last executing test programs: 3.499137699s ago: executing program 0 (id=408): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.412581598s ago: executing program 3 (id=410): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000003c0)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x22e, &(0x7f0000000940)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.19255967s ago: executing program 0 (id=411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00800023c40000000000000000000000000000000000000000000000b331bd4e42cb388a7fc2ab8aea33fffe3e82ee5955beee02c67f90bb49777eead666449a60d939118ed560fe2c0f5dc2cc3937801ae222e422748869a368eb0e7c868f8642f1d5ff56cb7161ee17c550609109545e2a55ccb1f0c9f7ff22ed92ab0a27f08d0593c27fa5c173412edac012ba6718f2774d3a85674e1fb6493878ef94f0d70685457d16ee2b3c3102cc0bce5ecce0cb63901daea1484ad11d3f2433d49c550d6fb41b647a0352"], 0x48) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000)=0xfffffffc, 0xfffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000f00000095000000000000008826d9b730722002af61a390eadd1e18a14c7a1b804cdbd296877defcb8b27d3137c54c0d4edc9f0c5814de259146b967b7cd10c5efb5db0795c447ccf9b1bef"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r8 = open(&(0x7f0000000000)='./file0\x00', 0x500, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.118356641s ago: executing program 3 (id=413): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@dax_always}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@errors_remount}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, 0x0, 0x0, 0xd) 2.708566472s ago: executing program 2 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2, 0x700}}, 0x20) 2.285037263s ago: executing program 2 (id=416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.283319661s ago: executing program 3 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) 2.185463428s ago: executing program 4 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xb) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 2.091315442s ago: executing program 0 (id=419): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 2.037324508s ago: executing program 3 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.02459223s ago: executing program 4 (id=421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) io_uring_setup(0x6ab5, &(0x7f0000000600)={0x0, 0x35e6, 0x400, 0x0, 0x28b}) 1.943146277s ago: executing program 2 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r2}, &(0x7f0000001600), &(0x7f0000001640)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9) pipe(&(0x7f0000000400)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000440)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.292742505s ago: executing program 0 (id=423): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.16455932s ago: executing program 0 (id=424): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x80, 0x3, 0x125}, 0x0, &(0x7f0000000380)=0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0) syz_io_uring_submit(0x0, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0xdc99, 0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.064696473s ago: executing program 1 (id=425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) set_tid_address(0x0) 896.927181ms ago: executing program 1 (id=426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) getpgid(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x3e, 0xc, 0x6, 0x55, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0xffff7e55, 0x4}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee) 766.228546ms ago: executing program 1 (id=427): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@dax_always}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@errors_remount}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, 0x0, 0x0, 0xd) 642.009299ms ago: executing program 4 (id=428): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, 0x0, 0x0, 0x0) 549.47241ms ago: executing program 2 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000003c0)=0x14) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/195, 0xc3}], 0x1) 465.571644ms ago: executing program 1 (id=430): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 450.025254ms ago: executing program 2 (id=431): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r0, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 380.847937ms ago: executing program 4 (id=432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 322.879692ms ago: executing program 4 (id=433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @void, @value=r1}, 0x20) 316.731859ms ago: executing program 1 (id=434): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 144.919615ms ago: executing program 4 (id=435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) r8 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r8, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) sendmsg$sock(r6, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) 144.533877ms ago: executing program 3 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 117.486738ms ago: executing program 0 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 65.148052ms ago: executing program 1 (id=438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) io_uring_setup(0x6ab5, &(0x7f0000000600)={0x0, 0x35e6, 0x400, 0x0, 0x28b}) 250.514µs ago: executing program 2 (id=439): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) msgget$private(0x0, 0x480) 0s ago: executing program 3 (id=440): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@dax_always}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@errors_remount}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) unshare(0x22020600) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, 0x0, 0x0, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 64.674298][ T5811] cgroup: Unknown subsys name 'net' [ 64.809819][ T5811] cgroup: Unknown subsys name 'cpuset' [ 64.818342][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.172181][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.734545][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.742235][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.751318][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.760393][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.768051][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.775198][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.777578][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.782792][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.790299][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.804609][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.807225][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.816773][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.819783][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.827221][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.833474][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.840500][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.853493][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.861111][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.870337][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.878718][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.886389][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.893957][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.905264][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.921305][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.934204][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.325904][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.334405][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.533163][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 71.563960][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.748224][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.805448][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.869560][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.935548][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.943144][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.951427][ T5823] bridge_slave_0: entered allmulticast mode [ 71.958827][ T5823] bridge_slave_0: entered promiscuous mode [ 72.006799][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.013925][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.021209][ T5823] bridge_slave_1: entered allmulticast mode [ 72.029184][ T5823] bridge_slave_1: entered promiscuous mode [ 72.036979][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.044118][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.051407][ T5822] bridge_slave_0: entered allmulticast mode [ 72.058372][ T5822] bridge_slave_0: entered promiscuous mode [ 72.065959][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.073346][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.080530][ T5835] bridge_slave_0: entered allmulticast mode [ 72.087718][ T5835] bridge_slave_0: entered promiscuous mode [ 72.124283][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.131550][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.138871][ T5822] bridge_slave_1: entered allmulticast mode [ 72.145983][ T5822] bridge_slave_1: entered promiscuous mode [ 72.153743][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.160920][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.168475][ T5835] bridge_slave_1: entered allmulticast mode [ 72.175395][ T5835] bridge_slave_1: entered promiscuous mode [ 72.249960][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.294031][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.301395][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.309422][ T5826] bridge_slave_0: entered allmulticast mode [ 72.316431][ T5826] bridge_slave_0: entered promiscuous mode [ 72.325762][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.337821][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.349858][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.370431][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.378322][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.385440][ T5826] bridge_slave_1: entered allmulticast mode [ 72.392758][ T5826] bridge_slave_1: entered promiscuous mode [ 72.413368][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.424592][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.433992][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.441548][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.449092][ T5824] bridge_slave_0: entered allmulticast mode [ 72.456027][ T5824] bridge_slave_0: entered promiscuous mode [ 72.509244][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.517258][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.524379][ T5824] bridge_slave_1: entered allmulticast mode [ 72.531684][ T5824] bridge_slave_1: entered promiscuous mode [ 72.551518][ T5823] team0: Port device team_slave_0 added [ 72.593036][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.604978][ T5823] team0: Port device team_slave_1 added [ 72.612627][ T5822] team0: Port device team_slave_0 added [ 72.621367][ T5835] team0: Port device team_slave_0 added [ 72.639963][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.661667][ T5822] team0: Port device team_slave_1 added [ 72.669207][ T5835] team0: Port device team_slave_1 added [ 72.677599][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.734209][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.755530][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.766293][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.792331][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.836903][ T5826] team0: Port device team_slave_0 added [ 72.843344][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.850814][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.876921][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.889376][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.896307][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.917546][ T5832] Bluetooth: hci1: command tx timeout [ 72.922644][ T5833] Bluetooth: hci0: command tx timeout [ 72.928437][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.945330][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.952652][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.978553][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.002426][ T5826] team0: Port device team_slave_1 added [ 73.008114][ T5832] Bluetooth: hci2: command tx timeout [ 73.008121][ T5839] Bluetooth: hci3: command tx timeout [ 73.017281][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.019749][ T5833] Bluetooth: hci4: command tx timeout [ 73.025988][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.057537][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.069963][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.077307][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.103480][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.116192][ T5824] team0: Port device team_slave_0 added [ 73.147586][ T5824] team0: Port device team_slave_1 added [ 73.189900][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.197143][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.223742][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.275228][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.283141][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.309334][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.325764][ T5823] hsr_slave_0: entered promiscuous mode [ 73.332282][ T5823] hsr_slave_1: entered promiscuous mode [ 73.361645][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.368728][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.395114][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.418846][ T5822] hsr_slave_0: entered promiscuous mode [ 73.425098][ T5822] hsr_slave_1: entered promiscuous mode [ 73.431362][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 73.437171][ T5822] Cannot create hsr debugfs directory [ 73.448416][ T5835] hsr_slave_0: entered promiscuous mode [ 73.454649][ T5835] hsr_slave_1: entered promiscuous mode [ 73.460889][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 73.466813][ T5835] Cannot create hsr debugfs directory [ 73.473102][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.480095][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.506086][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.625559][ T5826] hsr_slave_0: entered promiscuous mode [ 73.632279][ T5826] hsr_slave_1: entered promiscuous mode [ 73.638534][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 73.644261][ T5826] Cannot create hsr debugfs directory [ 73.743602][ T5824] hsr_slave_0: entered promiscuous mode [ 73.750321][ T5824] hsr_slave_1: entered promiscuous mode [ 73.756374][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 73.762174][ T5824] Cannot create hsr debugfs directory [ 74.199546][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.212207][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.222180][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.246365][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.324326][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.343937][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.355697][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.366357][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.463154][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.473856][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.485774][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.512643][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.604689][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.615752][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.632223][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.661543][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.729712][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.793897][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.805311][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.825548][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.847516][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.859029][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.901563][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.908883][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.940641][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.947840][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.960840][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.998703][ T5832] Bluetooth: hci1: command tx timeout [ 74.998712][ T5833] Bluetooth: hci0: command tx timeout [ 75.034640][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.060832][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.067958][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.076678][ T5832] Bluetooth: hci4: command tx timeout [ 75.079514][ T5833] Bluetooth: hci2: command tx timeout [ 75.082316][ T5839] Bluetooth: hci3: command tx timeout [ 75.110876][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.118000][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.148613][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.188394][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.231644][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.282910][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.290119][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.300653][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.307859][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.335352][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.346197][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.371511][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.387942][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.395036][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.421904][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.429100][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.505021][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.574158][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.592072][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.640933][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.648129][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.666037][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.700442][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.707696][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.835311][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.900990][ T5823] veth0_vlan: entered promiscuous mode [ 75.979271][ T5823] veth1_vlan: entered promiscuous mode [ 76.017484][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.102937][ T5823] veth0_macvtap: entered promiscuous mode [ 76.130051][ T5823] veth1_macvtap: entered promiscuous mode [ 76.170473][ T5824] veth0_vlan: entered promiscuous mode [ 76.215852][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.250701][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.269461][ T5824] veth1_vlan: entered promiscuous mode [ 76.276048][ T5822] veth0_vlan: entered promiscuous mode [ 76.284019][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.320071][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.330103][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.342638][ T5822] veth1_vlan: entered promiscuous mode [ 76.350391][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.361581][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.435474][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.512781][ T5824] veth0_macvtap: entered promiscuous mode [ 76.543759][ T5824] veth1_macvtap: entered promiscuous mode [ 76.564528][ T5835] veth0_vlan: entered promiscuous mode [ 76.587709][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.595646][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.612240][ T5835] veth1_vlan: entered promiscuous mode [ 76.628093][ T5822] veth0_macvtap: entered promiscuous mode [ 76.661893][ T5822] veth1_macvtap: entered promiscuous mode [ 76.689608][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.736205][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.755697][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.766274][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.778132][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.785870][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.795656][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.813510][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.822321][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857519][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.874237][ T5835] veth0_macvtap: entered promiscuous mode [ 76.882083][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.892838][ T5835] veth1_macvtap: entered promiscuous mode [ 76.908086][ T3492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923778][ T3492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940442][ T3492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959143][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.052167][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.077820][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.077868][ T5839] Bluetooth: hci1: command tx timeout [ 77.087097][ T5839] Bluetooth: hci0: command tx timeout [ 77.147894][ T5826] veth0_vlan: entered promiscuous mode [ 77.159676][ T5832] Bluetooth: hci3: command tx timeout [ 77.159689][ T5833] Bluetooth: hci4: command tx timeout [ 77.171390][ T5839] Bluetooth: hci2: command tx timeout [ 77.184003][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.223337][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.241204][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.252869][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.263404][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.272659][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.338647][ T5826] veth1_vlan: entered promiscuous mode [ 77.382298][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.390429][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.457896][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.465744][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.536047][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.555284][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.593759][ T5826] veth0_macvtap: entered promiscuous mode [ 77.623080][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.635894][ T5826] veth1_macvtap: entered promiscuous mode [ 77.674187][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.843739][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.861715][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.878734][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.946083][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.111493][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171414][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.196200][ T5960] loop3: detected capacity change from 0 to 1024 [ 78.206343][ T3492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222629][ T5960] ======================================================= [ 78.222629][ T5960] WARNING: The mand mount option has been deprecated and [ 78.222629][ T5960] and is ignored by this kernel. Remove the mand [ 78.222629][ T5960] option from the mount to silence this warning. [ 78.222629][ T5960] ======================================================= [ 78.286012][ T3492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368553][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.416273][ T5960] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.531825][ T5960] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.9: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.553819][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.626052][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.656017][ T5960] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 78.707026][ T5960] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.707026][ T5960] [ 78.772350][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.820440][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.908677][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.161338][ T5839] Bluetooth: hci1: command tx timeout [ 79.167751][ T5832] Bluetooth: hci0: command tx timeout [ 79.238054][ T5839] Bluetooth: hci3: command tx timeout [ 79.243491][ T5839] Bluetooth: hci2: command tx timeout [ 79.249088][ T5832] Bluetooth: hci4: command tx timeout [ 79.466035][ T5984] netlink: 'syz.3.12': attribute type 13 has an invalid length. [ 80.379582][ T5984] gretap0: refused to change device tx_queue_len [ 80.386450][ T5984] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.019970][ T5993] loop1: detected capacity change from 0 to 512 [ 81.104339][ T5993] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.16: inode has both inline data and extents flags [ 81.129187][ T30] audit: type=1326 audit(1765216265.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.220252][ T5993] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.16: couldn't read orphan inode 15 (err -117) [ 81.269765][ T30] audit: type=1326 audit(1765216265.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.311379][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.362753][ T30] audit: type=1326 audit(1765216265.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.414793][ T30] audit: type=1326 audit(1765216265.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.448582][ T30] audit: type=1326 audit(1765216265.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.494435][ T30] audit: type=1326 audit(1765216265.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.791608][ T30] audit: type=1326 audit(1765216265.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.806191][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.844614][ T30] audit: type=1326 audit(1765216265.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 81.897072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.911177][ T6003] tipc: Started in network mode [ 81.916410][ T6003] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.950585][ T6003] tipc: Enabled bearer , priority 10 [ 81.999885][ T30] audit: type=1326 audit(1765216265.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 82.079746][ T30] audit: type=1326 audit(1765216265.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 82.116826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.198607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.696868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.828353][ T6027] Zero length message leads to an empty skb [ 83.080122][ T6036] binder: BINDER_SET_CONTEXT_MGR already set [ 83.088653][ T49] tipc: Node number set to 2886997162 [ 83.097422][ T6036] binder: 6035:6036 ioctl 4018620d 200000000100 returned -16 [ 83.266976][ T5886] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.318936][ T5977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.443839][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 83.459960][ T6042] binder: BINDER_SET_CONTEXT_MGR already set [ 83.465980][ T6042] binder: 6035:6042 ioctl 4018620d 2000000002c0 returned -16 [ 83.466317][ T5886] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 83.488416][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.504015][ T5886] usb 5-1: config 0 descriptor?? [ 83.515989][ T5977] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.532589][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.553991][ T6033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.569554][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.580405][ T5977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.596957][ T5977] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.617652][ T5977] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.636102][ T5977] usb 2-1: Manufacturer: syz [ 83.669121][ T5977] usb 2-1: config 0 descriptor?? [ 84.062166][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 84.075765][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 84.114984][ T5977] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 84.127942][ T5886] usb 5-1: USB disconnect, device number 2 [ 84.150752][ T5977] appleir 0003:05AC:8243.0001: parse failed [ 84.162383][ T5977] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22 [ 84.303552][ T5977] usb 2-1: USB disconnect, device number 2 [ 84.687308][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.779739][ T6048] syzkaller0: entered promiscuous mode [ 84.785377][ T6048] syzkaller0: entered allmulticast mode [ 85.561875][ T6068] loop4: detected capacity change from 0 to 1024 [ 85.603444][ T6068] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.638347][ T6068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.650915][ T6068] JBD2: no valid journal superblock found [ 85.659091][ T6068] EXT4-fs (loop4): Could not load journal inode [ 85.687199][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.776624][ T5886] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 85.898497][ T5893] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.931520][ T5893] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 85.943606][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 85.967739][ T5886] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 86.000568][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.020896][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.045345][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.083665][ T5886] usb 2-1: config 0 descriptor?? [ 86.099933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.141109][ T5893] usb 1-1: Product: syz [ 86.145298][ T5893] usb 1-1: Manufacturer: syz [ 86.156273][ T5893] usb 1-1: SerialNumber: syz [ 86.161670][ T6072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.303233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.312788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.591842][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 86.636223][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.667594][ T5886] usb 2-1: USB disconnect, device number 3 [ 86.704704][ T108] cfg80211: failed to load regulatory.db [ 87.018334][ T6083] loop3: detected capacity change from 0 to 1024 [ 87.057641][ T6083] EXT4-fs: inline encryption not supported [ 87.090218][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.207628][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.216950][ T6088] loop1: detected capacity change from 0 to 2048 [ 87.220548][ T5893] cdc_ncm 1-1:1.0: bind() failure [ 87.228390][ T6088] EXT4-fs: Ignoring removed bh option [ 87.288815][ T5893] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 87.295659][ T5893] cdc_ncm 1-1:1.1: bind() failure [ 87.309862][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.334421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 87.345043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 87.438072][ T5900] usb 1-1: USB disconnect, device number 2 [ 87.596729][ T5886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.768888][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.796790][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.804487][ T6099] syzkaller0: entered promiscuous mode [ 87.806618][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 87.826125][ T6099] syzkaller0: entered allmulticast mode [ 87.840779][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.868059][ T5886] usb 2-1: config 0 descriptor?? [ 87.888890][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.159014][ T6122] mmap: syz.2.61 (6122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.666592][ T108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.886782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.030135][ T108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.058750][ T108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 90.079271][ T108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.102841][ T108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.116907][ T6086] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.149659][ T108] usb 3-1: Product: syz [ 90.177014][ T108] usb 3-1: Manufacturer: syz [ 90.204149][ T5977] usb 2-1: USB disconnect, device number 4 [ 90.216587][ T108] usb 3-1: SerialNumber: syz [ 90.227363][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.537839][ T6140] syzkaller0: entered promiscuous mode [ 90.550087][ T6140] syzkaller0: entered allmulticast mode [ 90.740861][ T6145] process 'syz.4.68' launched '/dev/fd/7' with NULL argv: empty string added [ 91.391955][ T6161] loop3: detected capacity change from 0 to 8192 [ 91.428532][ T108] cdc_ncm 3-1:1.0: bind() failure [ 91.480887][ T108] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 91.499220][ T108] cdc_ncm 3-1:1.1: bind() failure [ 91.506146][ T6161] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 91.521047][ T6161] FAT-fs (loop3): Filesystem has been set read-only [ 91.634793][ T5893] usb 3-1: USB disconnect, device number 2 [ 92.662209][ T6177] netlink: 19 bytes leftover after parsing attributes in process `syz.0.80'. [ 92.841623][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 92.841741][ T30] audit: type=1326 audit(1765216277.480:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be2f8f749 code=0x7ffc0000 [ 92.967460][ T30] audit: type=1326 audit(1765216277.480:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be2f8f749 code=0x7ffc0000 [ 93.040151][ T30] audit: type=1326 audit(1765216277.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7be2f8f749 code=0x7ffc0000 [ 93.091842][ T6181] loop2: detected capacity change from 0 to 8192 [ 93.098689][ T30] audit: type=1326 audit(1765216277.480:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be2f8f749 code=0x7ffc0000 [ 93.208781][ T30] audit: type=1326 audit(1765216277.510:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be2f8f749 code=0x7ffc0000 [ 94.631412][ T6203] loop1: detected capacity change from 0 to 2048 [ 94.735983][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 94.946085][ T6203] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.033953][ T6203] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 684 with error 28 [ 95.108457][ T6203] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.108457][ T6203] [ 95.163281][ T6203] EXT4-fs (loop1): Total free blocks count 0 [ 95.192643][ T6203] EXT4-fs (loop1): Free/Dirty block details [ 95.216590][ T6203] EXT4-fs (loop1): free_blocks=2415919104 [ 95.234983][ T6203] EXT4-fs (loop1): dirty_blocks=688 [ 95.253779][ T6203] EXT4-fs (loop1): Block reservation details [ 95.274045][ T6203] EXT4-fs (loop1): i_reserved_data_blocks=43 [ 95.722668][ T6216] loop3: detected capacity change from 0 to 4096 [ 95.810939][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.424987][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.599369][ T3492] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 96.835424][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 97.173226][ T6239] loop1: detected capacity change from 0 to 512 [ 97.239701][ T6239] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 97.302300][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 97.372397][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.000361][ T6239] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 4: comm syz.1.104: lblock 0 mapped to illegal pblock 4 (length 1) [ 98.240867][ T6249] netlink: 360 bytes leftover after parsing attributes in process `syz.4.106'. [ 98.251041][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.451181][ T6253] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use) [ 99.701136][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.722508][ T6274] batadv_slave_0: entered promiscuous mode [ 99.947300][ T6279] loop1: detected capacity change from 0 to 128 [ 99.987877][ T6279] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.036282][ T6279] FAT-fs (loop1): Filesystem has been set read-only [ 100.515894][ T6279] syz.1.117: attempt to access beyond end of device [ 100.515894][ T6279] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 100.544764][ T6279] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.562418][ T6279] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.682448][ T6279] syz.1.117: attempt to access beyond end of device [ 100.682448][ T6279] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 100.698112][ T30] audit: type=1800 audit(1765216285.340:18): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.117" name="file2" dev="loop1" ino=1048608 res=0 errno=0 [ 100.881770][ T30] audit: type=1326 audit(1765216285.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 100.952234][ T30] audit: type=1326 audit(1765216285.520:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 101.062870][ T30] audit: type=1326 audit(1765216285.520:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 102.037976][ T6305] loop1: detected capacity change from 0 to 256 [ 102.135971][ T6309] loop3: detected capacity change from 0 to 128 [ 102.231476][ T30] audit: type=1804 audit(1765216286.870:22): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.127" name="/newroot/26/file0/bus" dev="loop3" ino=1048614 res=1 errno=0 [ 102.247565][ T6309] veth0: entered promiscuous mode [ 102.942389][ T6327] binder: BINDER_SET_CONTEXT_MGR already set [ 102.955058][ T6327] binder: 6326:6327 ioctl 4018620d 200000000100 returned -16 [ 103.281109][ T6339] loop1: detected capacity change from 0 to 512 [ 103.313437][ T6306] veth0: left promiscuous mode [ 103.355422][ T6341] binder: BINDER_SET_CONTEXT_MGR already set [ 103.376899][ T6341] binder: 6326:6341 ioctl 4018620d 2000000002c0 returned -16 [ 103.612856][ T6346] netlink: 'syz.4.141': attribute type 5 has an invalid length. [ 103.904545][ T6354] loop4: detected capacity change from 0 to 128 [ 104.234514][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 105.897525][ T6388] loop4: detected capacity change from 0 to 256 [ 105.983795][ T6388] FAT-fs (loop4): Directory bread(block 1285) failed [ 106.026769][ T6388] FAT-fs (loop4): Directory bread(block 1285) failed [ 106.042084][ T6388] FAT-fs (loop4): Directory bread(block 1285) failed [ 106.060154][ T6388] FAT-fs (loop4): Directory bread(block 1285) failed [ 107.253638][ T6398] binder: BINDER_SET_CONTEXT_MGR already set [ 107.273902][ T6398] binder: 6395:6398 ioctl 4018620d 200000000100 returned -16 [ 108.347682][ T6415] IPVS: length: 29 != 8 [ 108.356842][ T6414] syzkaller0: entered promiscuous mode [ 108.362328][ T6414] syzkaller0: entered allmulticast mode [ 108.863012][ T6426] loop1: detected capacity change from 0 to 512 [ 108.997739][ T6426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.079495][ T6426] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (b000000) [ 109.134508][ T6426] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 109.216167][ T30] audit: type=1326 audit(1765216293.850:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 109.301951][ T30] audit: type=1326 audit(1765216293.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 109.764478][ T30] audit: type=1326 audit(1765216293.880:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 109.845018][ T30] audit: type=1326 audit(1765216293.880:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 109.935812][ T30] audit: type=1326 audit(1765216293.880:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.010717][ T6441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.026638][ T30] audit: type=1326 audit(1765216293.890:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.086234][ T30] audit: type=1326 audit(1765216293.890:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.145004][ T30] audit: type=1326 audit(1765216293.890:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.224507][ T30] audit: type=1326 audit(1765216293.890:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.290655][ T6441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.292120][ T30] audit: type=1326 audit(1765216293.890:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 110.429327][ T6462] loop4: detected capacity change from 0 to 128 [ 110.473690][ T6441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.490120][ T6462] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.501551][ T6466] loop1: detected capacity change from 0 to 164 [ 110.560880][ T6462] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.677999][ T6441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.729479][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.803930][ T1163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.940420][ T3148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.035429][ T3148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.106740][ T3148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.299655][ T6479] loop4: detected capacity change from 0 to 512 [ 112.283671][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.297724][ T6479] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.343619][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.399523][ T6492] binder: BINDER_SET_CONTEXT_MGR already set [ 113.429295][ T6492] binder: 6491:6492 ioctl 4018620d 200000000100 returned -16 [ 114.034698][ T6504] syzkaller0: entered promiscuous mode [ 114.050528][ T6504] syzkaller0: entered allmulticast mode [ 114.285120][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.322679][ T6511] batadv_slave_0: entered promiscuous mode [ 114.342994][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 114.680335][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 114.680352][ T30] audit: type=1326 audit(1765216299.310:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 114.717035][ T6523] loop3: detected capacity change from 0 to 128 [ 114.787020][ T30] audit: type=1326 audit(1765216299.310:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 114.849902][ T30] audit: type=1326 audit(1765216299.310:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 114.937868][ T30] audit: type=1326 audit(1765216299.310:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 115.013928][ T30] audit: type=1326 audit(1765216299.310:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c3cd8f783 code=0x7ffc0000 [ 115.065408][ T30] audit: type=1326 audit(1765216299.310:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c3cd8e1ff code=0x7ffc0000 [ 115.136712][ T30] audit: type=1326 audit(1765216299.310:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c3cd8f7d7 code=0x7ffc0000 [ 115.213512][ T30] audit: type=1326 audit(1765216299.310:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c3cd8df90 code=0x7ffc0000 [ 115.239335][ T30] audit: type=1326 audit(1765216299.310:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c3cd8f34b code=0x7ffc0000 [ 115.342685][ T30] audit: type=1326 audit(1765216299.360:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c3cd8e3aa code=0x7ffc0000 [ 115.480362][ T6533] loop3: detected capacity change from 0 to 512 [ 115.563300][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.648798][ T6533] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.727528][ T6531] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.207: corrupted inode contents [ 115.798898][ T6531] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.207: mark_inode_dirty error [ 115.909978][ T6531] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.207: corrupted inode contents [ 115.958631][ T6547] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.995833][ T6549] dummy0: entered promiscuous mode [ 116.014353][ T6549] macsec1: entered promiscuous mode [ 116.035378][ T6549] macsec1: entered allmulticast mode [ 116.047509][ T6549] dummy0: entered allmulticast mode [ 116.063794][ T6549] dummy0: left allmulticast mode [ 116.074240][ T6549] dummy0: left promiscuous mode [ 116.090630][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.127555][ T6551] loop4: detected capacity change from 0 to 512 [ 116.172655][ T6551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.248830][ T6551] EXT4-fs (loop4): 1 truncate cleaned up [ 116.282450][ T6551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.335168][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.375146][ T6556] batadv_slave_0: entered promiscuous mode [ 116.550208][ T6560] loop1: detected capacity change from 0 to 1024 [ 116.575116][ T6560] EXT4-fs: Ignoring removed oldalloc option [ 116.593613][ T6560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.635904][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.830690][ T6565] loop2: detected capacity change from 0 to 1024 [ 116.867417][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.891022][ T6565] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.963626][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.035530][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.097335][ T6571] binder: BINDER_SET_CONTEXT_MGR already set [ 117.103347][ T6571] binder: 6568:6571 ioctl 4018620d 200000000100 returned -16 [ 117.420560][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.087106][ T6598] loop2: detected capacity change from 0 to 128 [ 118.209477][ T6598] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 118.254341][ T6604] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.329138][ T6598] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.689172][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.977165][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.228042][ T6625] syz_tun: entered promiscuous mode [ 120.240111][ T6625] syz_tun: left promiscuous mode [ 120.368183][ T6631] loop4: detected capacity change from 0 to 256 [ 120.509716][ T6631] FAT-fs (loop4): Directory bread(block 1285) failed [ 120.680320][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 120.680336][ T30] audit: type=1326 audit(1765216305.320:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 120.712463][ T6643] binder: BINDER_SET_CONTEXT_MGR already set [ 120.730861][ T6643] binder: 6634:6643 ioctl 4018620d 2000000002c0 returned -16 [ 120.749949][ T30] audit: type=1326 audit(1765216305.360:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 120.772808][ T30] audit: type=1326 audit(1765216305.360:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 120.795526][ T30] audit: type=1326 audit(1765216305.360:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 120.861148][ T30] audit: type=1326 audit(1765216305.360:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 120.941524][ T30] audit: type=1326 audit(1765216305.360:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 121.016875][ T30] audit: type=1326 audit(1765216305.360:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 121.108448][ T30] audit: type=1326 audit(1765216305.360:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 121.164351][ T30] audit: type=1326 audit(1765216305.360:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 121.186804][ T30] audit: type=1326 audit(1765216305.360:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859f58f749 code=0x7ffc0000 [ 121.284604][ T6646] loop3: detected capacity change from 0 to 128 [ 121.483787][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.493016][ T6652] batadv_slave_0: entered promiscuous mode [ 121.869278][ T6663] xt_connbytes: Forcing CT accounting to be enabled [ 121.876080][ T6663] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 121.926458][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 121.935562][ T6663] netlink: 'syz.0.253': attribute type 30 has an invalid length. [ 121.967709][ T6017] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.975947][ T6017] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.022101][ T6017] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.049940][ T6017] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.111623][ T6672] loop4: detected capacity change from 0 to 256 [ 122.139611][ T6672] FAT-fs (loop4): Directory bread(block 1285) failed [ 122.294351][ T6675] loop0: detected capacity change from 0 to 1024 [ 122.302063][ T6677] loop1: detected capacity change from 0 to 1024 [ 122.342941][ T6675] EXT4-fs: inline encryption not supported [ 122.354252][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 122.374337][ T6675] EXT4-fs: Ignoring removed orlov option [ 122.389827][ T6679] random: crng reseeded on system resumption [ 122.417560][ T6675] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.519338][ T6675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 122.529656][ T6675] System zones: 0-1, 3-12 [ 122.536093][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.706208][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.801696][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 123.005442][ T6696] syz.1.264 uses obsolete (PF_INET,SOCK_PACKET) [ 123.046215][ T6695] binder: BINDER_SET_CONTEXT_MGR already set [ 123.080406][ T6695] binder: 6694:6695 ioctl 4018620d 200000000100 returned -16 [ 123.104399][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 123.256711][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 123.751729][ T6711] loop2: detected capacity change from 0 to 1024 [ 123.763318][ T6711] EXT4-fs: Ignoring removed orlov option [ 123.780401][ T6712] binder: BINDER_SET_CONTEXT_MGR already set [ 123.874282][ T6712] binder: 6694:6712 ioctl 4018620d 2000000002c0 returned -16 [ 123.929550][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.964059][ T6718] loop0: detected capacity change from 0 to 512 [ 124.011853][ T6718] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.270: inode has both inline data and extents flags [ 124.024749][ T6711] EXT4-fs (loop2): shut down requested (2) [ 124.070510][ T6718] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.270: couldn't read orphan inode 15 (err -117) [ 124.090266][ T6718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.156729][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.273072][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.354398][ T6726] loop2: detected capacity change from 0 to 164 [ 124.412458][ T6726] iso9660: Bad value for 'check' [ 124.423561][ T6728] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 124.506568][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.540471][ T6728] team0: Port device bond0 added [ 125.031059][ T6733] loop0: detected capacity change from 0 to 1024 [ 125.067526][ T6733] EXT4-fs: Ignoring removed oldalloc option [ 125.095908][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'. [ 125.105013][ T6733] EXT4-fs: Ignoring removed bh option [ 125.212743][ T6733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.411577][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.563174][ T6754] loop3: detected capacity change from 0 to 512 [ 125.607008][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.282: inode has both inline data and extents flags [ 125.656651][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.282: couldn't read orphan inode 15 (err -117) [ 125.670530][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.734130][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.283'. [ 125.820630][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.019556][ T6769] loop4: detected capacity change from 0 to 512 [ 126.046295][ T6767] Driver unsupported XDP return value 0 on prog (id 149) dev N/A, expect packet loss! [ 126.086892][ T6769] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 126.110570][ T6769] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.161044][ T6769] __quota_error: 41 callbacks suppressed [ 126.161060][ T6769] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 126.178587][ T6769] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 126.183475][ T6774] syzkaller0: entered promiscuous mode [ 126.188369][ T6769] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.289: Failed to acquire dquot type 1 [ 126.193711][ T6774] syzkaller0: entered allmulticast mode [ 126.212651][ T6769] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.289: bg 0: block 40: padding at end of block bitmap is not set [ 126.230038][ T6769] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 126.241882][ T6769] EXT4-fs (loop4): 1 truncate cleaned up [ 126.249727][ T6769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.292238][ T6775] binder: BINDER_SET_CONTEXT_MGR already set [ 126.316725][ T6775] binder: 6764:6775 ioctl 4018620d 2000000002c0 returned -16 [ 126.451778][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.491918][ T6780] delete_channel: no stack [ 126.818752][ T6791] loop2: detected capacity change from 0 to 512 [ 126.898207][ T6791] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.296: inode has both inline data and extents flags [ 126.992824][ T6791] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.296: couldn't read orphan inode 15 (err -117) [ 127.065093][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.150477][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.860700][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.305'. [ 128.828729][ T30] audit: type=1326 audit(1765216313.470:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 128.886648][ T30] audit: type=1326 audit(1765216313.470:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 128.916041][ T6834] loop4: detected capacity change from 0 to 512 [ 128.946830][ T30] audit: type=1326 audit(1765216313.470:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 128.970595][ T30] audit: type=1326 audit(1765216313.470:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 129.027777][ T6834] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.311: inode has both inline data and extents flags [ 129.048567][ T6834] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.311: couldn't read orphan inode 15 (err -117) [ 129.115371][ T6834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.133288][ T30] audit: type=1326 audit(1765216313.470:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7ffc0000 [ 129.228571][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.559546][ T6857] netlink: 256 bytes leftover after parsing attributes in process `syz.1.321'. [ 129.581122][ T6857] ksmbd: Unknown IPC event: 3, ignore. [ 131.881238][ T6917] loop4: detected capacity change from 0 to 128 [ 132.141733][ T6923] loop4: detected capacity change from 0 to 128 [ 132.401160][ T6927] netlink: 256 bytes leftover after parsing attributes in process `syz.1.347'. [ 132.427631][ T30] audit: type=1326 audit(1765216317.040:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x0 [ 132.449859][ T6927] ksmbd: Unknown IPC event: 3, ignore. [ 132.674699][ T6942] loop1: detected capacity change from 0 to 128 [ 132.762899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773129][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.875771][ T6986] loop1: detected capacity change from 0 to 1024 [ 133.896179][ T6989] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 133.906081][ T6986] EXT4-fs: inline encryption not supported [ 133.923434][ T6986] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 134.057006][ T6989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.150077][ T6992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.167690][ T6992] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 134.185040][ T6992] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 134.277044][ T30] audit: type=1326 audit(1765216318.920:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 134.307619][ T7000] loop1: detected capacity change from 0 to 128 [ 134.314985][ T30] audit: type=1326 audit(1765216318.920:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 134.359608][ T30] audit: type=1326 audit(1765216318.920:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 134.513188][ T30] audit: type=1326 audit(1765216318.920:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 134.536890][ T30] audit: type=1326 audit(1765216318.920:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 135.104070][ T30] audit: type=1326 audit(1765216318.920:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 135.207167][ T30] audit: type=1326 audit(1765216318.920:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 135.276284][ T30] audit: type=1326 audit(1765216318.920:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 135.376653][ T30] audit: type=1326 audit(1765216318.920:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd8f749 code=0x7fc00000 [ 135.527850][ T7012] 9p: Bad value for 'wfdno' [ 135.745777][ T7018] loop1: detected capacity change from 0 to 128 [ 135.774282][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 135.789267][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.830461][ T7018] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.896844][ T7018] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.921089][ T7030] loop0: detected capacity change from 0 to 128 [ 136.006415][ T7016] bridge_slave_0 (unregistering): left allmulticast mode [ 136.013802][ T7016] bridge_slave_0 (unregistering): left promiscuous mode [ 136.021592][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.340134][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.943789][ T7045] binder: BINDER_SET_CONTEXT_MGR already set [ 136.953863][ T7045] binder: 7044:7045 ioctl 4018620d 200000000100 returned -16 [ 137.055636][ T7047] loop2: detected capacity change from 0 to 1024 [ 137.093711][ T7047] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.141329][ T7047] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.226562][ T7047] JBD2: no valid journal superblock found [ 137.284284][ T7047] EXT4-fs (loop2): Could not load journal inode [ 137.337455][ T7054] binder: BINDER_SET_CONTEXT_MGR already set [ 137.343476][ T7054] binder: 7044:7054 ioctl 4018620d 2000000002c0 returned -16 [ 137.673956][ T7064] loop2: detected capacity change from 0 to 128 [ 137.958946][ T7070] loop2: detected capacity change from 0 to 128 [ 138.020047][ T7070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.053560][ T7070] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.247873][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.568958][ T7082] loop2: detected capacity change from 0 to 2048 [ 138.616263][ T7087] loop4: detected capacity change from 0 to 2048 [ 138.653230][ T7082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 138.689654][ T7095] loop3: detected capacity change from 0 to 128 [ 138.719093][ T7087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.756749][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 138.756765][ T30] audit: type=1326 audit(1765216323.390:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 138.887274][ T7087] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.902335][ T30] audit: type=1326 audit(1765216323.420:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 138.972235][ T30] audit: type=1326 audit(1765216323.420:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.041615][ T30] audit: type=1326 audit(1765216323.420:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.105869][ T7105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 345: padding at end of block bitmap is not set [ 139.120427][ T30] audit: type=1326 audit(1765216323.430:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.146706][ T30] audit: type=1326 audit(1765216323.430:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.180290][ T7105] EXT4-fs (loop4): Remounting filesystem read-only [ 139.191545][ T3492] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5015: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 139.239487][ T30] audit: type=1326 audit(1765216323.430:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.272641][ T30] audit: type=1326 audit(1765216323.430:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.324813][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.349878][ T30] audit: type=1326 audit(1765216323.430:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.380745][ T30] audit: type=1326 audit(1765216323.430:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d178f749 code=0x7ffc0000 [ 139.422856][ T7108] loop3: detected capacity change from 0 to 1024 [ 139.474149][ T7108] EXT4-fs: inline encryption not supported [ 139.508977][ T7108] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 139.556282][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.039133][ T7121] binder: BINDER_SET_CONTEXT_MGR already set [ 140.045153][ T7121] binder: 7119:7121 ioctl 4018620d 200000000100 returned -16 [ 140.470532][ T7133] binder: BINDER_SET_CONTEXT_MGR already set [ 140.504327][ T7132] tipc: Started in network mode [ 140.509269][ T7132] tipc: Node identity ac1414aa, cluster identity 4711 [ 140.518259][ T7132] tipc: Enabled bearer , priority 10 [ 140.567828][ T7133] binder: 7119:7133 ioctl 4018620d 2000000002c0 returned -16 [ 141.130029][ T7130] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 141.345604][ T7146] loop1: detected capacity change from 0 to 1024 [ 141.372615][ T7146] EXT4-fs: inline encryption not supported [ 141.400949][ T7146] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 141.637702][ T5976] tipc: Node number set to 2886997162 [ 141.991078][ T7170] [ 141.993616][ T7170] ============================= [ 141.998557][ T7170] WARNING: suspicious RCU usage [ 142.003901][ T7170] syzkaller #0 Not tainted [ 142.008870][ T7170] ----------------------------- [ 142.013720][ T7170] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 142.023029][ T7170] [ 142.023029][ T7170] other info that might help us debug this: [ 142.023029][ T7170] [ 142.033445][ T7170] [ 142.033445][ T7170] rcu_scheduler_active = 2, debug_locks = 1 [ 142.041573][ T7170] 1 lock held by syz.0.437/7170: [ 142.046572][ T7170] #0: ffffffff8df41bc0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 142.057440][ T7170] [ 142.057440][ T7170] stack backtrace: [ 142.061599][ T7174] loop3: detected capacity change from 0 to 1024 [ 142.063353][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.0.437 Not tainted syzkaller #0 PREEMPT(full) [ 142.063373][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.063387][ T7170] Call Trace: [ 142.063395][ T7170] [ 142.063404][ T7170] dump_stack_lvl+0x189/0x250 [ 142.063432][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.063453][ T7170] ? __pfx__printk+0x10/0x10 [ 142.063474][ T7170] ? __lock_acquire+0x6b6/0x2cf0 [ 142.063512][ T7170] lockdep_rcu_suspicious+0x140/0x1d0 [ 142.063537][ T7170] get_callchain_entry+0x2b6/0x3c0 [ 142.063563][ T7170] get_perf_callchain+0xb3/0x820 [ 142.063585][ T7170] ? __cgroup_account_cputime+0xe5/0x120 [ 142.063608][ T7170] ? __pfx_get_perf_callchain+0x10/0x10 [ 142.063634][ T7170] ? update_curr+0x226/0x500 [ 142.063665][ T7170] __bpf_get_stack+0x45b/0xaa0 [ 142.063697][ T7170] ? __pfx___bpf_get_stack+0x10/0x10 [ 142.063731][ T7170] bpf_get_stack+0x33/0x50 [ 142.063751][ T7170] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 142.063771][ T7170] bpf_get_stack_raw_tp+0x1a9/0x220 [ 142.063799][ T7170] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 142.063815][ T7170] bpf_prog_run_pin_on_cpu+0x143/0x480 [ 142.063854][ T7170] bpf_prog_test_run_syscall+0x312/0x4b0 [ 142.063881][ T7170] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 142.063902][ T7170] ? __fget_files+0x2a/0x420 [ 142.063929][ T7170] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 142.063951][ T7170] bpf_prog_test_run+0x2c7/0x340 [ 142.063979][ T7170] __sys_bpf+0x562/0x860 [ 142.064004][ T7170] ? __pfx___sys_bpf+0x10/0x10 [ 142.064024][ T7170] ? kvm_sched_clock_read+0x11/0x20 [ 142.064078][ T7170] __x64_sys_bpf+0x7c/0x90 [ 142.064100][ T7170] do_syscall_64+0xfa/0xf80 [ 142.064117][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.064135][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 142.064156][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.064173][ T7170] RIP: 0033:0x7fa0c8b8f749 [ 142.064189][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.064204][ T7170] RSP: 002b:00007fa0c9adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.064222][ T7170] RAX: ffffffffffffffda RBX: 00007fa0c8de5fa0 RCX: 00007fa0c8b8f749 [ 142.064236][ T7170] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 142.064248][ T7170] RBP: 00007fa0c8c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.064258][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.064268][ T7170] R13: 00007fa0c8de6038 R14: 00007fa0c8de5fa0 R15: 00007ffdaf8b1738 [ 142.064297][ T7170] [ 142.225418][ T7178] tipc: Started in network mode [ 142.348672][ T7174] EXT4-fs: inline encryption not supported [ 142.402295][ T7174] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 142.416193][ T7178] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.442273][ T7178] tipc: Enabled bearer , priority 10 [ 143.568561][ T108] tipc: Node number set to 2886997162