last executing test programs: 24.967058263s ago: executing program 3 (id=306): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x38, 0xfd, 0xffff, 0xffffffff, 0x0, 0x1000, 0x10001}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x1, 0x8, 0x4, 0x1, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x4, 0x5]}}]}]}, 0x80}}, 0x4000) 20.060336381s ago: executing program 3 (id=310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 19.833562864s ago: executing program 3 (id=312): r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) link(0x0, &(0x7f0000000300)='./file0\x00') bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x2000}, {r1, 0x4000}, {r0, 0x523}, {r1, 0x100}, {0xffffffffffffffff, 0x80}, {r1, 0xa102}], 0x6, &(0x7f0000000200), &(0x7f0000000240)={[0xf7]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 16.144022293s ago: executing program 3 (id=319): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) 13.148050671s ago: executing program 3 (id=325): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 10.553687842s ago: executing program 2 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.328058772s ago: executing program 1 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffcff8, 0x401, 0x40000001, 0x8, 0x7, "0441920892e8d20040f19d0615d76d7fcb3278", 0x4, 0x20200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) 9.260225542s ago: executing program 2 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe80000000000000000000000000003bfe8000000000000000000000000000aa00000000000000080a00601058000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000070000000000000003000000000000000000000000000000fdffffffffffffff0500000000000000ffffffffffffffffffffffff0000000000000000000000ddffffff0000000000030001000000000000000000000000000101"], 0xb8}, 0x1, 0x0, 0x0, 0x1158e3b975e78980}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x2, 0x8, 0x5, 0x7f, 0xb2c, 0x4, 0xffff, 0x710}) r6 = socket(0x80000000000000a, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c616c6c6f635f6d6f64653d72657573652c6e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c0059f4bd815bd5269b4f523c9fa8d344a3944fb455fe1b97b3eda5f977db05bfa9d02cc67646849b46fd481fbbd5b0fd213353e4ae7755b4985d63c4a5e13292c6d514d644c884482f93129a82c26ad8f1f7191de0ca75795a5f697573c1828a8ecf4a82e89215d1979fa2738c76683b231a638e5a0d6bd7235d108d564d307b3067ab6ac37a59e50763a2be3d70a1260e"], 0x1, 0x5505, &(0x7f0000002480)="$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") 9.048743586s ago: executing program 1 (id=334): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x7, 0xe339, 0x1, 0xff}, 'syz0\x00', 0x15}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}}], 0x1, 0x84) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$UI_DEV_CREATE(r0, 0x5501) 8.915794068s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8) r0 = getpid() syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/41, 0x29) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.981791085s ago: executing program 2 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 5.233384797s ago: executing program 0 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) 4.41000022s ago: executing program 3 (id=339): socket(0x8000000010, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000340)=0x61, 0x4) socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 4.40744807s ago: executing program 1 (id=347): r0 = socket(0x1e, 0x80004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$unix(0x1, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ef4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) unshare(0x22020400) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='projid_map\x00') copy_file_range(r6, 0x0, r6, 0x0, 0x5, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) socket(0x1, 0x80802, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) 4.40703392s ago: executing program 2 (id=340): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.992647396s ago: executing program 2 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 2.974304233s ago: executing program 0 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ipvlan0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 2.971628483s ago: executing program 1 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffcff8, 0x401, 0x40000001, 0x8, 0x7, "0441920892e8d20040f19d0615d76d7fcb3278", 0x4, 0x20200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) 2.765128186s ago: executing program 1 (id=344): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) socket$key(0xf, 0x3, 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc3}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r8, &(0x7f0000000500)=[{0x0}], 0x1, 0xfffffffd, 0x8) write(0xffffffffffffffff, &(0x7f00000007c0)='\x00', 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf2101000000000000000b000000"], 0x30}, 0x1, 0x0, 0x0, 0x990}, 0x14) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r10, 0x4, 0x70bf2a, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x2400c084) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc, 0x0, r8}, 0x0, 0x0) 1.814885951s ago: executing program 2 (id=345): r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000109022400010000400009040000000921050000"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff8e, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b3320000000000000001500000010001d800c00008009000d80"], 0x24}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040029bd7000fbdbdf255e000000000000000006000008002201a7010000080027000200000008009f0005000000050018010a000000080026007b"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}}}, 0x24}}, 0x0) syz_open_procfs(r0, &(0x7f0000000600)='net/packet\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3}, 0x4) 1.813769221s ago: executing program 0 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d500987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f353b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 291.944135ms ago: executing program 0 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f0000000180)=ANY=[@ANYBLOB=',mode=00000000000000000000177,gid=']) 291.568385ms ago: executing program 1 (id=348): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 0s ago: executing program 0 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 80.626744][ T5777] cgroup: Unknown subsys name 'net' [ 80.767472][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.477157][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.232185][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.242513][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.250496][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.259389][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.268778][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.269205][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.276811][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.284335][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.295679][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.304537][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.313352][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.313455][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.329358][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.336973][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.345066][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.353576][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.353720][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.368570][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.373959][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.376308][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.383090][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.390666][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.406326][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.415308][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.977188][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.102849][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.154592][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.166021][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.173627][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.181614][ T5788] bridge_slave_0: entered allmulticast mode [ 85.190070][ T5788] bridge_slave_0: entered promiscuous mode [ 85.205825][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.213107][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.220576][ T5788] bridge_slave_1: entered allmulticast mode [ 85.227675][ T5788] bridge_slave_1: entered promiscuous mode [ 85.254086][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.338651][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.351677][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.446234][ T5788] team0: Port device team_slave_0 added [ 85.455894][ T5788] team0: Port device team_slave_1 added [ 85.532912][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.540720][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.548592][ T5787] bridge_slave_0: entered allmulticast mode [ 85.555659][ T5787] bridge_slave_0: entered promiscuous mode [ 85.590054][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.597237][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.604706][ T5790] bridge_slave_0: entered allmulticast mode [ 85.612349][ T5790] bridge_slave_0: entered promiscuous mode [ 85.620485][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.628241][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.635530][ T5787] bridge_slave_1: entered allmulticast mode [ 85.642577][ T5787] bridge_slave_1: entered promiscuous mode [ 85.663935][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.671278][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.678527][ T5792] bridge_slave_0: entered allmulticast mode [ 85.685525][ T5792] bridge_slave_0: entered promiscuous mode [ 85.693626][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.700772][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.728058][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.740403][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.747876][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.755084][ T5790] bridge_slave_1: entered allmulticast mode [ 85.762322][ T5790] bridge_slave_1: entered promiscuous mode [ 85.795344][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.802874][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.810881][ T5792] bridge_slave_1: entered allmulticast mode [ 85.818264][ T5792] bridge_slave_1: entered promiscuous mode [ 85.825570][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.832945][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.859044][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.893530][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.905579][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.948476][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.960189][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.984609][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.010521][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.091555][ T5790] team0: Port device team_slave_0 added [ 86.100797][ T5790] team0: Port device team_slave_1 added [ 86.126196][ T5788] hsr_slave_0: entered promiscuous mode [ 86.133511][ T5788] hsr_slave_1: entered promiscuous mode [ 86.147430][ T5792] team0: Port device team_slave_0 added [ 86.168943][ T5787] team0: Port device team_slave_0 added [ 86.178325][ T5787] team0: Port device team_slave_1 added [ 86.185746][ T5792] team0: Port device team_slave_1 added [ 86.242877][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.251274][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.277376][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.291283][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.298335][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.324408][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.387086][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.394532][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.421056][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.434852][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.441979][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.467996][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.483498][ T5800] Bluetooth: hci0: command tx timeout [ 86.483517][ T5803] Bluetooth: hci3: command tx timeout [ 86.483847][ T5803] Bluetooth: hci2: command tx timeout [ 86.491741][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.508284][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.527907][ T5803] Bluetooth: hci1: command tx timeout [ 86.535202][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.553740][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.561045][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.587550][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.674762][ T5790] hsr_slave_0: entered promiscuous mode [ 86.681955][ T5790] hsr_slave_1: entered promiscuous mode [ 86.689847][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.698243][ T5790] Cannot create hsr debugfs directory [ 86.758381][ T5792] hsr_slave_0: entered promiscuous mode [ 86.764971][ T5792] hsr_slave_1: entered promiscuous mode [ 86.771937][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.779838][ T5792] Cannot create hsr debugfs directory [ 86.789748][ T5787] hsr_slave_0: entered promiscuous mode [ 86.796333][ T5787] hsr_slave_1: entered promiscuous mode [ 86.803024][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.810687][ T5787] Cannot create hsr debugfs directory [ 87.282471][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.296217][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.334918][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.354335][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.429083][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.454855][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.482510][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.494373][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.605314][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.617232][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.660479][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.701724][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.785971][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.811282][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.823696][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.834959][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.906906][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.980383][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.026233][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.033645][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.084957][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.094722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.102046][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.157468][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.187193][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.230302][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.262768][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.270081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.282432][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.289654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.313853][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.353853][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.361118][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.373528][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.380772][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.478657][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.525708][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.532998][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.542293][ T5803] Bluetooth: hci0: command tx timeout [ 88.542326][ T5799] Bluetooth: hci2: command tx timeout [ 88.554406][ T5800] Bluetooth: hci3: command tx timeout [ 88.584400][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.591655][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.612941][ T5800] Bluetooth: hci1: command tx timeout [ 88.855689][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.044889][ T5788] veth0_vlan: entered promiscuous mode [ 89.057028][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.083937][ T5788] veth1_vlan: entered promiscuous mode [ 89.096651][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.225278][ T5790] veth0_vlan: entered promiscuous mode [ 89.243280][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.272754][ T5790] veth1_vlan: entered promiscuous mode [ 89.297299][ T5788] veth0_macvtap: entered promiscuous mode [ 89.314261][ T5792] veth0_vlan: entered promiscuous mode [ 89.326124][ T5788] veth1_macvtap: entered promiscuous mode [ 89.374120][ T5790] veth0_macvtap: entered promiscuous mode [ 89.394361][ T5792] veth1_vlan: entered promiscuous mode [ 89.410350][ T5790] veth1_macvtap: entered promiscuous mode [ 89.456399][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.465306][ T5787] veth0_vlan: entered promiscuous mode [ 89.476576][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.491905][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.504791][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.521259][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.541735][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.552999][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.565161][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.580863][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.591387][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.600349][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610321][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.632077][ T5787] veth1_vlan: entered promiscuous mode [ 89.650284][ T5792] veth0_macvtap: entered promiscuous mode [ 89.664854][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674932][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.685326][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.695458][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.743076][ T5792] veth1_macvtap: entered promiscuous mode [ 89.775782][ T5787] veth0_macvtap: entered promiscuous mode [ 89.787893][ T5787] veth1_macvtap: entered promiscuous mode [ 89.852310][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.866637][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.877073][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.888382][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.900938][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.917290][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.931231][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.944537][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.955170][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.965224][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.976576][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.989123][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.006564][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.017729][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.028005][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.038585][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.052898][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.080622][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.091446][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.102499][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.113134][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.123391][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.135120][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.147083][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.175996][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186700][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.196974][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.205998][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223443][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.232770][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.241726][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.250871][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.278904][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.286955][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.378088][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.387139][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.469220][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.489728][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.503844][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.512178][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.598223][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.608292][ T5800] Bluetooth: hci0: command tx timeout [ 90.619207][ T5800] Bluetooth: hci3: command tx timeout [ 90.624681][ T5800] Bluetooth: hci2: command tx timeout [ 90.640090][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.698558][ T5800] Bluetooth: hci1: command tx timeout [ 90.804216][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.828096][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.840662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.856917][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.114262][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.359242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.122045][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.180617][ T785] cfg80211: failed to load regulatory.db [ 92.757533][ C0] sched: RT throttling activated [ 92.781331][ T5800] Bluetooth: hci3: command tx timeout [ 92.781548][ T5799] Bluetooth: hci2: command tx timeout [ 92.786829][ T5803] Bluetooth: hci0: command tx timeout [ 92.794935][ T5799] Bluetooth: hci1: command tx timeout [ 94.343206][ T5897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.354763][ T5897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.484212][ T5906] syz.2.7[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.525692][ T5904] loop3: detected capacity change from 0 to 256 [ 94.557477][ T5906] loop2: detected capacity change from 0 to 512 [ 94.596534][ T5906] EXT4-fs: Ignoring removed bh option [ 94.673991][ T5906] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 95.954877][ T5906] EXT4-fs (loop2): 1 truncate cleaned up [ 96.001497][ T5906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.500073][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.845764][ T5923] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 100.318795][ T5929] loop3: detected capacity change from 0 to 256 [ 100.485285][ T5931] loop2: detected capacity change from 0 to 512 [ 100.508611][ T5931] EXT4-fs: Ignoring removed bh option [ 100.554895][ T5931] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.659969][ T5931] EXT4-fs (loop2): 1 truncate cleaned up [ 100.686491][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.335992][ T5940] Zero length message leads to an empty skb [ 102.288693][ T5938] loop0: detected capacity change from 0 to 8192 [ 102.770992][ T5944] sch_fq: defrate 0 ignored. [ 103.027149][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.512427][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.735496][ T5948] loop3: detected capacity change from 0 to 2048 [ 103.752811][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.774296][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.795593][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.807147][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.851348][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.865567][ T5948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.867304][ T23] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.898042][ T23] usb 1-1: Manufacturer: syz [ 103.905458][ T5948] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.920434][ T23] usb 1-1: config 0 descriptor?? [ 104.106840][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.900161][ T5963] overlayfs: failed to resolve './bus': -2 [ 105.630342][ T23] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 105.638033][ T28] audit: type=1800 audit(1753035240.703:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 105.713498][ T23] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 105.818414][ T23] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 105.914342][ T23] usb 1-1: USB disconnect, device number 2 [ 106.801036][ T5971] block device autoloading is deprecated and will be removed. [ 107.625039][ T5969] fido_id[5969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 107.770782][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.427254][ T5981] vlan2: entered promiscuous mode [ 108.432501][ T5981] syz_tun: entered promiscuous mode [ 109.076556][ T5981] syz.1.21 (5981) used greatest stack depth: 20680 bytes left [ 111.073873][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.588493][ T5996] netlink: 164 bytes leftover after parsing attributes in process `syz.1.25'. [ 111.608849][ T5996] netlink: 164 bytes leftover after parsing attributes in process `syz.1.25'. [ 111.618034][ T5996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'. [ 112.552912][ T5996] syz.1.25 (5996) used greatest stack depth: 19272 bytes left [ 115.951779][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 119.814069][ T6029] bridge_slave_1: left allmulticast mode [ 120.713237][ T6035] loop2: detected capacity change from 0 to 1024 [ 121.227603][ T6029] bridge_slave_1: left promiscuous mode [ 121.275998][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.340508][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.438013][ T6029] bridge_slave_0: left allmulticast mode [ 121.468845][ T6029] bridge_slave_0: left promiscuous mode [ 121.481145][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.013993][ T6051] loop1: detected capacity change from 0 to 256 [ 123.025065][ T6051] FAT-fs (loop1): Unrecognized mount option "shor†name=mixed" or missing value [ 125.712162][ T6069] loop3: detected capacity change from 0 to 16 [ 125.731277][ T6069] ======================================================= [ 125.731277][ T6069] WARNING: The mand mount option has been deprecated and [ 125.731277][ T6069] and is ignored by this kernel. Remove the mand [ 125.731277][ T6069] option from the mount to silence this warning. [ 125.731277][ T6069] ======================================================= [ 125.831456][ T6069] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.953418][ T6069] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 125.963043][ T6069] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 125.973612][ T6069] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 126.054776][ T6069] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 126.065334][ T6069] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 126.075932][ T6069] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 126.086690][ T28] audit: type=1800 audit(1753035261.183:3): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.42" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 127.819490][ T6069] syz.3.42 (6069) used greatest stack depth: 19048 bytes left [ 128.130250][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 128.427626][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.639726][ T5881] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.488034][ T5881] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.533332][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.561980][ T5881] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 129.609915][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.664224][ T5881] usb 2-1: config 0 descriptor?? [ 130.412022][ T5881] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 130.419218][ T5881] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 130.426316][ T5881] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 130.434669][ T5881] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 130.442192][ T5881] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 130.455889][ T5881] cypress 0003:04B4:07B1.0002: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 130.636608][ T5881] usb 2-1: USB disconnect, device number 2 [ 130.890211][ T6089] fido_id[6089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.268661][ T6094] loop2: detected capacity change from 0 to 512 [ 131.409344][ T6094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.615753][ T6094] EXT4-fs (loop2): 1 orphan inode deleted [ 131.692986][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.716716][ T6094] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.993366][ T28] audit: type=1800 audit(1753035267.043:4): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 133.125620][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132525][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.713240][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.995307][ T6102] loop2: detected capacity change from 0 to 256 [ 134.008734][ T6102] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 134.057195][ T5990] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.787445][ T6113] loop3: detected capacity change from 0 to 1024 [ 134.867892][ T6113] EXT4-fs: Ignoring removed nobh option [ 134.873540][ T6113] EXT4-fs: Ignoring removed bh option [ 134.921845][ T6113] ext4: Unknown parameter 'rootcontext' [ 135.540491][ T6119] netlink: 164 bytes leftover after parsing attributes in process `syz.0.52'. [ 135.550307][ T6119] netlink: 164 bytes leftover after parsing attributes in process `syz.0.52'. [ 135.559962][ T6119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.52'. [ 136.733062][ T6121] loop1: detected capacity change from 0 to 2048 [ 136.873446][ T6126] loop2: detected capacity change from 0 to 256 [ 137.034699][ T6121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.098176][ T6121] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.385630][ T6140] loop3: detected capacity change from 0 to 512 [ 138.653245][ T6140] EXT4-fs (loop3): 1 orphan inode deleted [ 138.666632][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.685880][ T6140] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.911512][ T28] audit: type=1800 audit(1753035273.913:5): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="bus" dev="loop3" ino=16 res=0 errno=0 [ 141.775508][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.782086][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.606095][ T6182] netlink: 164 bytes leftover after parsing attributes in process `syz.2.67'. [ 145.616002][ T6182] netlink: 164 bytes leftover after parsing attributes in process `syz.2.67'. [ 145.626255][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.67'. [ 147.352196][ T6190] loop1: detected capacity change from 0 to 256 [ 149.112842][ T6207] loop2: detected capacity change from 0 to 256 [ 149.589607][ T6199] loop1: detected capacity change from 0 to 1024 [ 149.597237][ T6199] EXT4-fs: Ignoring removed nobh option [ 149.603197][ T6199] EXT4-fs: Ignoring removed bh option [ 149.608706][ T6199] ext4: Unknown parameter 'rootcontext' [ 154.654082][ T6243] loop1: detected capacity change from 0 to 512 [ 154.713400][ T6243] EXT4-fs: Ignoring removed bh option [ 154.738893][ T6243] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.785786][ T6243] EXT4-fs (loop1): 1 truncate cleaned up [ 154.909419][ T6243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.844019][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.056075][ T6266] loop1: detected capacity change from 0 to 512 [ 157.103984][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.171509][ T6266] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.030394][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.377650][ T6289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.388911][ T6289] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 161.476439][ T2931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.590858][ T2931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.790155][ T2931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.942508][ T2931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.719296][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.070296][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.082507][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.189960][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.243923][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.469619][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.689112][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 165.479770][ T6324] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.658487][ T6324] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.883607][ T6348] syz.1.112 uses obsolete (PF_INET,SOCK_PACKET) [ 166.035824][ T6348] pim6reg1: entered promiscuous mode [ 166.057976][ T6348] pim6reg1: entered allmulticast mode [ 166.527739][ T5803] Bluetooth: hci0: command tx timeout [ 166.773214][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 167.336539][ T2931] hsr_slave_0: left promiscuous mode [ 167.361464][ T2931] hsr_slave_1: left promiscuous mode [ 167.380412][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.402351][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.439539][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.472025][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.513451][ T2931] bridge_slave_1: left allmulticast mode [ 167.540101][ T2931] bridge_slave_1: left promiscuous mode [ 167.547338][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.594964][ T2931] bridge_slave_0: left allmulticast mode [ 167.605351][ T2931] bridge_slave_0: left promiscuous mode [ 167.623492][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.759257][ T2931] veth1_macvtap: left promiscuous mode [ 167.770001][ T2931] veth0_macvtap: left promiscuous mode [ 167.789529][ T2931] veth1_vlan: left promiscuous mode [ 167.805540][ T2931] veth0_vlan: left promiscuous mode [ 168.541060][ T6390] loop3: detected capacity change from 0 to 1024 [ 168.548877][ T6390] EXT4-fs: Ignoring removed nobh option [ 168.554590][ T6390] EXT4-fs: Ignoring removed bh option [ 168.560210][ T6390] ext4: Unknown parameter 'rootcontext' [ 168.609558][ T5990] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.617577][ T5803] Bluetooth: hci0: command tx timeout [ 169.814799][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 169.874712][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 169.941610][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.059163][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.688539][ T5803] Bluetooth: hci0: command tx timeout [ 171.387189][ T2931] bond0 (unregistering): Released all slaves [ 171.462555][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.469805][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.477005][ T6330] bridge_slave_0: entered allmulticast mode [ 171.484811][ T6330] bridge_slave_0: entered promiscuous mode [ 171.579810][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.589155][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.865954][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.915831][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.963218][ T6330] bridge_slave_1: entered allmulticast mode [ 172.001660][ T6330] bridge_slave_1: entered promiscuous mode [ 172.121944][ T6418] loop1: detected capacity change from 0 to 256 [ 172.155830][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.216193][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.404367][ T6330] team0: Port device team_slave_0 added [ 172.443496][ T6330] team0: Port device team_slave_1 added [ 172.770358][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.772974][ T5803] Bluetooth: hci0: command tx timeout [ 172.807284][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.142692][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.266984][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.327699][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.420193][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.683671][ T6330] hsr_slave_0: entered promiscuous mode [ 173.748021][ T6330] hsr_slave_1: entered promiscuous mode [ 173.771278][ T6436] loop3: detected capacity change from 0 to 1024 [ 173.779099][ T6436] EXT4-fs: Ignoring removed nobh option [ 173.784716][ T6436] EXT4-fs: Ignoring removed bh option [ 173.790297][ T6436] ext4: Unknown parameter 'rootcontext' [ 173.812733][ T6330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.951550][ T6330] Cannot create hsr debugfs directory [ 174.192055][ T5800] Bluetooth: hci4: sending frame failed (-49) [ 174.199714][ T5803] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 174.767897][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 177.956341][ T6528] loop1: detected capacity change from 0 to 256 [ 180.791442][ T6330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.822591][ T6330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.860374][ T6330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.895122][ T6330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.342938][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.438835][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.505161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.512420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.564964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.572805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.700424][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.904772][ T6330] veth0_vlan: entered promiscuous mode [ 182.937830][ T6330] veth1_vlan: entered promiscuous mode [ 183.032895][ T6330] veth0_macvtap: entered promiscuous mode [ 183.066249][ T6330] veth1_macvtap: entered promiscuous mode [ 183.172616][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.218666][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.248310][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.287700][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.318017][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.359441][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.563577][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.605674][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.620883][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.631455][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.655554][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.677754][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.680051][ T6638] loop3: detected capacity change from 0 to 1024 [ 183.697376][ T6638] EXT4-fs: Ignoring removed nobh option [ 183.703144][ T6638] EXT4-fs: Ignoring removed bh option [ 183.708651][ T6638] ext4: Unknown parameter 'rootcontext' [ 183.717926][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.776553][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.820062][ T5990] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.044356][ T6330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.067717][ T6330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.083035][ T6330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.107625][ T6330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.536451][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.560558][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.590615][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.615191][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.551900][ T6703] loop1: detected capacity change from 0 to 1024 [ 188.559618][ T6703] EXT4-fs: Ignoring removed nobh option [ 188.565225][ T6703] EXT4-fs: Ignoring removed bh option [ 188.570778][ T6703] ext4: Unknown parameter 'rootcontext' [ 189.921167][ T5789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.223966][ T6716] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.371164][ T6763] loop3: detected capacity change from 0 to 512 [ 193.493944][ T6763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.579160][ T6763] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.720960][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.730466][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.427823][ T6790] loop1: detected capacity change from 0 to 8192 [ 196.409448][ T6802] netlink: 88 bytes leftover after parsing attributes in process `syz.1.181'. [ 197.877425][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.682369][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.914316][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.976222][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.058651][ T6847] loop1: detected capacity change from 0 to 256 [ 200.072772][ T6847] exfat: Unknown parameter 'iochar' [ 201.908848][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.923634][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.898795][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.919204][ T8] usb 4-1: config 0 descriptor?? [ 202.926487][ T8] usb 4-1: can't set config #0, error -71 [ 202.949518][ T8] usb 4-1: USB disconnect, device number 2 [ 203.129973][ T6856] loop3: detected capacity change from 0 to 256 [ 204.729039][ T6875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.886217][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 206.896435][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 206.896449][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 207.328911][ T28] audit: type=1326 audit(1753037920.437:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.3.198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2681b8e9a9 code=0x0 [ 207.653487][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 208.049714][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.063055][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.084740][ T5882] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.094606][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.102659][ T5882] usb 4-1: SerialNumber: syz [ 208.228446][ T6892] overlayfs: failed to resolve './file0': -2 [ 208.779312][ T5882] usb 4-1: 0:2 : does not exist [ 209.202883][ T5882] usb 4-1: USB disconnect, device number 3 [ 210.043512][ T6899] loop1: detected capacity change from 0 to 256 [ 212.898697][ T6924] netlink: 'syz.0.213': attribute type 9 has an invalid length. [ 213.453990][ T6936] loop1: detected capacity change from 0 to 256 [ 218.821204][ T6981] 8021q: VLANs not supported on vcan0 [ 218.954902][ T6985] loop3: detected capacity change from 0 to 16 [ 219.152824][ T6985] erofs: (device loop3): mounted with root inode @ nid 36. [ 219.192495][ T6985] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 219.202889][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.213289][ T6985] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 219.235704][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.246368][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.256840][ T6985] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 219.304518][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.315624][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.326087][ T6985] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 219.335109][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.345536][ T6985] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 219.355963][ T6985] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 219.384425][ T6985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.232'. [ 219.471217][ T28] audit: type=1800 audit(1753038161.377:7): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.232" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 220.494294][ T6990] 8021q: VLANs not supported on vcan0 [ 223.016899][ T7005] loop3: detected capacity change from 0 to 128 [ 223.049010][ T7005] EXT4-fs (loop3): Test dummy encryption mode enabled [ 223.126241][ T7005] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.194250][ T7005] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.088543][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.220119][ T7025] loop3: detected capacity change from 0 to 512 [ 225.285100][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.306445][ T7025] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.072510][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.248'. [ 226.932329][ T7041] loop2: detected capacity change from 0 to 1024 [ 227.051652][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.080660][ T7043] loop1: detected capacity change from 0 to 256 [ 227.172611][ T7043] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 227.374262][ T7043] syz.1.250: attempt to access beyond end of device [ 227.374262][ T7043] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 227.459842][ T7043] syz.1.250: attempt to access beyond end of device [ 227.459842][ T7043] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 227.519888][ T6330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.556679][ T7043] syz.1.250: attempt to access beyond end of device [ 227.556679][ T7043] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 227.605862][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.620790][ T7046] syz.1.250: attempt to access beyond end of device [ 227.620790][ T7046] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 227.635608][ T28] audit: type=1800 audit(1753038398.723:8): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.250" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 227.676044][ T28] audit: type=1800 audit(1753038398.773:9): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.250" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 227.890634][ T7048] loop1: detected capacity change from 0 to 128 [ 227.899484][ T7048] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.043979][ T7048] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.167991][ T7048] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.544061][ T7048] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 229.720469][ T7069] loop2: detected capacity change from 0 to 512 [ 229.835968][ T7061] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 229.938790][ T7069] EXT4-fs (loop2): 1 orphan inode deleted [ 229.953804][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.975964][ T7069] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.167508][ T7069] bridge0: port 3(syz_tun) entered blocking state [ 230.175717][ T7069] bridge0: port 3(syz_tun) entered disabled state [ 230.185526][ T7069] syz_tun: entered allmulticast mode [ 230.203152][ T7069] syz_tun: entered promiscuous mode [ 230.213379][ T7069] bridge0: port 3(syz_tun) entered blocking state [ 230.220347][ T7069] bridge0: port 3(syz_tun) entered forwarding state [ 231.114394][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 231.402375][ T28] audit: type=1800 audit(1753038631.459:10): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.255" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 231.442498][ T7065] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 231.529249][ T7065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 231.582114][ T7065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 231.887137][ T6492] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 231.900094][ T6492] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:15: Failed to release dquot type 1 [ 232.011454][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.192635][ T6330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.563113][ T7090] 8021q: VLANs not supported on ip6gre0 [ 233.397928][ T7095] loop3: detected capacity change from 0 to 512 [ 233.437457][ T7095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.448188][ T7086] loop1: detected capacity change from 0 to 1024 [ 233.457675][ T7086] EXT4-fs: Ignoring removed nobh option [ 233.463425][ T7086] EXT4-fs: Ignoring removed bh option [ 233.468895][ T7086] ext4: Unknown parameter 'rootcontext' [ 233.476187][ T7095] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.499125][ T5789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.979905][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.273118][ T7081] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 234.273194][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 234.934308][ T7081] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.947510][ T7081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.953835][ T7081] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.960837][ T7081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.967070][ T7081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.976924][ T7081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.983192][ T7081] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.992453][ T7081] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.365370][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 236.821776][ T7127] loop2: detected capacity change from 0 to 16 [ 236.871840][ T7127] erofs: (device loop2): mounted with root inode @ nid 36. [ 237.129357][ T7110] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 237.139559][ T7110] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 237.149946][ T7110] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 237.162103][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 237.168311][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 237.177555][ T7127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 237.201055][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.237810][ T7110] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 237.890977][ T7110] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 238.046268][ T7110] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 238.413044][ T28] audit: type=1800 audit(1753038638.489:11): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.263" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 238.598934][ T7133] 8021q: VLANs not supported on ip6gre0 [ 239.273085][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.279268][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 239.285961][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 241.320598][ T5800] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.429642][ T7162] loop3: detected capacity change from 0 to 1024 [ 241.498017][ T7165] loop1: detected capacity change from 0 to 128 [ 241.505195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.536671][ T7165] EXT4-fs (loop1): Test dummy encryption mode enabled [ 241.585351][ T7162] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 241.652879][ T7162] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 241.664220][ T7162] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.276: Failed to acquire dquot type 0 [ 241.679863][ T7165] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.707223][ T7165] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.730379][ T7162] EXT4-fs error (device loop3): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 241.750775][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.276: corrupted inode contents [ 241.767614][ T7162] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #13: comm syz.3.276: mark_inode_dirty error [ 241.802947][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.276: corrupted inode contents [ 241.822948][ T7162] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.276: mark_inode_dirty error [ 241.868220][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.276: corrupted inode contents [ 242.073051][ T7162] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 242.073096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.753771][ T7165] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 242.786120][ T7176] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 243.153412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 243.350728][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.276: corrupted inode contents [ 243.469359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.561947][ T7162] EXT4-fs error (device loop3): ext4_truncate:4288: inode #13: comm syz.3.276: mark_inode_dirty error [ 243.671794][ T7192] 8021q: VLANs not supported on ip6gre0 [ 243.981115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 244.083436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 244.433425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.468945][ T7162] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 244.566686][ T7162] EXT4-fs (loop3): 1 truncate cleaned up [ 244.584553][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.654110][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.753589][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.353971][ T7204] 8021q: VLANs not supported on ip6tnl0 [ 246.682224][ T7205] netlink: 'syz.3.283': attribute type 13 has an invalid length. [ 246.708264][ T7205] gretap0: refused to change device tx_queue_len [ 246.715411][ T7205] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.125854][ T7212] loop3: detected capacity change from 0 to 512 [ 247.173735][ T7212] EXT4-fs: Ignoring removed oldalloc option [ 247.196910][ T7212] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 247.285109][ T7210] loop2: detected capacity change from 0 to 4096 [ 247.340853][ T7212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 247.427857][ T7212] System zones: 1-12 [ 247.621307][ T7212] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.286: corrupted in-inode xattr: e_name out of bounds [ 247.836947][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.916240][ T7212] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.286: couldn't read orphan inode 15 (err -117) [ 248.014424][ T7212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.062109][ T7220] loop1: detected capacity change from 0 to 16 [ 248.071583][ T7220] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.085182][ T7220] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 248.094360][ T7220] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 248.104838][ T7220] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 248.122070][ T7220] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 248.132944][ T7220] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 248.144088][ T7222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.281'. [ 248.145150][ T7220] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 1 of nid 89 [ 248.164795][ T28] audit: type=1800 audit(1753038877.273:12): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 248.474375][ T6330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.578020][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.453176][ T7234] loop3: detected capacity change from 0 to 512 [ 249.615826][ T7234] EXT4-fs (loop3): 1 orphan inode deleted [ 249.630581][ T7234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.667378][ T7234] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.911482][ T7234] bridge0: port 3(syz_tun) entered blocking state [ 249.918854][ T7234] bridge0: port 3(syz_tun) entered disabled state [ 249.927735][ T7234] syz_tun: entered allmulticast mode [ 249.943802][ T7234] syz_tun: entered promiscuous mode [ 249.953051][ T7234] bridge0: port 3(syz_tun) entered blocking state [ 249.960308][ T7234] bridge0: port 3(syz_tun) entered forwarding state [ 250.719043][ T7236] loop2: detected capacity change from 0 to 128 [ 250.904074][ T7236] FAT-fs (loop2): Directory bread(block 162) failed [ 250.910784][ T7236] FAT-fs (loop2): Directory bread(block 163) failed [ 251.027169][ T7236] FAT-fs (loop2): Directory bread(block 164) failed [ 251.048614][ T5984] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 251.069976][ T7236] FAT-fs (loop2): Directory bread(block 165) failed [ 251.100624][ T5984] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:12: Failed to release dquot type 1 [ 251.131574][ T7236] FAT-fs (loop2): Directory bread(block 166) failed [ 251.171731][ T7236] FAT-fs (loop2): Directory bread(block 167) failed [ 251.226955][ T7236] FAT-fs (loop2): Directory bread(block 168) failed [ 251.282907][ T7236] FAT-fs (loop2): Directory bread(block 169) failed [ 251.750954][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.639218][ T7260] loop3: detected capacity change from 0 to 512 [ 254.767564][ T7260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.809259][ T7260] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.986394][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.250732][ T7272] syzkaller0: entered promiscuous mode [ 255.256539][ T7272] syzkaller0: entered allmulticast mode [ 256.103456][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.113106][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.579678][ T7319] loop3: detected capacity change from 0 to 256 [ 264.217890][ T7319] FAT-fs (loop3): Directory bread(block 64) failed [ 264.351843][ T7319] FAT-fs (loop3): Directory bread(block 65) failed [ 264.677306][ T7319] FAT-fs (loop3): Directory bread(block 66) failed [ 264.702957][ T7319] FAT-fs (loop3): Directory bread(block 67) failed [ 264.710314][ T7319] FAT-fs (loop3): Directory bread(block 68) failed [ 264.937128][ T7319] FAT-fs (loop3): Directory bread(block 69) failed [ 265.395492][ T7319] FAT-fs (loop3): Directory bread(block 70) failed [ 265.423143][ T7319] FAT-fs (loop3): Directory bread(block 71) failed [ 265.464156][ T7319] FAT-fs (loop3): Directory bread(block 72) failed [ 265.481281][ T7319] FAT-fs (loop3): Directory bread(block 73) failed [ 267.886196][ T5849] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 268.172368][ T7354] loop2: detected capacity change from 0 to 256 [ 272.386959][ T7383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.329'. [ 272.715756][ T7390] syz.2.333[7390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.715909][ T7390] syz.2.333[7390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.192901][ T7394] loop2: detected capacity change from 0 to 40427 [ 274.977280][ T7397] loop1: detected capacity change from 0 to 256 [ 275.145915][ T7394] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 275.154895][ T7394] F2FS-fs (loop2): heap/no_heap options were deprecated [ 275.159243][ T7397] input: syz0 as /devices/virtual/input/input7 [ 275.161928][ T7394] F2FS-fs (loop2): Image doesn't support compression [ 275.182585][ T7394] F2FS-fs (loop2): invalid crc value [ 275.506886][ T7394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.644171][ T7394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 280.909531][ T7438] loop1: detected capacity change from 0 to 512 [ 281.238152][ T7438] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 281.247006][ T7438] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.344: iget: bad i_size value: 12154757448730 [ 281.262608][ T7438] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.344: couldn't read orphan inode 13 (err -117) [ 281.276539][ T7438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.563306][ T7436] syz.1.344 (7436) used greatest stack depth: 16408 bytes left [ 281.605574][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.952644][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 386.959686][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5159/1:b..l [ 386.968134][ C0] rcu: (detected by 0, t=10503 jiffies, g=22773, q=330 ncpus=2) [ 386.975896][ C0] task:udevd state:R running task stack:24936 pid:5159 ppid:1 flags:0x00004002 [ 386.987877][ C0] Call Trace: [ 386.991217][ C0] [ 386.994194][ C0] __schedule+0x14e2/0x4580 [ 386.998752][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.004890][ C0] ? mark_lock+0x94/0x320 [ 387.009275][ C0] ? __lock_acquire+0x1260/0x7c80 [ 387.014368][ C0] ? asan.module_dtor+0x20/0x20 [ 387.019294][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 387.025336][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 387.030674][ C0] preempt_schedule_irq+0xb5/0x140 [ 387.035855][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 387.041656][ C0] ? __lock_acquire+0x1334/0x7c80 [ 387.046763][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 387.052629][ C0] irqentry_exit+0x67/0x70 [ 387.057105][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.063158][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 387.068510][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 387.088161][ C0] RSP: 0018:ffffc900032878a0 EFLAGS: 00000206 [ 387.094271][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: bd38d8bf679e7400 [ 387.102274][ C0] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6680 [ 387.110281][ C0] RBP: ffffc900032879b0 R08: dffffc0000000000 R09: 1ffffffff21b44a4 [ 387.118284][ C0] R10: dffffc0000000000 R11: fffffbfff21b44a5 R12: 1ffff92000650f20 [ 387.126295][ C0] R13: ffffffff8cd2fba0 R14: 0000000000000246 R15: dffffc0000000000 [ 387.134332][ C0] ? read_lock_is_recursive+0x20/0x20 [ 387.139749][ C0] ? deref_stack_reg+0x1bd/0x240 [ 387.144743][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.150856][ C0] is_bpf_text_address+0x47/0x2a0 [ 387.155925][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 387.161162][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 387.166399][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.172517][ C0] kernel_text_address+0xa0/0xd0 [ 387.177501][ C0] __kernel_text_address+0xd/0x30 [ 387.182572][ C0] unwind_get_return_address+0x5d/0xc0 [ 387.188078][ C0] ? stack_trace_save+0xe0/0xe0 [ 387.192975][ C0] arch_stack_walk+0x11d/0x190 [ 387.197790][ C0] stack_trace_save+0x9c/0xe0 [ 387.202509][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 387.207666][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 387.213692][ C0] kasan_set_track+0x4e/0x70 [ 387.218315][ C0] ? kasan_set_track+0x4e/0x70 [ 387.223112][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 387.228261][ C0] ? slab_post_alloc_hook+0x6e/0x4d0 [ 387.233587][ C0] ? kmem_cache_alloc+0x11e/0x2e0 [ 387.238654][ C0] ? getname_flags+0xbb/0x500 [ 387.243372][ C0] ? __x64_sys_unlink+0x3c/0x50 [ 387.248261][ C0] ? do_syscall_64+0x55/0xb0 [ 387.252892][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.259054][ C0] __kasan_slab_alloc+0x6c/0x80 [ 387.263951][ C0] slab_post_alloc_hook+0x6e/0x4d0 [ 387.269115][ C0] kmem_cache_alloc+0x11e/0x2e0 [ 387.274031][ C0] ? getname_flags+0xbb/0x500 [ 387.278770][ C0] getname_flags+0xbb/0x500 [ 387.283324][ C0] ? rcu_is_watching+0x15/0xb0 [ 387.288149][ C0] __x64_sys_unlink+0x3c/0x50 [ 387.292870][ C0] do_syscall_64+0x55/0xb0 [ 387.297322][ C0] ? clear_bhb_loop+0x40/0x90 [ 387.302044][ C0] ? clear_bhb_loop+0x40/0x90 [ 387.306770][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.312711][ C0] RIP: 0033:0x7fe247915937 [ 387.317174][ C0] RSP: 002b:00007ffdf5a52e28 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 387.325625][ C0] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fe247915937 [ 387.333631][ C0] RDX: 0000000000000000 RSI: 00007ffdf5a52f10 RDI: 0000556ab9c1002e [ 387.341637][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.349642][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 387.357642][ C0] R13: 0000556ab9c2b100 R14: 0000556ab9c10008 R15: 0000000000000000 [ 387.365673][ C0] [ 387.368725][ C0] rcu: rcu_preempt kthread starved for 10541 jiffies! g22773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 387.379950][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 387.389946][ C0] rcu: RCU grace-period kthread stack dump: [ 387.395863][ C0] task:rcu_preempt state:R running task stack:27408 pid:17 ppid:2 flags:0x00004000 [ 387.406697][ C0] Call Trace: [ 387.410029][ C0] [ 387.413124][ C0] __schedule+0x14e2/0x4580 [ 387.417700][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 387.423646][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 387.428893][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 387.434835][ C0] ? asan.module_dtor+0x20/0x20 [ 387.439727][ C0] ? enqueue_timer+0x225/0x530 [ 387.444534][ C0] ? __mod_timer+0x984/0xdb0 [ 387.449186][ C0] schedule+0xbd/0x170 [ 387.453297][ C0] schedule_timeout+0x160/0x280 [ 387.458192][ C0] ? console_conditional_schedule+0x40/0x40 [ 387.464146][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 387.470109][ C0] ? update_process_times+0x1b0/0x1b0 [ 387.475552][ C0] ? prepare_to_swait_event+0x339/0x360 [ 387.481164][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 387.486082][ C0] ? dump_blkd_tasks+0x810/0x810 [ 387.491069][ C0] ? rcu_gp_init+0x1510/0x1510 [ 387.495885][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 387.500776][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.506029][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 387.511281][ C0] rcu_gp_kthread+0x99/0x380 [ 387.515921][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 387.521080][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 387.526070][ C0] ? __kthread_parkme+0x162/0x1c0 [ 387.531159][ C0] kthread+0x2fa/0x390 [ 387.535259][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 387.540418][ C0] ? kthread_blkcg+0xd0/0xd0 [ 387.545041][ C0] ret_from_fork+0x48/0x80 [ 387.549502][ C0] ? kthread_blkcg+0xd0/0xd0 [ 387.554144][ C0] ret_from_fork_asm+0x11/0x20 [ 387.558984][ C0] [ 387.562031][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 387.568399][ C0] Sending NMI from CPU 0 to CPUs 1: [ 387.573651][ C1] NMI backtrace for cpu 1 [ 387.573675][ C1] CPU: 1 PID: 7450 Comm: syz.1.348 Not tainted 6.6.99-syzkaller #0 [ 387.573691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.573700][ C1] RIP: 0010:kasan_check_range+0x12/0x290 [ 387.573724][ C1] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b8 01 00 00 55 41 57 <41> 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 5a 02 00 00 49 89 [ 387.573737][ C1] RSP: 0018:ffffc900001f0768 EFLAGS: 00000002 [ 387.573752][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81678b2b [ 387.573762][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e4a7ce8 [ 387.573772][ C1] RBP: ffffc900001f0898 R08: dffffc0000000000 R09: 1ffffffff21b44a4 [ 387.573784][ C1] R10: dffffc0000000000 R11: fffffbfff21b44a5 R12: ffffffff8192c2c6 [ 387.573796][ C1] R13: dffffc0000000000 R14: ffffffffa00040f8 R15: 1ffff9200003e0fc [ 387.573808][ C1] FS: 00007f53d453d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 387.573822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.573832][ C1] CR2: 00007f53d453cf40 CR3: 000000005d6c0000 CR4: 00000000003506e0 [ 387.573847][ C1] Call Trace: [ 387.573853][ C1] [ 387.573859][ C1] lock_release+0xab/0x8b0 [ 387.573884][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 387.573902][ C1] ? deref_stack_reg+0x1bd/0x240 [ 387.573931][ C1] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.573948][ C1] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.573963][ C1] is_bpf_text_address+0x28f/0x2a0 [ 387.573982][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 387.574000][ C1] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.574014][ C1] ? bpf_send_signal+0x19/0x20 [ 387.574046][ C1] kernel_text_address+0xa0/0xd0 [ 387.574069][ C1] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.574084][ C1] __kernel_text_address+0xd/0x30 [ 387.574106][ C1] unwind_get_return_address+0x5d/0xc0 [ 387.574132][ C1] ? stack_trace_save+0xe0/0xe0 [ 387.574151][ C1] arch_stack_walk+0x11d/0x190 [ 387.574170][ C1] ? bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.574188][ C1] stack_trace_save+0x9c/0xe0 [ 387.574207][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 387.574225][ C1] ? __lock_acquire+0x1260/0x7c80 [ 387.574249][ C1] kasan_set_track+0x4e/0x70 [ 387.574265][ C1] ? kasan_set_track+0x4e/0x70 [ 387.574280][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 387.574296][ C1] ? slab_post_alloc_hook+0x6e/0x4d0 [ 387.574319][ C1] ? kmem_cache_alloc+0x11e/0x2e0 [ 387.574340][ C1] ? __sigqueue_alloc+0x40c/0x520 [ 387.574364][ C1] ? __send_signal_locked+0x22f/0xe00 [ 387.574387][ C1] ? group_send_sig_info+0x1fa/0x260 [ 387.574409][ C1] ? do_bpf_send_signal+0x7f/0x190 [ 387.574426][ C1] ? irq_work_single+0xd5/0x230 [ 387.574442][ C1] ? irq_work_run+0x156/0x2e0 [ 387.574457][ C1] ? __sysvec_irq_work+0x98/0x380 [ 387.574481][ C1] ? sysvec_irq_work+0x9c/0xc0 [ 387.574501][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 387.574526][ C1] ? native_apic_msr_write+0x39/0x50 [ 387.574541][ C1] ? arch_irq_work_raise+0x68/0x70 [ 387.574563][ C1] ? irq_work_queue+0x99/0x140 [ 387.574579][ C1] ? bpf_send_signal_common+0x2b6/0x420 [ 387.574596][ C1] ? bpf_send_signal+0x19/0x20 [ 387.574642][ C1] __kasan_slab_alloc+0x6c/0x80 [ 387.574661][ C1] slab_post_alloc_hook+0x6e/0x4d0 [ 387.574688][ C1] kmem_cache_alloc+0x11e/0x2e0 [ 387.574711][ C1] ? __sigqueue_alloc+0x40c/0x520 [ 387.574736][ C1] ? __sigqueue_alloc+0x32/0x520 [ 387.574761][ C1] __sigqueue_alloc+0x40c/0x520 [ 387.574789][ C1] __send_signal_locked+0x22f/0xe00 [ 387.574814][ C1] ? group_send_sig_info+0x3e/0x260 [ 387.574839][ C1] group_send_sig_info+0x1fa/0x260 [ 387.574866][ C1] do_bpf_send_signal+0x7f/0x190 [ 387.574885][ C1] irq_work_single+0xd5/0x230 [ 387.574904][ C1] irq_work_run+0x156/0x2e0 [ 387.574921][ C1] ? irq_work_single+0x230/0x230 [ 387.574938][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 387.574953][ C1] ? irq_exit_rcu+0x20/0x20 [ 387.574971][ C1] __sysvec_irq_work+0x98/0x380 [ 387.574995][ C1] sysvec_irq_work+0x9c/0xc0 [ 387.575014][ C1] [ 387.575018][ C1] [ 387.575024][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 387.575054][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 387.575070][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 87 52 18 03 0f 1f 80 00 00 00 [ 387.575082][ C1] RSP: 0018:ffffc9000d427cd8 EFLAGS: 00000246 [ 387.575095][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 387.575104][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 387.575113][ C1] RBP: 0000000000000000 R08: ffffc9000d427c47 R09: 1ffff92001a84f88 [ 387.575123][ C1] R10: dffffc0000000000 R11: fffff52001a84f89 R12: ffff8880b8f35201 [ 387.575135][ C1] R13: dffffc0000000000 R14: ffff8880b8f35290 R15: 0000000000000020 [ 387.575156][ C1] arch_irq_work_raise+0x68/0x70 [ 387.575179][ C1] irq_work_queue+0x99/0x140 [ 387.575197][ C1] bpf_send_signal_common+0x2b6/0x420 [ 387.575217][ C1] ? __set_printk_clr_event+0x80/0x80 [ 387.575236][ C1] ? __cant_sleep+0x210/0x210 [ 387.575256][ C1] ? arch_do_signal_or_restart+0x492/0x780 [ 387.575284][ C1] bpf_send_signal+0x19/0x20 [ 387.575308][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 387.575324][ C1] bpf_trace_run2+0x1d1/0x3c0 [ 387.575340][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 387.575356][ C1] ? bpf_trace_run1+0x3b0/0x3b0 [ 387.575372][ C1] ? lock_chain_count+0x20/0x20 [ 387.575393][ C1] trace_sys_enter+0x69/0x80 [ 387.575413][ C1] syscall_trace_enter+0xf0/0x150 [ 387.575436][ C1] do_syscall_64+0x28/0xb0 [ 387.575453][ C1] ? clear_bhb_loop+0x40/0x90 [ 387.575467][ C1] ? clear_bhb_loop+0x40/0x90 [ 387.575483][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.575507][ C1] RIP: 0033:0x7f53d372ab89 [ 387.575518][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 387.575530][ C1] RSP: 002b:00007f53d453cb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 387.575544][ C1] RAX: ffffffffffffffda RBX: 00007f53d39b6088 RCX: 00007f53d372ab89 [ 387.575555][ C1] RDX: 00007f53d453cb40 RSI: 00007f53d453cc70 RDI: 0000000000000011 [ 387.575565][ C1] RBP: 00007f53d39b6080 R08: 0000000000000000 R09: 0000000000000000 [ 387.575575][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53d39b608c [ 387.575584][ C1] R13: 0000000000000000 R14: 00007ffcb038bba0 R15: 00007ffcb038bc88 [ 387.575603][ C1]