last executing test programs: 13.03022893s ago: executing program 1 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x0}]) 12.845369933s ago: executing program 3 (id=138): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x9, 0x4, 0x4c804, 0xffffffffffffffff, 0x32, '\x00', 0x0, r0, 0x2, 0x4, 0x1, 0x8, @value=r1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) 10.552445735s ago: executing program 1 (id=141): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 8.167257137s ago: executing program 1 (id=144): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r9, 0x2000, 0x0) pread64(r8, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.518566391s ago: executing program 0 (id=145): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0xd, &(0x7f00000004c0)={0x1c, 0x6, 0x8}) r6 = getgid() lchown(0x0, 0x0, r6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008001) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x7f, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)=r4}, 0x20) 5.540200964s ago: executing program 2 (id=146): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) 5.515625524s ago: executing program 1 (id=147): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) 5.504675604s ago: executing program 0 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1d, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5.397111486s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x0}]) 4.447920219s ago: executing program 0 (id=150): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 4.309240621s ago: executing program 2 (id=151): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 4.282034081s ago: executing program 1 (id=152): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) 3.816713997s ago: executing program 2 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) 3.63105131s ago: executing program 3 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000b0000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)="ab5515db", 0x0, 0x5, r1}, 0x38) 3.485414902s ago: executing program 2 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x18) close(r0) 3.369293794s ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) 3.350558074s ago: executing program 3 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r9, 0x2000, 0x0) pread64(r8, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.011400589s ago: executing program 1 (id=158): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xc, &(0x7f0000000340)={0x0, 0x3}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r3, &(0x7f0000002c00)=""/4126, 0x101e, 0x8b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0xfffffffd, 0x1, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000880)=""/166}, 0x20) 2.329284778s ago: executing program 0 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) 1.722542206s ago: executing program 2 (id=160): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) 381.781935ms ago: executing program 3 (id=161): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 186.568147ms ago: executing program 2 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x0}]) 177.124118ms ago: executing program 0 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 3 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 80.868028][ T5762] cgroup: Unknown subsys name 'net' [ 81.009416][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.886739][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.490024][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.501186][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.509077][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.521905][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.532048][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.542291][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.551999][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.560275][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.568936][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.577091][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.585098][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.593038][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.601323][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.610287][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.618809][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.626199][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.634065][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.644562][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.652044][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.684090][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.705248][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.727422][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.741900][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.767264][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.206369][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.329240][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.345411][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.482582][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.489756][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.497613][ T5781] bridge_slave_0: entered allmulticast mode [ 85.505330][ T5781] bridge_slave_0: entered promiscuous mode [ 85.513891][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.525079][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.532507][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.539721][ T5781] bridge_slave_1: entered allmulticast mode [ 85.547375][ T5781] bridge_slave_1: entered promiscuous mode [ 85.679886][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.687252][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.694622][ T5772] bridge_slave_0: entered allmulticast mode [ 85.702389][ T5772] bridge_slave_0: entered promiscuous mode [ 85.709880][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.717233][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.724743][ T5777] bridge_slave_0: entered allmulticast mode [ 85.732148][ T5777] bridge_slave_0: entered promiscuous mode [ 85.742657][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.763340][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.770864][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.778048][ T5772] bridge_slave_1: entered allmulticast mode [ 85.785496][ T5772] bridge_slave_1: entered promiscuous mode [ 85.805751][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.813193][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.820558][ T5777] bridge_slave_1: entered allmulticast mode [ 85.828012][ T5777] bridge_slave_1: entered promiscuous mode [ 85.837383][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.928183][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.941322][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.964684][ T5781] team0: Port device team_slave_0 added [ 85.973032][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.980173][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.987744][ T5776] bridge_slave_0: entered allmulticast mode [ 85.994991][ T5776] bridge_slave_0: entered promiscuous mode [ 86.017273][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.029829][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.043030][ T5781] team0: Port device team_slave_1 added [ 86.049222][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.056700][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.064566][ T5776] bridge_slave_1: entered allmulticast mode [ 86.072017][ T5776] bridge_slave_1: entered promiscuous mode [ 86.106438][ T5772] team0: Port device team_slave_0 added [ 86.166651][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.177689][ T5772] team0: Port device team_slave_1 added [ 86.206751][ T5777] team0: Port device team_slave_0 added [ 86.214032][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.221355][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.247501][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.262886][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.298756][ T5777] team0: Port device team_slave_1 added [ 86.305634][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.312845][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.339323][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.415202][ T5776] team0: Port device team_slave_0 added [ 86.425114][ T5776] team0: Port device team_slave_1 added [ 86.432101][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.439072][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.465145][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.477646][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.484704][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.510655][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.524071][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.531187][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.557911][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.614037][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.621219][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.647306][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.678170][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.685388][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.711616][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.730836][ T5781] hsr_slave_0: entered promiscuous mode [ 86.737404][ T5781] hsr_slave_1: entered promiscuous mode [ 86.751757][ T5789] Bluetooth: hci0: command tx timeout [ 86.751777][ T5778] Bluetooth: hci3: command tx timeout [ 86.765779][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.773156][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.799689][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.820703][ T5789] Bluetooth: hci2: command tx timeout [ 86.820725][ T5778] Bluetooth: hci1: command tx timeout [ 86.916159][ T5772] hsr_slave_0: entered promiscuous mode [ 86.923211][ T5772] hsr_slave_1: entered promiscuous mode [ 86.929486][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.937743][ T5772] Cannot create hsr debugfs directory [ 86.966467][ T5777] hsr_slave_0: entered promiscuous mode [ 86.974727][ T5777] hsr_slave_1: entered promiscuous mode [ 86.981521][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.989088][ T5777] Cannot create hsr debugfs directory [ 87.081125][ T5776] hsr_slave_0: entered promiscuous mode [ 87.087907][ T5776] hsr_slave_1: entered promiscuous mode [ 87.095009][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.102663][ T5776] Cannot create hsr debugfs directory [ 87.463190][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.477505][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.488042][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.509234][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.562395][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.587707][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.600222][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.616758][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.710098][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.722145][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.748801][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.761644][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.854011][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.865904][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.879779][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.903442][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.937492][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.980289][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.019937][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.027338][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.046764][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.053962][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.117985][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.146769][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.177615][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.184820][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.238802][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.245990][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.308292][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.369197][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.397546][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.466190][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.479622][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.518903][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.526135][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.539566][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.546798][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.558747][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.565950][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.604369][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.611620][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.696332][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.768122][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.830595][ T5789] Bluetooth: hci3: command tx timeout [ 88.830637][ T5778] Bluetooth: hci0: command tx timeout [ 88.902604][ T5778] Bluetooth: hci2: command tx timeout [ 88.902614][ T5789] Bluetooth: hci1: command tx timeout [ 88.958538][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.978961][ T5781] veth0_vlan: entered promiscuous mode [ 89.007887][ T5781] veth1_vlan: entered promiscuous mode [ 89.090085][ T5781] veth0_macvtap: entered promiscuous mode [ 89.118831][ T5777] veth0_vlan: entered promiscuous mode [ 89.138565][ T5781] veth1_macvtap: entered promiscuous mode [ 89.178816][ T5777] veth1_vlan: entered promiscuous mode [ 89.244799][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.276909][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.297565][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.307026][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.315872][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.326281][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.339504][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.359200][ T5777] veth0_macvtap: entered promiscuous mode [ 89.374849][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.405604][ T5777] veth1_macvtap: entered promiscuous mode [ 89.484265][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.497216][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.510189][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.522812][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.534217][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.548026][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.579384][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.588854][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.597834][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.608580][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.646553][ T5776] veth0_vlan: entered promiscuous mode [ 89.695363][ T5772] veth0_vlan: entered promiscuous mode [ 89.714650][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.717409][ T5776] veth1_vlan: entered promiscuous mode [ 89.726397][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.796984][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.807986][ T5772] veth1_vlan: entered promiscuous mode [ 89.811960][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.917583][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.936647][ T5776] veth0_macvtap: entered promiscuous mode [ 89.940839][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.958583][ T5776] veth1_macvtap: entered promiscuous mode [ 90.010046][ T5772] veth0_macvtap: entered promiscuous mode [ 90.059896][ T5772] veth1_macvtap: entered promiscuous mode [ 90.079462][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.094168][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.107644][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.119531][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.137094][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.147838][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.172484][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.349882][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.362251][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.373544][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.384136][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.406499][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.451742][ T5868] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 90.695445][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.776255][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.846504][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.901632][ T5778] Bluetooth: hci0: command tx timeout [ 90.907896][ T5778] Bluetooth: hci3: command tx timeout [ 90.928342][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.041718][ T5789] Bluetooth: hci2: command tx timeout [ 91.047209][ T5789] Bluetooth: hci1: command tx timeout [ 91.060627][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.077452][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.098703][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.116492][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.131098][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.166985][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.177963][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.188463][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.199307][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.212069][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.234144][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.243055][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252395][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.261539][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.285891][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.312125][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.331042][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.348142][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654067][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.669269][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.669727][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.688833][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.757978][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.777949][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.816961][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.832034][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.033371][ T9] cfg80211: failed to load regulatory.db [ 92.610783][ T5896] syz.3.12[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.691174][ T5896] loop3: detected capacity change from 0 to 1024 [ 92.718756][ T5896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.752091][ T42] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.771728][ T42] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.784910][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.819874][ T5896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.981201][ T5789] Bluetooth: hci0: command tx timeout [ 92.987259][ T5778] Bluetooth: hci3: command tx timeout [ 93.060773][ T5778] Bluetooth: hci1: command tx timeout [ 93.067105][ T5789] Bluetooth: hci2: command tx timeout [ 93.464975][ T5896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.723512][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.853945][ T5901] fido_id[5901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.531342][ T5932] loop1: detected capacity change from 0 to 1024 [ 96.555855][ T5932] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 97.738670][ T5945] loop0: detected capacity change from 0 to 1024 [ 97.775945][ T5945] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 99.946649][ T5976] loop3: detected capacity change from 0 to 1024 [ 99.965715][ T5976] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 100.015102][ T5977] loop0: detected capacity change from 0 to 256 [ 100.215305][ T5880] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.248588][ T5977] loop0: detected capacity change from 0 to 256 [ 100.249110][ T5880] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.266911][ T5880] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.282611][ T5880] Buffer I/O error on dev loop0, logical block 0, async page read [ 101.047118][ T5977] ======================================================= [ 101.047118][ T5977] WARNING: The mand mount option has been deprecated and [ 101.047118][ T5977] and is ignored by this kernel. Remove the mand [ 101.047118][ T5977] option from the mount to silence this warning. [ 101.047118][ T5977] ======================================================= [ 101.231781][ T5977] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.274201][ T5977] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 101.358649][ T5977] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.326474][ T5988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.334108][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 103.341503][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 103.348760][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 103.623621][ T5990] loop2: detected capacity change from 0 to 1024 [ 103.672440][ T5990] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 106.084468][ T6001] Can't find ip_set type hash:net,por [ 106.911954][ T6018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.919380][ T6018] IPv6: NLM_F_CREATE should be set when creating new route [ 106.926715][ T6018] IPv6: NLM_F_CREATE should be set when creating new route [ 106.934010][ T6018] IPv6: NLM_F_CREATE should be set when creating new route [ 107.642419][ T6023] loop0: detected capacity change from 0 to 1024 [ 107.700009][ T6023] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 107.700392][ C1] sched: RT throttling activated [ 108.393203][ T6024] loop3: detected capacity change from 0 to 512 [ 108.659644][ T6024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.673138][ T6024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.999100][ T6024] EXT4-fs (loop3): 1 truncate cleaned up [ 109.467070][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.681392][ T6024] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.48: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 109.762803][ T6024] EXT4-fs (loop3): Remounting filesystem read-only [ 110.907907][ T6048] loop2: detected capacity change from 0 to 512 [ 110.915366][ T6048] EXT4-fs: Ignoring removed nobh option [ 110.983451][ T6048] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.55: iget: bad i_size value: 38620345925642 [ 111.095774][ T6048] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.55: couldn't read orphan inode 15 (err -117) [ 111.125079][ T6052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.132418][ T6052] IPv6: NLM_F_CREATE should be set when creating new route [ 111.139710][ T6052] IPv6: NLM_F_CREATE should be set when creating new route [ 111.147057][ T6052] IPv6: NLM_F_CREATE should be set when creating new route [ 111.163368][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.395764][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.623894][ T6057] loop1: detected capacity change from 0 to 256 [ 111.943682][ T6057] loop1: detected capacity change from 0 to 256 [ 112.069653][ T6057] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.219374][ T6057] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.389566][ T6057] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.115504][ T6067] loop2: detected capacity change from 0 to 1024 [ 114.144530][ T6067] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 117.413510][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.923357][ T6098] loop3: detected capacity change from 0 to 512 [ 119.021773][ T6098] EXT4-fs: Ignoring removed nobh option [ 119.730652][ T6098] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.66: iget: bad i_size value: 38620345925642 [ 119.769839][ T6098] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.66: couldn't read orphan inode 15 (err -117) [ 119.814813][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.122788][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.669140][ T6119] loop0: detected capacity change from 0 to 512 [ 120.680799][ T6119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.692231][ T6119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.727867][ T6119] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.71: invalid block [ 120.742310][ T6119] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.71: invalid indirect mapped block 4294967295 (level 1) [ 120.759350][ T6119] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.71: invalid indirect mapped block 4294967295 (level 1) [ 120.776020][ T6119] EXT4-fs (loop0): 2 truncates cleaned up [ 120.783158][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.802532][ T6119] EXT4-fs (loop0): shut down requested (2) [ 121.398451][ T6124] loop2: detected capacity change from 0 to 256 [ 121.462551][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.522224][ T6079] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.569760][ T6124] loop2: detected capacity change from 0 to 256 [ 121.570139][ T6079] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.623779][ T6079] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.639512][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 121.661195][ T6124] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.725941][ T6124] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 121.786610][ T6124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.838028][ T6137] loop3: detected capacity change from 0 to 512 [ 124.851497][ T6137] EXT4-fs: Ignoring removed nobh option [ 125.219750][ T6137] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.77: iget: bad i_size value: 38620345925642 [ 125.542037][ T6137] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.77: couldn't read orphan inode 15 (err -117) [ 125.600264][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.846000][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.086788][ T6150] loop1: detected capacity change from 0 to 1024 [ 126.121736][ T6155] loop3: detected capacity change from 0 to 512 [ 126.186311][ T6150] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 126.200854][ T6155] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.212344][ T6155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.254013][ T6155] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.81: invalid indirect mapped block 4294967295 (level 1) [ 126.270069][ T6155] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.81: invalid indirect mapped block 4294967295 (level 1) [ 126.285683][ T6155] EXT4-fs (loop3): 2 truncates cleaned up [ 126.295121][ T6155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.313401][ T6155] EXT4-fs (loop3): shut down requested (2) [ 128.302200][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.197097][ T6178] loop2: detected capacity change from 0 to 512 [ 130.232214][ T6178] EXT4-fs: Ignoring removed nobh option [ 130.316800][ T6178] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.89: iget: bad i_size value: 38620345925642 [ 130.389285][ T6178] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.89: couldn't read orphan inode 15 (err -117) [ 130.473468][ T6178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.619877][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.741141][ T6188] loop0: detected capacity change from 0 to 1024 [ 130.760597][ T6188] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 132.033820][ T6200] loop0: detected capacity change from 0 to 128 [ 132.053925][ T6200] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.091614][ T6200] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.105950][ T6200] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.508877][ T6204] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.003040][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009785][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275748][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.582936][ T6215] loop1: detected capacity change from 0 to 1024 [ 133.634376][ T6215] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 134.065899][ T6221] overlayfs: failed to resolve './file0': -2 [ 134.841475][ T6225] wg2: entered promiscuous mode [ 134.853009][ T6225] wg2: entered allmulticast mode [ 135.248293][ T6232] loop0: detected capacity change from 0 to 1024 [ 135.282786][ T6232] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 139.019996][ T6249] loop3: detected capacity change from 0 to 512 [ 139.212739][ T6249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.226451][ T6249] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.347514][ T6249] virtiofs: Unknown parameter 'always 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 18 nlmon0 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 20 batadv0 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 21 vxcan0 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 22 vxcan1 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 23 veth0 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 24 veth1 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 25 wg0 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 26 wg1 : 1 V3 [ 139.347514][ T6249] 010000E0 1 0:00000000 0 [ 139.347514][ T6249] 27 wg2 : 1 ' [ 140.593235][ T6256] loop2: detected capacity change from 0 to 1024 [ 140.619287][ T6256] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 141.817890][ T6249] netlink: 'syz.3.109': attribute type 13 has an invalid length. [ 141.834569][ T6249] gretap0: refused to change device tx_queue_len [ 141.841792][ T6249] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 141.993810][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.459209][ T6284] loop0: detected capacity change from 0 to 512 [ 143.468092][ T6284] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.513624][ T6284] EXT4-fs (loop0): 1 truncate cleaned up [ 143.520855][ T6284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.556650][ T6276] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.119: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.658763][ T6276] EXT4-fs (loop0): Remounting filesystem read-only [ 143.884400][ T6288] loop2: detected capacity change from 0 to 1024 [ 143.930660][ T6288] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 145.233131][ T6294] loop3: detected capacity change from 0 to 512 [ 145.623635][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.636904][ T6294] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.736954][ T6294] virtiofs: Unknown parameter 'always 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 18 nlmon0 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 20 batadv0 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 21 vxcan0 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 22 vxcan1 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 23 veth0 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 24 veth1 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 25 wg0 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 26 wg1 : 1 V3 [ 145.736954][ T6294] 010000E0 1 0:00000000 0 [ 145.736954][ T6294] 27 wg2 : 1 ' [ 145.844809][ T6294] netlink: 'syz.3.122': attribute type 13 has an invalid length. [ 145.927442][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.158168][ T6294] gretap0: refused to change device tx_queue_len [ 146.167458][ T6294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.086136][ T6304] loop0: detected capacity change from 0 to 512 [ 147.105795][ T6304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.117264][ T6304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.176102][ T6304] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.123: invalid indirect mapped block 4294967295 (level 1) [ 147.201545][ T6304] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.123: invalid indirect mapped block 4294967295 (level 1) [ 147.221176][ T6304] EXT4-fs (loop0): 2 truncates cleaned up [ 147.228428][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.246967][ T6304] EXT4-fs (loop0): shut down requested (2) [ 147.719072][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.849944][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.634415][ T6319] loop0: detected capacity change from 0 to 1024 [ 149.691756][ T6319] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 151.249390][ T6333] loop1: detected capacity change from 0 to 512 [ 151.935283][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.966516][ T6333] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.044337][ T6333] virtiofs: Unknown parameter 'always 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 18 nlmon0 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 20 batadv0 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 21 vxcan0 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 22 vxcan1 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 23 veth0 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 24 veth1 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 25 wg0 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 26 wg1 : 1 V3 [ 152.044337][ T6333] 010000E0 1 0:00000000 0 [ 152.044337][ T6333] 27 wg2 : 1 ' [ 152.930619][ T6339] loop0: detected capacity change from 0 to 512 [ 152.957802][ T6339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.969275][ T6339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.113851][ T6339] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.134: invalid indirect mapped block 4294967295 (level 1) [ 153.133987][ T6339] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.134: invalid indirect mapped block 4294967295 (level 1) [ 153.149331][ T6339] EXT4-fs (loop0): 2 truncates cleaned up [ 153.156616][ T6339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.176099][ T6339] EXT4-fs (loop0): shut down requested (2) [ 153.628700][ T6333] netlink: 'syz.1.133': attribute type 13 has an invalid length. [ 153.643317][ T6333] gretap0: refused to change device tx_queue_len [ 153.650001][ T6333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.826828][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.839781][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.872918][ T6374] loop1: detected capacity change from 0 to 512 [ 159.095628][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.108734][ T6374] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.199991][ T6374] virtiofs: Unknown parameter 'always 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 18 nlmon0 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 20 batadv0 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 21 vxcan0 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 22 vxcan1 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 23 veth0 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 24 veth1 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 25 wg0 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 26 wg1 : 1 V3 [ 159.199991][ T6374] 010000E0 1 0:00000000 0 [ 159.199991][ T6374] 27 wg2 : 1 ' [ 160.494176][ T6380] loop0: detected capacity change from 0 to 512 [ 160.518268][ T6380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.529816][ T6380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.581363][ T6380] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.145: invalid indirect mapped block 4294967295 (level 1) [ 160.598798][ T6380] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.145: invalid indirect mapped block 4294967295 (level 1) [ 160.614309][ T6380] EXT4-fs (loop0): 2 truncates cleaned up [ 160.623630][ T6380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.647070][ T6380] EXT4-fs (loop0): shut down requested (2) [ 161.096011][ T6348] tipc: Started in network mode [ 161.101466][ T6348] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 161.115253][ T6348] tipc: Enabled bearer , priority 10 [ 161.122072][ T6374] netlink: 'syz.1.144': attribute type 13 has an invalid length. [ 161.132664][ T6374] gretap0: refused to change device tx_queue_len [ 161.139539][ T6374] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.317412][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.354056][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.113102][ T5779] tipc: Node number set to 4269801488 [ 163.754775][ T6415] loop3: detected capacity change from 0 to 512 [ 163.862778][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.876666][ T6415] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.974203][ T6415] virtiofs: Unknown parameter 'always 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 18 nlmon0 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 20 batadv0 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 21 vxcan0 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 22 vxcan1 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 23 veth0 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 24 veth1 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 25 wg0 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 26 wg1 : 1 V3 [ 163.974203][ T6415] 010000E0 1 0:00000000 0 [ 163.974203][ T6415] 27 wg2 : 1 ' [ 164.075030][ T6415] netlink: 'syz.3.157': attribute type 13 has an invalid length. [ 164.092799][ T6415] gretap0: refused to change device tx_queue_len [ 164.100955][ T6415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.454008][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.960328][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 271.967506][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P128/1:b..l [ 271.975785][ C1] rcu: (detected by 1, t=10503 jiffies, g=17805, q=236 ncpus=2) [ 271.983544][ C1] task:kworker/u4:5 state:R running task stack:23464 pid:128 ppid:2 flags:0x00004000 [ 271.995289][ C1] Workqueue: bat_events batadv_nc_worker [ 272.001192][ C1] Call Trace: [ 272.004523][ C1] [ 272.007508][ C1] __schedule+0x14e2/0x4580 [ 272.012080][ C1] ? mark_lock+0x94/0x320 [ 272.016461][ C1] ? asan.module_dtor+0x20/0x20 [ 272.021386][ C1] ? mark_lock+0x94/0x320 [ 272.025763][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 272.031799][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 272.037130][ C1] preempt_schedule_irq+0xb5/0x140 [ 272.042278][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 272.048049][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 272.053905][ C1] irqentry_exit+0x67/0x70 [ 272.058365][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.064386][ C1] RIP: 0010:lock_acquire+0x1f2/0x410 [ 272.069720][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 272.089381][ C1] RSP: 0018:ffffc90002d97a40 EFLAGS: 00000206 [ 272.095496][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8fbdd2248a2d3700 [ 272.103508][ C1] RDX: 0000000000000000 RSI: ffffffff8aaac440 RDI: ffffffff8afc6ac0 [ 272.111520][ C1] RBP: ffffc90002d97b48 R08: dffffc0000000000 R09: 1ffffffff21b0aa4 [ 272.119537][ C1] R10: dffffc0000000000 R11: fffffbfff21b0aa5 R12: 1ffff920005b2f54 [ 272.127549][ C1] R13: ffffffff8cd2f760 R14: 0000000000000246 R15: dffffc0000000000 [ 272.135583][ C1] ? batadv_nc_worker+0xd2/0x610 [ 272.140588][ C1] ? read_lock_is_recursive+0x20/0x20 [ 272.146004][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 272.152032][ C1] ? batadv_nc_worker+0xd2/0x610 [ 272.157021][ C1] batadv_nc_worker+0xef/0x610 [ 272.161831][ C1] ? batadv_nc_worker+0xd2/0x610 [ 272.166814][ C1] ? process_scheduled_works+0x957/0x15b0 [ 272.172567][ C1] process_scheduled_works+0xa45/0x15b0 [ 272.178181][ C1] ? assign_work+0x400/0x400 [ 272.182818][ C1] ? assign_work+0x39e/0x400 [ 272.187466][ C1] worker_thread+0xa55/0xfc0 [ 272.192184][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 272.198127][ C1] ? _raw_spin_unlock+0x40/0x40 [ 272.203021][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 272.208982][ C1] kthread+0x2fa/0x390 [ 272.213087][ C1] ? pr_cont_work+0x560/0x560 [ 272.217808][ C1] ? kthread_blkcg+0xd0/0xd0 [ 272.222439][ C1] ret_from_fork+0x48/0x80 [ 272.226901][ C1] ? kthread_blkcg+0xd0/0xd0 [ 272.231537][ C1] ret_from_fork_asm+0x11/0x20 [ 272.236368][ C1] [ 272.239415][ C1] rcu: rcu_preempt kthread starved for 10529 jiffies! g17805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 272.250658][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.260658][ C1] rcu: RCU grace-period kthread stack dump: [ 272.266570][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 ppid:2 flags:0x00004000 [ 272.277394][ C1] Call Trace: [ 272.280705][ C1] [ 272.283687][ C1] __schedule+0x14e2/0x4580 [ 272.288251][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 272.294205][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 272.299456][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 272.305400][ C1] ? asan.module_dtor+0x20/0x20 [ 272.310306][ C1] ? enqueue_timer+0x225/0x530 [ 272.315113][ C1] ? __mod_timer+0x984/0xdb0 [ 272.319759][ C1] schedule+0xbd/0x170 [ 272.323873][ C1] schedule_timeout+0x160/0x280 [ 272.328773][ C1] ? console_conditional_schedule+0x40/0x40 [ 272.334714][ C1] ? update_process_times+0x1b0/0x1b0 [ 272.340144][ C1] ? prepare_to_swait_event+0x339/0x360 [ 272.345740][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 272.350636][ C1] ? rcu_gp_init+0x110e/0x1510 [ 272.355456][ C1] ? rcu_gp_kthread+0x380/0x380 [ 272.360354][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 272.366289][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 272.371528][ C1] ? rcu_gp_init+0x1510/0x1510 [ 272.376339][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 272.382291][ C1] ? finish_swait+0xc7/0x1d0 [ 272.386920][ C1] rcu_gp_kthread+0x99/0x380 [ 272.391565][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 272.396813][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 272.401799][ C1] ? __kthread_parkme+0x162/0x1c0 [ 272.406962][ C1] kthread+0x2fa/0x390 [ 272.411060][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 272.416254][ C1] ? kthread_blkcg+0xd0/0xd0 [ 272.420885][ C1] ret_from_fork+0x48/0x80 [ 272.425339][ C1] ? kthread_blkcg+0xd0/0xd0 [ 272.429975][ C1] ret_from_fork_asm+0x11/0x20 [ 272.434794][ C1] [ 272.437841][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 272.444222][ C1] CPU: 1 PID: 6432 Comm: syz.2.162 Not tainted 6.6.95-syzkaller #0 [ 272.452236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.462322][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 272.468185][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 fa 76 f7 f6 48 89 df e8 12 49 f8 f6 e8 ed f5 1b f7 fb bf 01 00 00 00 52 60 eb f6 65 8b 05 63 b6 93 75 85 c0 74 02 5b c3 e8 40 98 90 [ 272.487826][ C1] RSP: 0018:ffffc9000b647c98 EFLAGS: 00000282 [ 272.493947][ C1] RAX: cec13c6863a22c00 RBX: ffff88807e124a00 RCX: cec13c6863a22c00 [ 272.501952][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 272.509957][ C1] RBP: ffff88807e124a00 R08: ffffffff8e49ac2f R09: 1ffffffff1c93585 [ 272.517965][ C1] R10: dffffc0000000000 R11: fffffbfff1c93586 R12: ffff888023ccda00 [ 272.525970][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000b647e00 [ 272.533980][ C1] FS: 00007f27a83ca6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 272.542954][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.549579][ C1] CR2: 000000110c25ab2a CR3: 00000000234fe000 CR4: 00000000003506e0 [ 272.557600][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.565602][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.573606][ C1] Call Trace: [ 272.576920][ C1] [ 272.579896][ C1] get_signal+0x11f5/0x1400 [ 272.584494][ C1] arch_do_signal_or_restart+0x96/0x780 [ 272.590121][ C1] ? get_sigframe_size+0x20/0x20 [ 272.595129][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 272.600740][ C1] exit_to_user_mode_loop+0x70/0x110 [ 272.606084][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 272.611723][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 272.617244][ C1] do_syscall_64+0x61/0xb0 [ 272.621722][ C1] ? clear_bhb_loop+0x40/0x90 [ 272.626445][ C1] ? clear_bhb_loop+0x40/0x90 [ 272.631177][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.637124][ C1] RIP: 0033:0x7f27a758e929 [ 272.641606][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.661257][ C1] RSP: 002b:00007f27a83ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.669713][ C1] RAX: fffffffffffffe00 RBX: 00007f27a77b5fa8 RCX: 00007f27a758e929 [ 272.677723][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27a77b5fa8 [ 272.685731][ C1] RBP: 00007f27a77b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.693741][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27a77b5fac [ 272.701745][ C1] R13: 0000000000000000 R14: 00007ffd3656c370 R15: 00007ffd3656c458 [ 272.709773][ C1]