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}}], 0x2, 0x2400c042) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 36.594645577s ago: executing program 2 (id=48): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 31.620945478s ago: executing program 2 (id=60): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e7, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 31.090283721s ago: executing program 32 (id=60): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e7, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18.404822783s ago: executing program 1 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x0, 0xa, 0xb, 0x3, 0xd0, 0x40, 0x1, 0x0, 0x30, 0x19}, {0x8000000, 0x2, 0x3, 0x2, 0x40, 0x7, 0x7f, 0xf8, 0x9, 0x6, 0x3}, {0x1, 0x4000, 0x3, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0x10, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xc, 0xa3, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x5}, {0x1000, 0x1, 0x4, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x81, 0x2, 0x70}, {0x0, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x63, 0x6]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x4000, 0x8, 0xb, 0x2, 0xd0, 0x40, 0x7, 0x0, 0x30, 0x19}, {0x5000, 0x2, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x2000, 0x1, 0xe, 0x5, 0x1, 0x7, 0x0, 0x1, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x4, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0x10, 0x3, 0x5, 0x2, 0xc, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xd, 0xa3, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x5}, {0x1000, 0x1, 0x4, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x81, 0x2, 0x70}, {0x1, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x1, 0x0, 0xeeee0000, [0x6800000000000000, 0x9, 0x63, 0x6]}) 16.90832029s ago: executing program 1 (id=99): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x811) 13.324719169s ago: executing program 1 (id=110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000130000008500000023"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.015565054s ago: executing program 1 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xd2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 10.352355446s ago: executing program 1 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 8.648854565s ago: executing program 1 (id=116): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.902020448s ago: executing program 3 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 6.665547616s ago: executing program 3 (id=123): unshare(0x4020400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 6.380570812s ago: executing program 3 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef69, 0x4}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.650952147s ago: executing program 3 (id=127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.177619175s ago: executing program 4 (id=130): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 4.846722532s ago: executing program 0 (id=131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4bfb, &(0x7f0000000600)=""/171) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 4.597916266s ago: executing program 0 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.181647005s ago: executing program 4 (id=133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000130000008500000023"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.988754499s ago: executing program 4 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x300}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.071419867s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) munlockall() getgroups(0x0, 0x0) setresgid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) 2.94179647s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0300001100010027bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="80140000042100001400140076657468305f746f5f68737200000000080028002595000008002300ff0300000a000200aaaaaaaa"], 0x35c}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f00000003c0), 0x0) 2.380828019s ago: executing program 3 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.9917965s ago: executing program 0 (id=138): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.991481911s ago: executing program 4 (id=139): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.23859592s ago: executing program 0 (id=140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 923.774011ms ago: executing program 0 (id=141): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$null(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 171.131937ms ago: executing program 4 (id=142): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 3 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000085000000230000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 83.418744][ T5810] cgroup: Unknown subsys name 'net' [ 83.548654][ T5810] cgroup: Unknown subsys name 'cpuset' [ 83.557646][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.271600][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.705323][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.734809][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.742965][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.751916][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.759877][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.768771][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.776916][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.794952][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.796912][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.809647][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.818228][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.827624][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.827680][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.835345][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.846651][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.860889][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.864127][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.876738][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.885711][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.886074][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.893808][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.908022][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.925577][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.933597][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.943448][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.685480][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.698919][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.788916][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.902677][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.998041][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 89.060523][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.068548][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.076856][ T5826] bridge_slave_0: entered allmulticast mode [ 89.084796][ T5826] bridge_slave_0: entered promiscuous mode [ 89.142616][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.149992][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.157471][ T5826] bridge_slave_1: entered allmulticast mode [ 89.165062][ T5826] bridge_slave_1: entered promiscuous mode [ 89.245657][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.252849][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.260915][ T5824] bridge_slave_0: entered allmulticast mode [ 89.268829][ T5824] bridge_slave_0: entered promiscuous mode [ 89.277034][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.284313][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.291540][ T5827] bridge_slave_0: entered allmulticast mode [ 89.299278][ T5827] bridge_slave_0: entered promiscuous mode [ 89.339351][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.346915][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.354243][ T5824] bridge_slave_1: entered allmulticast mode [ 89.361597][ T5824] bridge_slave_1: entered promiscuous mode [ 89.369560][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.376846][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.384681][ T5827] bridge_slave_1: entered allmulticast mode [ 89.392181][ T5827] bridge_slave_1: entered promiscuous mode [ 89.405849][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.413036][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.420452][ T5828] bridge_slave_0: entered allmulticast mode [ 89.428117][ T5828] bridge_slave_0: entered promiscuous mode [ 89.439471][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.490638][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.498058][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.505481][ T5828] bridge_slave_1: entered allmulticast mode [ 89.512908][ T5828] bridge_slave_1: entered promiscuous mode [ 89.522935][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.605510][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.618983][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.629393][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.636678][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.643866][ T5821] bridge_slave_0: entered allmulticast mode [ 89.651573][ T5821] bridge_slave_0: entered promiscuous mode [ 89.689479][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.717564][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.728650][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.736545][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.743768][ T5821] bridge_slave_1: entered allmulticast mode [ 89.751376][ T5821] bridge_slave_1: entered promiscuous mode [ 89.762113][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.774878][ T5826] team0: Port device team_slave_0 added [ 89.837422][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.850298][ T5826] team0: Port device team_slave_1 added [ 89.859550][ T5824] team0: Port device team_slave_0 added [ 89.869935][ T5824] team0: Port device team_slave_1 added [ 89.877896][ T5827] team0: Port device team_slave_0 added [ 89.941693][ T5827] team0: Port device team_slave_1 added [ 89.948160][ T5840] Bluetooth: hci1: command tx timeout [ 89.948272][ T5834] Bluetooth: hci2: command tx timeout [ 89.954109][ T5830] Bluetooth: hci0: command tx timeout [ 89.978493][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.024784][ T5840] Bluetooth: hci4: command tx timeout [ 90.024791][ T5830] Bluetooth: hci3: command tx timeout [ 90.055254][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.067223][ T5828] team0: Port device team_slave_0 added [ 90.088521][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.095595][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.122038][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.135193][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.142174][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.168284][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.180653][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.187980][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.214832][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.228396][ T5828] team0: Port device team_slave_1 added [ 90.248472][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.255676][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.282735][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.295017][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.302000][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.328718][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.340707][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.347764][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.373888][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.399866][ T5821] team0: Port device team_slave_0 added [ 90.442956][ T5821] team0: Port device team_slave_1 added [ 90.480219][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.487586][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.513868][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.526864][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.533863][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.560574][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.572959][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.580145][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.606315][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.666161][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.673188][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.700116][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.742959][ T5826] hsr_slave_0: entered promiscuous mode [ 90.749851][ T5826] hsr_slave_1: entered promiscuous mode [ 90.798188][ T5827] hsr_slave_0: entered promiscuous mode [ 90.805058][ T5827] hsr_slave_1: entered promiscuous mode [ 90.811591][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.818824][ T5827] Cannot create hsr debugfs directory [ 90.854208][ T5824] hsr_slave_0: entered promiscuous mode [ 90.860847][ T5824] hsr_slave_1: entered promiscuous mode [ 90.867301][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 90.873077][ T5824] Cannot create hsr debugfs directory [ 90.963101][ T5821] hsr_slave_0: entered promiscuous mode [ 90.969768][ T5821] hsr_slave_1: entered promiscuous mode [ 90.976281][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 90.982072][ T5821] Cannot create hsr debugfs directory [ 91.044619][ T5828] hsr_slave_0: entered promiscuous mode [ 91.051315][ T5828] hsr_slave_1: entered promiscuous mode [ 91.059039][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.070679][ T5828] Cannot create hsr debugfs directory [ 91.632865][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.649515][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.661098][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.681570][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.751753][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.768916][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.788863][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.800002][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.896896][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.915573][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.929067][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.941795][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.024358][ T5830] Bluetooth: hci1: command tx timeout [ 92.024637][ T5834] Bluetooth: hci0: command tx timeout [ 92.029960][ T5840] Bluetooth: hci2: command tx timeout [ 92.072940][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.087049][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.100088][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.108588][ T5840] Bluetooth: hci4: command tx timeout [ 92.108610][ T5834] Bluetooth: hci3: command tx timeout [ 92.124712][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.169229][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.307468][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.347560][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.354978][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.366932][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.374235][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.385774][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.420644][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.432466][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.464694][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.508944][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.537459][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.607075][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.627801][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.635098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.668378][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.675667][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.690578][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.713806][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.739962][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.747391][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.788245][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.795776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.883489][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.917019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.924509][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.973233][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.980440][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.030184][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.282029][ T5826] veth0_vlan: entered promiscuous mode [ 93.327937][ T5826] veth1_vlan: entered promiscuous mode [ 93.373717][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.492152][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.510085][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.528032][ T5826] veth0_macvtap: entered promiscuous mode [ 93.562714][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.569972][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.585985][ T5826] veth1_macvtap: entered promiscuous mode [ 93.600728][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.607981][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.639033][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.707900][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.770942][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.808244][ T5827] veth0_vlan: entered promiscuous mode [ 93.817334][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.868477][ T3031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882799][ T3031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.899861][ T5827] veth1_vlan: entered promiscuous mode [ 93.907953][ T3031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.925760][ T3031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107960][ T5834] Bluetooth: hci2: command tx timeout [ 94.108649][ T5840] Bluetooth: hci1: command tx timeout [ 94.113438][ T5834] Bluetooth: hci0: command tx timeout [ 94.141570][ T5824] veth0_vlan: entered promiscuous mode [ 94.186272][ T5834] Bluetooth: hci4: command tx timeout [ 94.186281][ T5840] Bluetooth: hci3: command tx timeout [ 94.199277][ T5827] veth0_macvtap: entered promiscuous mode [ 94.252652][ T5824] veth1_vlan: entered promiscuous mode [ 94.269838][ T5827] veth1_macvtap: entered promiscuous mode [ 94.311218][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.320652][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.362569][ T5821] veth0_vlan: entered promiscuous mode [ 94.377606][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.379961][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.393799][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.412089][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.447232][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.457687][ T5821] veth1_vlan: entered promiscuous mode [ 94.499825][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.518894][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.522927][ T5824] veth0_macvtap: entered promiscuous mode [ 94.553482][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.562703][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.600206][ T5824] veth1_macvtap: entered promiscuous mode [ 94.617529][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680855][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.723036][ T5828] veth0_vlan: entered promiscuous mode [ 94.863160][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.881103][ T5828] veth1_vlan: entered promiscuous mode [ 94.965219][ T5821] veth0_macvtap: entered promiscuous mode [ 94.979137][ T5828] veth0_macvtap: entered promiscuous mode [ 94.988133][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201636][ T5949] loop3: detected capacity change from 0 to 1024 [ 95.219304][ T5949] ======================================================= [ 95.219304][ T5949] WARNING: The mand mount option has been deprecated and [ 95.219304][ T5949] and is ignored by this kernel. Remove the mand [ 95.219304][ T5949] option from the mount to silence this warning. [ 95.219304][ T5949] ======================================================= [ 95.255219][ T5949] EXT4-fs: Ignoring removed nobh option [ 95.292159][ T5949] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.381008][ T5949] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 95.415726][ T5949] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4: couldn't read orphan inode 11 (err -117) [ 95.467832][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.854992][ T5951] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 96.184334][ T5834] Bluetooth: hci1: command tx timeout [ 96.190100][ T5834] Bluetooth: hci2: command tx timeout [ 96.195661][ T5834] Bluetooth: hci0: command tx timeout [ 96.217256][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.246926][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.265362][ T5840] Bluetooth: hci4: command tx timeout [ 96.270836][ T5840] Bluetooth: hci3: command tx timeout [ 96.297176][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.305843][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.496017][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.505467][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.519832][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.536245][ T5821] veth1_macvtap: entered promiscuous mode [ 96.558076][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.586601][ T5828] veth1_macvtap: entered promiscuous mode [ 96.628599][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981572][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.996051][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.010936][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036755][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.046431][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.073489][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.201962][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228699][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.289980][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.378848][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.469725][ T795] cfg80211: failed to load regulatory.db [ 97.800640][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.098174][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.118556][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.182927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.288348][ T5966] loop3: detected capacity change from 0 to 512 [ 98.360530][ T5966] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.374439][ T5966] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 99.109632][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.181002][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.281853][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.417652][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.445740][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.560603][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.602809][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.729925][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.776361][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.382997][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.406305][ T5971] loop2: detected capacity change from 0 to 40427 [ 100.484364][ T5971] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.524703][ T5971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.661561][ T5971] F2FS-fs (loop2): invalid crc value [ 101.012673][ T5992] loop4: detected capacity change from 0 to 512 [ 101.037362][ T5992] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.633764][ T5992] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 102.179266][ T5971] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 102.375063][ T5971] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 102.469156][ T5971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.619495][ T6005] loop1: detected capacity change from 0 to 512 [ 103.627130][ T6005] EXT4-fs: Ignoring removed bh option [ 103.981582][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.997220][ T6005] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.304333][ T6005] block device autoloading is deprecated and will be removed. [ 105.525040][ T6006] loop3: detected capacity change from 0 to 40427 [ 105.543092][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.586545][ T6006] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 105.674032][ T6006] F2FS-fs (loop3): invalid crc value [ 105.998395][ T6006] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 106.035459][ T6006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.165123][ T5947] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.332108][ T5947] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 106.347385][ T5947] usb 2-1: config 160 has no interface number 0 [ 106.395962][ T5947] usb 2-1: config 160 interface 200 has no altsetting 0 [ 106.643133][ T6030] loop2: detected capacity change from 0 to 512 [ 106.651272][ T6030] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.657918][ T6030] EXT4-fs: inline encryption not supported [ 106.665608][ T6030] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.406779][ T5947] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 107.416328][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.661399][ T6030] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.668368][ T6030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.783728][ T6030] EXT4-fs (loop2): 1 truncate cleaned up [ 107.805095][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.884794][ T6030] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 108.415718][ T5947] usb 2-1: Product: syz [ 108.420201][ T5947] usb 2-1: Manufacturer: syz [ 108.431516][ T5947] usb 2-1: SerialNumber: syz [ 109.424676][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.431888][ T5947] usb 2-1: MIDIStreaming interface descriptor not found [ 109.502822][ T5947] usb 2-1: USB disconnect, device number 2 [ 109.531172][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.703468][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.797665][ T6064] loop2: detected capacity change from 0 to 1024 [ 109.886258][ T6069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.904477][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.444429][ T63] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 110.469785][ T63] EXT4-fs (loop2): Remounting filesystem read-only [ 111.430975][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.865857][ T6089] loop4: detected capacity change from 0 to 512 [ 111.885768][ T6089] EXT4-fs: inline encryption not supported [ 111.891668][ T6089] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.920636][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.39: inode #13: comm syz.4.39: iget: illegal inode # [ 111.955042][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.39: couldn't read orphan inode 13 (err -117) [ 111.988743][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.024572][ T6089] EXT4-fs (loop4): shut down requested (1) [ 113.546072][ T6096] loop2: detected capacity change from 0 to 1024 [ 113.553528][ T6096] EXT4-fs: Ignoring removed nobh option [ 114.084982][ T6096] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.156312][ T6096] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.37: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 114.177342][ T6096] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.37: couldn't read orphan inode 11 (err -117) [ 114.203770][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.302171][ T6101] Zero length message leads to an empty skb [ 115.493129][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.716177][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.865852][ T6117] loop2: detected capacity change from 0 to 4096 [ 116.892441][ T6117] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.012361][ T6117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.044745][ T6117] EXT4-fs (loop2): Test dummy encryption mode enabled [ 117.096535][ T6117] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 117.571609][ T6128] loop2: detected capacity change from 0 to 128 [ 117.579037][ T6128] EXT4-fs: Ignoring removed nobh option [ 117.678758][ T6128] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.692937][ T6128] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.305087][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 118.334177][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 0 [ 118.352162][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.42'. [ 118.396768][ T6136] netlink: 244 bytes leftover after parsing attributes in process `syz.0.47'. [ 118.499180][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 118.629451][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 118.727624][ T5827] EXT4-fs error (device loop2): ext4_empty_dir:3080: inode #11: comm syz-executor: Directory block failed checksum [ 118.808360][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 118.834445][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 0 [ 118.890797][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 118.942014][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 118.995425][ T5827] EXT4-fs error (device loop2): ext4_empty_dir:3080: inode #11: comm syz-executor: Directory block failed checksum [ 119.044049][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.116475][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 0 [ 119.268110][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 119.341884][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.425344][ T5827] EXT4-fs error (device loop2): ext4_empty_dir:3080: inode #11: comm syz-executor: Directory block failed checksum [ 119.441039][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.460543][ T5827] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 0 [ 119.729117][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 120.047476][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 120.088226][ T5827] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 120.644117][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.980141][ T6154] loop1: detected capacity change from 0 to 1024 [ 120.998230][ T6154] EXT4-fs: Ignoring removed nobh option [ 121.093079][ T6154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.192319][ T6154] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.54: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 121.228842][ T6154] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.54: couldn't read orphan inode 11 (err -117) [ 121.261644][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.710558][ T6158] xt_hashlimit: size too large, truncated to 1048576 [ 121.766600][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 121.776472][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 121.786328][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 121.804868][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 122.508824][ T6164] xt_socket: unknown flags 0x40 [ 122.752071][ T5892] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 122.764914][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.773001][ T5892] usb 4-1: Product: syz [ 122.777628][ T5892] usb 4-1: Manufacturer: syz [ 122.782859][ T5892] usb 4-1: SerialNumber: syz [ 122.797846][ T5892] usb 4-1: config 0 descriptor?? [ 122.810850][ T5892] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 122.824650][ T6156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 122.917339][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.163181][ T5827] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.244688][ T5892] scsi host1: usb-storage 4-1:0.0 [ 123.269531][ T5892] usb 4-1: USB disconnect, device number 2 [ 123.323315][ T5995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.551517][ T5995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.741656][ T5995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.950613][ T6185] loop4: detected capacity change from 0 to 512 [ 123.974693][ T5995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.042955][ T6185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.076756][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 124.097519][ T6185] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.273233][ T6194] process 'syz.3.65' launched './file0' with NULL argv: empty string added [ 124.364633][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.376565][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.395654][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.403880][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.414860][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.634100][ T5995] bridge_slave_1: left allmulticast mode [ 124.653871][ T5995] bridge_slave_1: left promiscuous mode [ 124.684689][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.732452][ T5995] bridge_slave_0: left allmulticast mode [ 124.732494][ T5995] bridge_slave_0: left promiscuous mode [ 124.733441][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.211057][ T6188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 125.687910][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.835809][ T6210] binfmt_misc: register: failed to install interpreter file ./file0 [ 126.322800][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.360713][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.372183][ T5995] bond0 (unregistering): Released all slaves [ 126.603307][ T6227] loop1: detected capacity change from 0 to 512 [ 126.610773][ T6227] EXT4-fs: Ignoring removed oldalloc option [ 126.619050][ T5840] Bluetooth: hci3: command tx timeout [ 127.001412][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.015204][ T6227] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.664171][ T5840] Bluetooth: hci3: command tx timeout [ 128.755256][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.918699][ T5916] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.944989][ T5916] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.005787][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 129.015150][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.021900][ T5916] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 129.066373][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.120702][ T5916] usb 1-1: config 0 descriptor?? [ 129.908745][ T6264] loop4: detected capacity change from 0 to 1024 [ 129.928672][ T6264] EXT4-fs: Ignoring removed nobh option [ 130.233672][ T6264] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.431831][ T6264] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.79: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 130.464055][ T6264] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.79: couldn't read orphan inode 11 (err -117) [ 130.504177][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.827948][ T5840] Bluetooth: hci3: command tx timeout [ 130.833799][ T5916] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -71 [ 131.011100][ T6230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 131.074069][ T5916] usb 1-1: USB disconnect, device number 2 [ 131.669077][ T5995] hsr_slave_0: left promiscuous mode [ 131.719344][ T5995] hsr_slave_1: left promiscuous mode [ 131.744340][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.799011][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.842202][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.891396][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.928807][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.018025][ T5995] veth1_macvtap: left promiscuous mode [ 132.057073][ T5995] veth0_macvtap: left promiscuous mode [ 132.062880][ T5995] veth1_vlan: left promiscuous mode [ 132.115684][ T5995] veth0_vlan: left promiscuous mode [ 132.212912][ T6281] loop4: detected capacity change from 0 to 1024 [ 132.273651][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.314229][ T6281] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.906178][ T5840] Bluetooth: hci3: command tx timeout [ 133.673372][ T6296] loop1: detected capacity change from 0 to 512 [ 133.801698][ T6296] EXT4-fs (loop1): 1 orphan inode deleted [ 133.826094][ T3031] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.845627][ T3031] EXT4-fs error (device loop1): ext4_release_dquot:6982: comm kworker/u8:8: Failed to release dquot type 1 [ 133.846947][ T6296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.909669][ T30] audit: type=1326 audit(1762678086.559:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d898f6c9 code=0x7ffc0000 [ 133.933811][ T6296] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.950247][ T30] audit: type=1326 audit(1762678086.579:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9d898f6c9 code=0x7ffc0000 [ 133.976138][ T30] audit: type=1326 audit(1762678086.579:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d898f6c9 code=0x7ffc0000 [ 134.001104][ T30] audit: type=1326 audit(1762678086.579:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc9d898f6c9 code=0x7ffc0000 [ 134.320389][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 134.468096][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 135.415104][ T6284] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.528398][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.552216][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.486366][ T6338] binder: BINDER_SET_CONTEXT_MGR already set [ 137.513796][ T6338] binder: 6336:6338 ioctl 4018620d 200000000040 returned -16 [ 137.743309][ T6195] chnl_net:caif_netlink_parms(): no params data found [ 138.341487][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.362023][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.368752][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.389269][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.405165][ T6195] bridge_slave_0: entered allmulticast mode [ 138.418997][ T6195] bridge_slave_0: entered promiscuous mode [ 138.679643][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.697038][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.707663][ T6195] bridge_slave_1: entered allmulticast mode [ 138.726390][ T6195] bridge_slave_1: entered promiscuous mode [ 139.663407][ T6385] input: syz0 as /devices/virtual/input/input5 [ 139.712466][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.741872][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.914131][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.928022][ T6195] team0: Port device team_slave_0 added [ 139.957936][ T6195] team0: Port device team_slave_1 added [ 140.096392][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 140.117908][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.144779][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.147471][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.174701][ T5908] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.214508][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.227753][ T5908] usb 1-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 140.255819][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.284076][ T5908] usb 1-1: Product: syz [ 140.288399][ T5908] usb 1-1: Manufacturer: syz [ 140.293035][ T5908] usb 1-1: SerialNumber: syz [ 140.294211][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.317693][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.327796][ T5908] usb 1-1: config 0 descriptor?? [ 140.403726][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.605434][ T6195] hsr_slave_0: entered promiscuous mode [ 140.682235][ T6195] hsr_slave_1: entered promiscuous mode [ 140.707693][ T6195] debugfs: 'hsr0' already exists in 'hsr' [ 140.728341][ T6195] Cannot create hsr debugfs directory [ 141.030729][ T6408] loop3: detected capacity change from 0 to 8192 [ 141.364709][ T6195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.411140][ T6195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.470182][ T6195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.516261][ T6195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.642823][ T6423] loop3: detected capacity change from 0 to 256 [ 141.715862][ T5908] usb 1-1: USB disconnect, device number 3 [ 141.723743][ T6423] FAT-fs (loop3): bogus number of FAT sectors [ 141.751447][ T6423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 141.993534][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.121397][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.248684][ T6437] loop3: detected capacity change from 0 to 256 [ 142.274800][ T6437] FAT-fs (loop3): Directory bread(block 64) failed [ 142.281527][ T6437] FAT-fs (loop3): Directory bread(block 65) failed [ 142.288647][ T6437] FAT-fs (loop3): Directory bread(block 66) failed [ 142.297013][ T6437] FAT-fs (loop3): Directory bread(block 67) failed [ 142.301545][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.304814][ T6437] FAT-fs (loop3): Directory bread(block 68) failed [ 142.310851][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.318261][ T6437] FAT-fs (loop3): Directory bread(block 69) failed [ 142.331709][ T6437] FAT-fs (loop3): Directory bread(block 70) failed [ 142.338354][ T6437] FAT-fs (loop3): Directory bread(block 71) failed [ 142.345836][ T6437] FAT-fs (loop3): Directory bread(block 72) failed [ 142.352560][ T6437] FAT-fs (loop3): Directory bread(block 73) failed [ 144.358323][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.365603][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.712226][ T143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.113186][ T143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.369441][ T143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.697010][ T143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.758934][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.769373][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.777632][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.805016][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.812868][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.863799][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.912389][ T6462] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.119' sets config #1 [ 148.152811][ T143] bridge_slave_1: left allmulticast mode [ 148.169044][ T143] bridge_slave_1: left promiscuous mode [ 148.190143][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.210550][ T143] bridge_slave_0: left allmulticast mode [ 148.224394][ T143] bridge_slave_0: left promiscuous mode [ 148.453755][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.874877][ T5840] Bluetooth: hci4: command tx timeout [ 149.882518][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.897873][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.909951][ T143] bond0 (unregistering): Released all slaves [ 149.949086][ T6482] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.226188][ T6497] netlink: 'syz.0.131': attribute type 12 has an invalid length. [ 150.494009][ T143] hsr_slave_0: left promiscuous mode [ 150.500921][ T143] hsr_slave_1: left promiscuous mode [ 150.515851][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.523301][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.533239][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.540807][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.571199][ T143] veth1_macvtap: left promiscuous mode [ 150.577540][ T143] veth0_macvtap: left promiscuous mode [ 150.583363][ T143] veth1_vlan: left promiscuous mode [ 150.590083][ T143] veth0_vlan: left promiscuous mode [ 151.328040][ T143] team0 (unregistering): Port device team_slave_1 removed [ 151.363873][ T143] team0 (unregistering): Port device team_slave_0 removed [ 151.944186][ T5840] Bluetooth: hci4: command tx timeout [ 152.084368][ T6530] netlink: 644 bytes leftover after parsing attributes in process `syz.0.136'. [ 152.140723][ T6195] veth0_vlan: entered promiscuous mode [ 152.157646][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 152.543146][ T6195] veth1_vlan: entered promiscuous mode [ 153.596445][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.603891][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.619265][ T6457] bridge_slave_0: entered allmulticast mode [ 153.643076][ T6457] bridge_slave_0: entered promiscuous mode [ 153.668073][ T6554] loop4: detected capacity change from 0 to 4096 [ 153.682177][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.701448][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.713110][ T6554] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.739206][ T6457] bridge_slave_1: entered allmulticast mode [ 153.753823][ T6554] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 153.770608][ T6457] bridge_slave_1: entered promiscuous mode [ 153.802576][ T6554] System zones: 0-5 [ 153.846327][ T6554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.024534][ T5840] Bluetooth: hci4: command tx timeout [ 154.039384][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.046400][ T6554] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 154.283785][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.432241][ T6195] veth0_macvtap: entered promiscuous mode [ 154.453138][ T6195] veth1_macvtap: entered promiscuous mode [ 154.551288][ T6457] team0: Port device team_slave_0 added [ 154.600785][ T6457] team0: Port device team_slave_1 added [ 154.678374][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.925024][ C1] ------------[ cut here ]------------ [ 154.930827][ C1] WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150, CPU#1: syz-executor/6195 [ 154.942223][ C1] Modules linked in: [ 154.946363][ C1] CPU: 1 UID: 0 PID: 6195 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 154.955896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.966049][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 154.971925][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 154.991636][ C1] RSP: 0018:ffffc90000a08c50 EFLAGS: 00010246 [ 154.997796][ C1] RAX: ffffffff81bde0b7 RBX: ffff888027774868 RCX: ffff88802a460000 [ 155.005886][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 155.013970][ C1] RBP: 0000000000000002 R08: ffff888057190193 R09: 1ffff1100ae32032 [ 155.021992][ C1] R10: dffffc0000000000 R11: ffffed100ae32033 R12: dffffc0000000000 [ 155.030054][ C1] R13: ffffffff81a903d7 R14: ffff888057190000 R15: ffff888057190190 [ 155.038103][ C1] FS: 000055556a83f500(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 [ 155.047140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.053775][ C1] CR2: 0000555576bfc648 CR3: 0000000076f08000 CR4: 00000000003526f0 [ 155.061850][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.069922][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 155.077993][ C1] Call Trace: [ 155.081312][ C1] [ 155.084224][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 155.089820][ C1] rcu_core+0xcab/0x1770 [ 155.094175][ C1] ? __pfx_rcu_core+0x10/0x10 [ 155.099000][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 155.104281][ C1] ? sched_clock_cpu+0x74/0x430 [ 155.109275][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 155.114637][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 155.120528][ C1] ? handle_softirqs+0x717/0x870 [ 155.125568][ C1] handle_softirqs+0x286/0x870 [ 155.130402][ C1] ? do_softirq+0xec/0x180 [ 155.134935][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 155.140285][ C1] ? nsim_fib_event_nb+0xd71/0x1080 [ 155.145596][ C1] do_softirq+0xec/0x180 [ 155.149949][ C1] [ 155.152918][ C1] [ 155.155957][ C1] ? __pfx_do_softirq+0x10/0x10 [ 155.160867][ C1] ? __lock_acquire+0xab9/0xd20 [ 155.165816][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 155.171167][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 155.176571][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.182350][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 155.187655][ C1] ? nsim_fib_event_nb+0xd71/0x1080 [ 155.192912][ C1] nsim_fib_event_nb+0xd71/0x1080 [ 155.198055][ C1] notifier_call_chain+0x1b6/0x3e0 [ 155.203234][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 155.209148][ C1] atomic_notifier_call_chain+0xda/0x180 [ 155.214884][ C1] call_fib_notifiers+0x31/0x60 [ 155.219796][ C1] call_fib_entry_notifiers+0x14b/0x1f0 [ 155.225553][ C1] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 155.231685][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 155.236986][ C1] ? fib_find_node+0x2b0/0x2f0 [ 155.241807][ C1] fib_table_insert+0xcc1/0x1b80 [ 155.246876][ C1] ? l3mdev_fib_table+0x18/0x160 [ 155.251964][ C1] fib_magic+0x2c4/0x390 [ 155.256412][ C1] ? __pfx_fib_magic+0x10/0x10 [ 155.261404][ C1] ? queue_work_on+0x1ed/0x270 [ 155.266538][ C1] ? addr_event+0x35c/0x480 [ 155.271129][ C1] fib_add_ifaddr+0x144/0x5f0 [ 155.275965][ C1] fib_inetaddr_event+0x12e/0x190 [ 155.281068][ C1] notifier_call_chain+0x1b6/0x3e0 [ 155.286307][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 155.292182][ C1] __inet_insert_ifa+0xa13/0xbf0 [ 155.297245][ C1] ? __pfx___inet_insert_ifa+0x10/0x10 [ 155.302794][ C1] inet_rtm_newaddr+0xf3a/0x18b0 [ 155.307851][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 155.313305][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 155.318794][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 155.323799][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.329033][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.334569][ C1] ? netlink_sendmsg+0x805/0xb30 [ 155.339559][ C1] ? __sock_sendmsg+0x21c/0x270 [ 155.344494][ C1] ? __sys_sendto+0x3bd/0x520 [ 155.349224][ C1] ? __x64_sys_sendto+0xde/0x100 [ 155.354294][ C1] ? do_syscall_64+0xfa/0xfa0 [ 155.359033][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.365205][ C1] netlink_rcv_skb+0x208/0x470 [ 155.370020][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.375616][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.380969][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.386279][ C1] netlink_unicast+0x82f/0x9e0 [ 155.391196][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 155.396589][ C1] ? netlink_sendmsg+0x642/0xb30 [ 155.401595][ C1] ? skb_put+0x11b/0x210 [ 155.405994][ C1] netlink_sendmsg+0x805/0xb30 [ 155.410832][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.416229][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.421223][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.426622][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.432000][ C1] __sock_sendmsg+0x21c/0x270 [ 155.436921][ C1] __sys_sendto+0x3bd/0x520 [ 155.441478][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 155.442034][ T30] audit: type=1326 audit(1762678108.069:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c718f6c9 code=0x7ffc0000 [ 155.446633][ C1] __x64_sys_sendto+0xde/0x100 [ 155.446673][ C1] do_syscall_64+0xfa/0xfa0 [ 155.446704][ C1] ? irqentry_exit+0x10f/0x640 [ 155.446733][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.446756][ C1] ? clear_bhb_loop+0x60/0xb0 [ 155.446778][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.446797][ C1] RIP: 0033:0x7f88b319155c [ 155.446835][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 155.446851][ C1] RSP: 002b:00007ffdba054b40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 155.446874][ C1] RAX: ffffffffffffffda RBX: 00007f88b3f14620 RCX: 00007f88b319155c [ 155.446887][ C1] RDX: 0000000000000028 RSI: 00007f88b3f14670 RDI: 0000000000000003 [ 155.446898][ C1] RBP: 0000000000000000 R08: 00007ffdba054b94 R09: 000000000000000c [ 155.446913][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 155.446928][ C1] R13: 0000000000000000 R14: 00007f88b3f14670 R15: 0000000000000000 [ 155.446960][ C1] [ 155.446971][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.446984][ C1] CPU: 1 UID: 0 PID: 6195 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 155.447003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.447014][ C1] Call Trace: [ 155.447021][ C1] [ 155.447028][ C1] dump_stack_lvl+0x99/0x250 [ 155.447055][ C1] ? __asan_memcpy+0x40/0x70 [ 155.447083][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.447109][ C1] ? __pfx__printk+0x10/0x10 [ 155.447139][ C1] vpanic+0x237/0x6d0 [ 155.447154][ C1] ? __pfx_vpanic+0x10/0x10 [ 155.447167][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 155.447195][ C1] panic+0xb9/0xc0 [ 155.447209][ C1] ? __pfx_panic+0x10/0x10 [ 155.447240][ C1] __warn+0x334/0x4c0 [ 155.447255][ C1] ? delayed_free_pidns+0x118/0x150 [ 155.447277][ C1] ? delayed_free_pidns+0x118/0x150 [ 155.447295][ C1] report_bug+0x2be/0x4f0 [ 155.447317][ C1] ? delayed_free_pidns+0x118/0x150 [ 155.447335][ C1] ? delayed_free_pidns+0x118/0x150 [ 155.447351][ C1] ? delayed_free_pidns+0x11a/0x150 [ 155.447368][ C1] handle_bug+0x84/0x160 [ 155.447385][ C1] exc_invalid_op+0x1a/0x50 [ 155.447412][ C1] asm_exc_invalid_op+0x1a/0x20 [ 155.447428][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 155.447446][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 155.447461][ C1] RSP: 0018:ffffc90000a08c50 EFLAGS: 00010246 [ 155.447476][ C1] RAX: ffffffff81bde0b7 RBX: ffff888027774868 RCX: ffff88802a460000 [ 155.447490][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 155.447502][ C1] RBP: 0000000000000002 R08: ffff888057190193 R09: 1ffff1100ae32032 [ 155.447515][ C1] R10: dffffc0000000000 R11: ffffed100ae32033 R12: dffffc0000000000 [ 155.447527][ C1] R13: ffffffff81a903d7 R14: ffff888057190000 R15: ffff888057190190 [ 155.447542][ C1] ? rcu_core+0xc37/0x1770 [ 155.447568][ C1] ? delayed_free_pidns+0x117/0x150 [ 155.447593][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 155.447612][ C1] rcu_core+0xcab/0x1770 [ 155.447670][ C1] ? __pfx_rcu_core+0x10/0x10 [ 155.447697][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 155.447722][ C1] ? sched_clock_cpu+0x74/0x430 [ 155.447755][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 155.447785][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 155.447810][ C1] ? handle_softirqs+0x717/0x870 [ 155.447871][ C1] handle_softirqs+0x286/0x870 [ 155.447911][ C1] ? do_softirq+0xec/0x180 [ 155.447950][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 155.447991][ C1] ? nsim_fib_event_nb+0xd71/0x1080 [ 155.448029][ C1] do_softirq+0xec/0x180 [ 155.448062][ C1] [ 155.448072][ C1] [ 155.448081][ C1] ? __pfx_do_softirq+0x10/0x10 [ 155.448111][ C1] ? __lock_acquire+0xab9/0xd20 [ 155.448154][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 155.448188][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 155.448221][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.448262][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 155.448288][ C1] ? nsim_fib_event_nb+0xd71/0x1080 [ 155.448321][ C1] nsim_fib_event_nb+0xd71/0x1080 [ 155.448365][ C1] notifier_call_chain+0x1b6/0x3e0 [ 155.448408][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 155.448447][ C1] atomic_notifier_call_chain+0xda/0x180 [ 155.448488][ C1] call_fib_notifiers+0x31/0x60 [ 155.448524][ C1] call_fib_entry_notifiers+0x14b/0x1f0 [ 155.448555][ C1] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 155.448593][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 155.448630][ C1] ? fib_find_node+0x2b0/0x2f0 [ 155.448662][ C1] fib_table_insert+0xcc1/0x1b80 [ 155.448709][ C1] ? l3mdev_fib_table+0x18/0x160 [ 155.448749][ C1] fib_magic+0x2c4/0x390 [ 155.448787][ C1] ? __pfx_fib_magic+0x10/0x10 [ 155.448815][ C1] ? queue_work_on+0x1ed/0x270 [ 155.448878][ C1] ? addr_event+0x35c/0x480 [ 155.448922][ C1] fib_add_ifaddr+0x144/0x5f0 [ 155.448966][ C1] fib_inetaddr_event+0x12e/0x190 [ 155.449004][ C1] notifier_call_chain+0x1b6/0x3e0 [ 155.449050][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 155.449090][ C1] __inet_insert_ifa+0xa13/0xbf0 [ 155.449139][ C1] ? __pfx___inet_insert_ifa+0x10/0x10 [ 155.449186][ C1] inet_rtm_newaddr+0xf3a/0x18b0 [ 155.449229][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 155.449283][ C1] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 155.449315][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 155.449352][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.449382][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.449411][ C1] ? netlink_sendmsg+0x805/0xb30 [ 155.449443][ C1] ? __sock_sendmsg+0x21c/0x270 [ 155.449467][ C1] ? __sys_sendto+0x3bd/0x520 [ 155.449495][ C1] ? __x64_sys_sendto+0xde/0x100 [ 155.449523][ C1] ? do_syscall_64+0xfa/0xfa0 [ 155.449555][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.449598][ C1] netlink_rcv_skb+0x208/0x470 [ 155.449632][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.449664][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.449711][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.449754][ C1] netlink_unicast+0x82f/0x9e0 [ 155.449794][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 155.449835][ C1] ? netlink_sendmsg+0x642/0xb30 [ 155.449866][ C1] ? skb_put+0x11b/0x210 [ 155.449902][ C1] netlink_sendmsg+0x805/0xb30 [ 155.449948][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.449986][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.450029][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.450056][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.450090][ C1] __sock_sendmsg+0x21c/0x270 [ 155.450119][ C1] __sys_sendto+0x3bd/0x520 [ 155.450154][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 155.450234][ C1] __x64_sys_sendto+0xde/0x100 [ 155.450270][ C1] do_syscall_64+0xfa/0xfa0 [ 155.450306][ C1] ? irqentry_exit+0x10f/0x640 [ 155.450337][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.450362][ C1] ? clear_bhb_loop+0x60/0xb0 [ 155.450393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.450419][ C1] RIP: 0033:0x7f88b319155c [ 155.450440][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 155.450460][ C1] RSP: 002b:00007ffdba054b40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 155.450487][ C1] RAX: ffffffffffffffda RBX: 00007f88b3f14620 RCX: 00007f88b319155c [ 155.450506][ C1] RDX: 0000000000000028 RSI: 00007f88b3f14670 RDI: 0000000000000003 [ 155.450523][ C1] RBP: 0000000000000000 R08: 00007ffdba054b94 R09: 000000000000000c [ 155.450539][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 155.450555][ C1] R13: 0000000000000000 R14: 00007f88b3f14670 R15: 0000000000000000 [ 155.450594][ C1] [ 155.470065][ C1] Kernel Offset: disabled