last executing test programs: 3.325734328s ago: executing program 3 (id=258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3.277980803s ago: executing program 2 (id=259): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000100)=0x225a, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 3.20573353s ago: executing program 3 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.929779668s ago: executing program 2 (id=263): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003040)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.90859627s ago: executing program 3 (id=265): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.682395563s ago: executing program 2 (id=268): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r4, &(0x7f0000000380)="e62b48a6c3219c9acf8e8c796997127244e24250ab2fe99562c0b6edea2d3a2f3419cf322c26dbb6838f36887b7fb9049b27b629b9b7ceac0e17203f409eedf5e285c1a767c6e6f76a496bde823e38c325e53756fbba6df4d081585df7cae672f1423cea2007a1e00ad6e543b4129a8e237811ead66c4f3cb16d8914d7ae88eeefc9e855666d7b0497ab53f343363c7e79ca098af7f18b7bbe18455c83f6e4b511424f075cfcba7fbc5fe93db527ddd5924e7a652a0c5b8007b38089cdbd47", 0xbf, 0x7, &(0x7f0000000000)={0x77359400}) 2.601870091s ago: executing program 1 (id=269): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x81, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.60135924s ago: executing program 3 (id=270): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x81, @mcast2, 0x4}, 0x1c, &(0x7f0000003040)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1.679935432s ago: executing program 1 (id=271): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.649370235s ago: executing program 3 (id=272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) unshare(0x62040200) syz_usb_disconnect(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.421788288s ago: executing program 1 (id=274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x180, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xc5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b369726"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.348502246s ago: executing program 0 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) 1.277115052s ago: executing program 0 (id=276): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003040)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1.221948218s ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380), 0x1, 0x572, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.161041664s ago: executing program 1 (id=278): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 960.460704ms ago: executing program 0 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xbffff4f1, 0x2}) 789.468671ms ago: executing program 0 (id=280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x81, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 725.928597ms ago: executing program 2 (id=281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x89, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x10, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xfb}}]}}}], 0xa8}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x81, @mcast2, 0x4}, 0x1c, &(0x7f0000003040)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000003100)=ANY=[], 0x320}}, {{&(0x7f0000003440)={0xa, 0xff, 0x5, @private0, 0x3}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003480)="e1b4178b4c9d134a07d939f27f9d846d73415076d2cb581b302e21b8a49c36010ca5cab6ecb4a4d86915f3a5ee81bfe942f9350ef2ea7b357d8d6253979e1e76994488d3feae1daa0826692263e70e914e09a609ee51057ca571f9e3fe8c44ac95f79a859549e71200756712d8b56a20ae1d7f1964ef9dff9b4c318e2a63f81e401bcfffec4b01204a6c043ece6e8580bcceb33f0817dcceb13a54ec5522e58aeb3237272a2cb55a50cd8f7f3751d7ac1be02cb2f1b0abf17c98dd14e3c2e90c2ae2810cbe75e4a812733cbbd38070fb27d57e223d49f28bcf0f6516d145a2a4831fc2e5fb858129801a9cf126e9a9155e", 0xf1}, {&(0x7f00000035c0)="c015cf69ff7e22c7ce0065282d2604cf53f38aa8ef56e9ab6a8b54645cfe0b461b8a65f5f915472bf62d059c43d8f57dcce22e01861f8daff373302f53133f0367d46c23a5d5217b6deaa8b90343b442d80ceb19c07d0df6", 0x58}], 0x2, &(0x7f0000003700)}}, {{&(0x7f0000003880)={0xa, 0x4e24, 0x9, @local, 0x80000000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @hopopts={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x4}, @generic={0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb7, 0x9, [0x0, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x700000}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xe0}}], 0x5, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 575.398982ms ago: executing program 0 (id=282): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 564.369094ms ago: executing program 3 (id=283): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7ff, 0x80, 0x3, 0xb5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) 365.817034ms ago: executing program 0 (id=284): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084000000000000000002000000000000000000000000000009030000000000000000000009"], 0x0, 0x4a}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x28000600) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x11d, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@nodioread_nolock}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") syz_open_dev$vcsn(&(0x7f0000000080), 0xb, 0x200280) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0xc) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xffff}, 0x18) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) 328.619087ms ago: executing program 2 (id=285): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r4, &(0x7f0000000380)="e62b48a6c3219c9acf8e8c796997127244e24250ab2fe99562c0b6edea2d3a2f3419cf322c26dbb6838f36887b7fb9049b27b629b9b7ceac0e17203f409eedf5e285c1a767c6e6f76a496bde823e38c325e53756fbba6df4d081585df7cae672f1423cea2007a1e00ad6e543b4129a8e237811ead66c4f3cb16d8914d7ae88eeefc9e855666d7b0497ab53f343363c7e79ca098af7f18b7bbe18455c83f6e4b511424f075cfcba7fbc5fe93db527ddd5924e7a652a0c5b8007b38089cdbd47", 0xbf, 0x7, &(0x7f0000000000)={0x77359400}) 79.448072ms ago: executing program 1 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x180, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xc5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b369726"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=287): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_emit_vhci(0x0, 0x8) syz_emit_vhci(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 66.885053][ T5778] cgroup: Unknown subsys name 'net' [ 67.076730][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.522636][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.659990][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.666529][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.932368][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.969535][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.979497][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.988389][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.998919][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.020178][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.050686][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.056522][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.070539][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.078692][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.087912][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.088068][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.096348][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.104364][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.117572][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.125299][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.133091][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.151774][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.160351][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.172745][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.180129][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.191152][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.198880][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.206461][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.637706][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 72.659676][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 72.777371][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 72.822204][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 72.858163][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.865480][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.873312][ T5801] bridge_slave_0: entered allmulticast mode [ 72.881328][ T5801] bridge_slave_0: entered promiscuous mode [ 72.931462][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.938688][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.946191][ T5801] bridge_slave_1: entered allmulticast mode [ 72.953229][ T5801] bridge_slave_1: entered promiscuous mode [ 72.974128][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.981444][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.988587][ T5791] bridge_slave_0: entered allmulticast mode [ 72.995533][ T5791] bridge_slave_0: entered promiscuous mode [ 73.003046][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.010390][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.017570][ T5791] bridge_slave_1: entered allmulticast mode [ 73.025221][ T5791] bridge_slave_1: entered promiscuous mode [ 73.096188][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.109306][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.122391][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.134282][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.221285][ T5791] team0: Port device team_slave_0 added [ 73.238011][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.245660][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.254543][ T5800] bridge_slave_0: entered allmulticast mode [ 73.262003][ T5800] bridge_slave_0: entered promiscuous mode [ 73.270226][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.277557][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.285065][ T5796] bridge_slave_0: entered allmulticast mode [ 73.292077][ T5796] bridge_slave_0: entered promiscuous mode [ 73.299948][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.307082][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.314359][ T5796] bridge_slave_1: entered allmulticast mode [ 73.321686][ T5796] bridge_slave_1: entered promiscuous mode [ 73.330433][ T5791] team0: Port device team_slave_1 added [ 73.338935][ T5801] team0: Port device team_slave_0 added [ 73.345569][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.352809][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.360096][ T5800] bridge_slave_1: entered allmulticast mode [ 73.366802][ T5800] bridge_slave_1: entered promiscuous mode [ 73.407204][ T5801] team0: Port device team_slave_1 added [ 73.465255][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.472343][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.498716][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.513099][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.520169][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.546366][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.558192][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.565393][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.591648][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.611132][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.623632][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.635470][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.647413][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.666425][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.673453][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.699770][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.763572][ T5796] team0: Port device team_slave_0 added [ 73.772992][ T5800] team0: Port device team_slave_0 added [ 73.803003][ T5791] hsr_slave_0: entered promiscuous mode [ 73.814524][ T5791] hsr_slave_1: entered promiscuous mode [ 73.823497][ T5796] team0: Port device team_slave_1 added [ 73.843600][ T5800] team0: Port device team_slave_1 added [ 73.918075][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.925269][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.951928][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.963513][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.970695][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.996844][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.013215][ T5801] hsr_slave_0: entered promiscuous mode [ 74.019697][ T5801] hsr_slave_1: entered promiscuous mode [ 74.025817][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.033833][ T5801] Cannot create hsr debugfs directory [ 74.045662][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.052980][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.079185][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.090904][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.097960][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.124499][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.135662][ T5798] Bluetooth: hci0: command tx timeout [ 74.209723][ T5798] Bluetooth: hci1: command tx timeout [ 74.274422][ T5800] hsr_slave_0: entered promiscuous mode [ 74.281404][ T5800] hsr_slave_1: entered promiscuous mode [ 74.287454][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.295500][ T5798] Bluetooth: hci2: command tx timeout [ 74.299240][ T5798] Bluetooth: hci3: command tx timeout [ 74.303116][ T5800] Cannot create hsr debugfs directory [ 74.326069][ T5796] hsr_slave_0: entered promiscuous mode [ 74.332795][ T5796] hsr_slave_1: entered promiscuous mode [ 74.338824][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.346568][ T5796] Cannot create hsr debugfs directory [ 74.653091][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.670639][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.681944][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.692458][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.754573][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.771952][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.788087][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.811001][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.864042][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.889257][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.908649][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.918130][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.027507][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.038104][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.049887][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.065607][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.108527][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.164521][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.197836][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.205237][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.242979][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.252324][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.259509][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.315278][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.372779][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.397674][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.404937][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.427573][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.452782][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.459988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.477114][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.484265][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.498872][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.544873][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.552086][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.578339][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.630316][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.637456][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.686464][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.693663][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.733312][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.923557][ T5801] veth0_vlan: entered promiscuous mode [ 75.962122][ T5801] veth1_vlan: entered promiscuous mode [ 76.052741][ T5801] veth0_macvtap: entered promiscuous mode [ 76.109943][ T5801] veth1_macvtap: entered promiscuous mode [ 76.153868][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.176397][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.190313][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.210497][ T5798] Bluetooth: hci0: command tx timeout [ 76.226132][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.235618][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244766][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.253797][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275912][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.290588][ T5798] Bluetooth: hci1: command tx timeout [ 76.313213][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.355813][ T5796] veth0_vlan: entered promiscuous mode [ 76.368987][ T5796] veth1_vlan: entered promiscuous mode [ 76.376996][ T5799] Bluetooth: hci2: command tx timeout [ 76.388548][ T5798] Bluetooth: hci3: command tx timeout [ 76.471229][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.477356][ T5796] veth0_macvtap: entered promiscuous mode [ 76.488207][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.515148][ T5800] veth0_vlan: entered promiscuous mode [ 76.544724][ T5796] veth1_macvtap: entered promiscuous mode [ 76.563586][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.572674][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.594665][ T5800] veth1_vlan: entered promiscuous mode [ 76.625586][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.638332][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.652746][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.662247][ T5791] veth0_vlan: entered promiscuous mode [ 76.686043][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.707776][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.721130][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.743816][ T5791] veth1_vlan: entered promiscuous mode [ 76.767871][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.799327][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.808076][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.830041][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.854471][ T5800] veth0_macvtap: entered promiscuous mode [ 76.875662][ T5800] veth1_macvtap: entered promiscuous mode [ 76.893217][ T28] audit: type=1326 audit(1763180048.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 76.917767][ T5791] veth0_macvtap: entered promiscuous mode [ 76.963619][ T28] audit: type=1326 audit(1763180048.295:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 76.972644][ T5791] veth1_macvtap: entered promiscuous mode [ 77.019249][ T28] audit: type=1326 audit(1763180048.295:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.069295][ T28] audit: type=1326 audit(1763180048.295:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.105061][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.119163][ T28] audit: type=1326 audit(1763180048.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.149082][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.170136][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.189504][ T28] audit: type=1326 audit(1763180048.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.211902][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.233482][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.249716][ T28] audit: type=1326 audit(1763180048.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.274894][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.306549][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.316713][ T28] audit: type=1326 audit(1763180048.295:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.338920][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.349853][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.360190][ T28] audit: type=1326 audit(1763180048.295:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.383840][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.393712][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.405103][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.418554][ T28] audit: type=1326 audit(1763180048.295:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 77.441280][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.452260][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.462797][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.473734][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.511299][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.560654][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.592482][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.606185][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.616911][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.645103][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.656975][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.669597][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.699908][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714381][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.734575][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.746612][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.756968][ T5887] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 77.763344][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.774102][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.785274][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.794401][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882858][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.894786][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.010600][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.027600][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.048196][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.064260][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.165542][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180447][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.201092][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.208972][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.290571][ T5798] Bluetooth: hci0: command tx timeout [ 78.307860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.368417][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.377288][ T5798] Bluetooth: hci1: command tx timeout [ 78.450795][ T5798] Bluetooth: hci3: command tx timeout [ 78.456258][ T5798] Bluetooth: hci2: command tx timeout [ 78.599340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.730446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.827298][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.935428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.620419][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.629145][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.819566][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.006542][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.026906][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.039251][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 80.056441][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.073722][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.083562][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.100646][ T8] usb 3-1: config 0 descriptor?? [ 80.127038][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 80.134925][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 80.339695][ T5899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.348851][ T5899] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.359249][ T5899] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.368928][ T5899] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.369262][ T5798] Bluetooth: hci0: command tx timeout [ 80.449818][ T5798] Bluetooth: hci1: command tx timeout [ 80.490260][ T966] usb 3-1: USB disconnect, device number 2 [ 80.529366][ T5798] Bluetooth: hci2: command tx timeout [ 81.103301][ T5899] syz.1.9 (5899) used greatest stack depth: 20136 bytes left [ 81.390680][ T5948] syzkaller0: entered promiscuous mode [ 81.415473][ T5948] syzkaller0: entered allmulticast mode [ 81.904825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.969518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.992318][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 81.992362][ T28] audit: type=1326 audit(1763180053.315:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 82.021560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.050347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.079304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.119366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.146908][ T27] cfg80211: failed to load regulatory.db [ 82.369551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.607051][ T28] audit: type=1326 audit(1763180053.315:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 82.700253][ T5798] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 82.708811][ T5798] Bluetooth: hci3: Injecting HCI hardware error event [ 82.751238][ T5798] Bluetooth: hci3: hardware error 0x00 [ 82.876828][ T28] audit: type=1326 audit(1763180053.335:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 82.899064][ T28] audit: type=1326 audit(1763180053.415:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 83.088466][ T5799] Bluetooth: hci3: unexpected event for opcode 0x080b [ 83.099139][ T28] audit: type=1326 audit(1763180054.465:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 83.152434][ T28] audit: type=1326 audit(1763180054.465:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 83.175917][ T28] audit: type=1326 audit(1763180054.465:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 83.204676][ T28] audit: type=1326 audit(1763180054.465:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 83.340518][ T28] audit: type=1326 audit(1763180054.725:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 83.429828][ T28] audit: type=1326 audit(1763180054.745:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 83.487303][ T5979] syzkaller0: entered promiscuous mode [ 83.502488][ T5979] syzkaller0: entered allmulticast mode [ 83.600570][ T5983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.952718][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.960453][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.009806][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 85.722716][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.767009][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.182579][ T6011] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.191659][ T6011] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.203337][ T6011] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.213075][ T6011] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.316327][ T6032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.279578][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 88.279588][ T28] audit: type=1326 audit(1763180059.665:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 88.449233][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.468054][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 88.475775][ T5799] Bluetooth: hci2: hardware error 0x00 [ 88.489439][ T28] audit: type=1326 audit(1763180059.695:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 88.557047][ T28] audit: type=1326 audit(1763180059.695:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 88.581323][ T28] audit: type=1326 audit(1763180059.775:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 88.603859][ T28] audit: type=1326 audit(1763180059.775:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 88.626862][ T28] audit: type=1326 audit(1763180059.775:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 88.650502][ T28] audit: type=1326 audit(1763180059.775:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 88.726683][ T6082] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.769948][ T6077] syzkaller0: entered promiscuous mode [ 88.782346][ T6077] syzkaller0: entered allmulticast mode [ 89.415911][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.423716][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.529149][ T5799] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 90.662932][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.708625][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.195641][ T6086] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.206015][ T6086] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.222265][ T6086] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.233786][ T6086] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.774773][ T28] audit: type=1326 audit(1763180063.145:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 91.889452][ T28] audit: type=1326 audit(1763180063.145:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 91.968810][ T28] audit: type=1326 audit(1763180063.155:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 92.144954][ T6128] syzkaller0: entered promiscuous mode [ 92.150627][ T6128] syzkaller0: entered allmulticast mode [ 92.379310][ T6131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.089378][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 93.098569][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 93.106610][ T5799] Bluetooth: hci1: hardware error 0x00 [ 93.429824][ T6138] syzkaller0: entered promiscuous mode [ 93.439570][ T6138] syzkaller0: entered allmulticast mode [ 93.593581][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 93.593623][ T28] audit: type=1326 audit(1763180064.915:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 93.641042][ T28] audit: type=1326 audit(1763180064.915:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 93.663640][ T28] audit: type=1326 audit(1763180064.915:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 93.686576][ T28] audit: type=1326 audit(1763180064.915:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 94.672952][ T28] audit: type=1326 audit(1763180066.045:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 94.704652][ T28] audit: type=1326 audit(1763180066.055:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 94.734219][ T28] audit: type=1326 audit(1763180066.055:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 94.780729][ T28] audit: type=1326 audit(1763180066.055:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 94.817135][ T28] audit: type=1326 audit(1763180066.055:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 94.843454][ T28] audit: type=1326 audit(1763180066.055:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 95.171263][ T5799] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 97.165997][ T6188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.604199][ T6214] syzkaller0: entered promiscuous mode [ 98.615163][ T6214] syzkaller0: entered allmulticast mode [ 98.890025][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.102'. [ 99.760380][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 99.770899][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.791217][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 99.805457][ T6257] vhci_hcd: connection closed [ 99.826586][ T11] vhci_hcd: stop threads [ 99.842359][ T11] vhci_hcd: release socket [ 99.846879][ T11] vhci_hcd: disconnect device [ 100.564582][ T6243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.189095][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.401314][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 101.449328][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 101.459907][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.471536][ T8] usb 4-1: Product: syz [ 101.473853][ T6295] syz.1.118[6295]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 101.475734][ T8] usb 4-1: Manufacturer: syz [ 101.494566][ T8] usb 4-1: SerialNumber: syz [ 101.508344][ T8] usb 4-1: config 0 descriptor?? [ 101.516863][ T6295] loop1: detected capacity change from 0 to 256 [ 101.524677][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 101.543277][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 101.545096][ T6295] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.639231][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.647869][ T6295] FAT-fs (loop1): Directory bread(block 64) failed [ 101.663409][ T6295] FAT-fs (loop1): Directory bread(block 65) failed [ 101.670893][ T6295] FAT-fs (loop1): Directory bread(block 66) failed [ 101.677451][ T6295] FAT-fs (loop1): Directory bread(block 67) failed [ 101.684875][ T6295] FAT-fs (loop1): Directory bread(block 68) failed [ 101.696447][ T6295] FAT-fs (loop1): Directory bread(block 69) failed [ 101.704673][ T6295] FAT-fs (loop1): Directory bread(block 70) failed [ 101.715015][ T6295] FAT-fs (loop1): Directory bread(block 71) failed [ 101.723223][ T6295] FAT-fs (loop1): Directory bread(block 72) failed [ 101.843824][ T6295] FAT-fs (loop1): Directory bread(block 73) failed [ 101.970035][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.023306][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.070569][ T5920] usb 1-1: Product: syz [ 102.074797][ T5920] usb 1-1: Manufacturer: syz [ 102.104758][ T5920] usb 1-1: SerialNumber: syz [ 102.123733][ T5920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.207747][ T5911] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.436246][ T6298] syzkaller0: entered promiscuous mode [ 102.444493][ T5920] usb 1-1: USB disconnect, device number 2 [ 102.464453][ T6298] syzkaller0: entered allmulticast mode [ 103.254600][ T5911] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 103.263623][ T5911] ath9k_htc: Failed to initialize the device [ 103.305291][ T5920] usb 1-1: ath9k_htc: USB layer deinitialized [ 104.578820][ T6305] syzkaller0: entered promiscuous mode [ 104.584846][ T6305] syzkaller0: entered allmulticast mode [ 104.592728][ T6317] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.741679][ T6326] loop0: detected capacity change from 0 to 1024 [ 104.753414][ T6326] ======================================================= [ 104.753414][ T6326] WARNING: The mand mount option has been deprecated and [ 104.753414][ T6326] and is ignored by this kernel. Remove the mand [ 104.753414][ T6326] option from the mount to silence this warning. [ 104.753414][ T6326] ======================================================= [ 104.809519][ T6326] EXT4-fs: inline encryption not supported [ 104.863202][ T6326] EXT4-fs: Ignoring removed nobh option [ 104.876101][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 104.876115][ T28] audit: type=1326 audit(1763180076.255:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 104.915445][ T6326] EXT4-fs: Ignoring removed bh option [ 104.976407][ T28] audit: type=1326 audit(1763180076.255:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.060904][ T6326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.063423][ T28] audit: type=1326 audit(1763180076.295:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.109176][ T5922] usb 4-1: USB disconnect, device number 2 [ 105.231283][ T28] audit: type=1326 audit(1763180076.295:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.286367][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.293593][ T28] audit: type=1326 audit(1763180076.295:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.326992][ T28] audit: type=1326 audit(1763180076.295:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.357749][ T28] audit: type=1326 audit(1763180076.295:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.412476][ T6343] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.426403][ T6341] Zero length message leads to an empty skb [ 105.455499][ T6346] loop3: detected capacity change from 0 to 1024 [ 105.460607][ T28] audit: type=1326 audit(1763180076.295:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.472579][ T6346] EXT4-fs: Ignoring removed orlov option [ 105.498177][ T28] audit: type=1326 audit(1763180076.295:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.524288][ T28] audit: type=1326 audit(1763180076.295:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 105.577100][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.639186][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.399177][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.499322][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.599385][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 106.619354][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.629722][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.638789][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.649384][ T5920] usb 4-1: config 0 descriptor?? [ 106.657623][ T5920] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.674389][ T5920] hub: probe of 4-1:0.0 failed with error -5 [ 106.699694][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 106.714234][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 106.723838][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.732109][ T8] usb 3-1: Product: syz [ 106.736645][ T8] usb 3-1: Manufacturer: syz [ 106.741434][ T8] usb 3-1: SerialNumber: syz [ 106.756732][ T8] usb 3-1: config 0 descriptor?? [ 106.769975][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 106.781153][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 107.550032][ T8] usb 4-1: USB disconnect, device number 3 [ 107.579297][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 107.586082][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.787103][ T6387] loop0: detected capacity change from 0 to 1024 [ 108.837607][ T6387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.917748][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 108.940334][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.360268][ T6097] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.519200][ T6097] usb 1-1: device descriptor read/64, error -71 [ 109.809226][ T6097] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.859711][ T5911] usb 3-1: USB disconnect, device number 3 [ 109.894397][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 109.894412][ T28] audit: type=1326 audit(1763180081.275:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 109.971673][ T28] audit: type=1326 audit(1763180081.305:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 109.984046][ T6097] usb 1-1: device descriptor read/64, error -71 [ 110.038686][ T28] audit: type=1326 audit(1763180081.305:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.070394][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.101471][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.124295][ T28] audit: type=1326 audit(1763180081.485:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.129936][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.169353][ T6097] usb usb1-port1: attempt power cycle [ 110.180824][ T28] audit: type=1326 audit(1763180081.485:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.185134][ T6412] netlink: 108 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.229339][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.235103][ T28] audit: type=1326 audit(1763180081.485:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.299300][ T28] audit: type=1326 audit(1763180081.485:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.386415][ T28] audit: type=1326 audit(1763180081.485:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.430030][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 110.456991][ T28] audit: type=1326 audit(1763180081.485:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.480232][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.491653][ T28] audit: type=1326 audit(1763180081.485:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff74e38f6c9 code=0x7ffc0000 [ 110.515291][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.620247][ T6097] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.661710][ T6097] usb 1-1: device descriptor read/8, error -71 [ 110.779309][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.886321][ T6435] loop1: detected capacity change from 0 to 512 [ 110.906310][ T6435] EXT4-fs: Ignoring removed bh option [ 110.929416][ T6097] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.941704][ T6435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.956043][ T6435] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.959905][ T6097] usb 1-1: device descriptor read/8, error -71 [ 110.976587][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 110.984008][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.998807][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.008412][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.024349][ T8] usb 3-1: config 0 descriptor?? [ 111.032241][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 111.054105][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.063580][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 111.102897][ T6097] usb usb1-port1: unable to enumerate USB device [ 111.154610][ T6441] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.414436][ T5911] usb 3-1: USB disconnect, device number 4 [ 112.578654][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 112.710284][ T6453] loop1: detected capacity change from 0 to 4096 [ 112.758658][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.900511][ T6464] syz.0.167[6464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.900643][ T6464] syz.0.167[6464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.007199][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.248196][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.248549][ T6464] loop0: detected capacity change from 0 to 1024 [ 113.285213][ T6462] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.308985][ T6462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.366999][ T6476] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 113.382121][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.473892][ T6458] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 113.499201][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.499341][ T6458] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.167: bg 0: block 88: padding at end of block bitmap is not set [ 113.589424][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.670100][ T5920] usb 4-1: device descriptor read/64, error -71 [ 113.816338][ T6494] syz.2.178[6494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.816468][ T6494] syz.2.178[6494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.939138][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.239327][ T5920] usb 4-1: device descriptor read/64, error -71 [ 114.423280][ T5920] usb usb4-port1: attempt power cycle [ 114.885792][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz.1.184'. [ 115.039341][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.091822][ T5920] usb 4-1: device descriptor read/8, error -71 [ 115.191640][ T6524] loop1: detected capacity change from 0 to 512 [ 115.218439][ T6526] loop0: detected capacity change from 0 to 2048 [ 115.235687][ T6524] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.188: inode has both inline data and extents flags [ 115.265970][ T6524] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.188: couldn't read orphan inode 15 (err -117) [ 115.330485][ T6526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 115.341442][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.374759][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.462375][ T5920] usb 4-1: device descriptor read/8, error -71 [ 115.482521][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.514547][ T6526] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.539708][ T6526] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 402 with error 28 [ 115.556547][ T6526] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.556547][ T6526] [ 115.567708][ T6526] EXT4-fs (loop0): Total free blocks count 0 [ 115.582498][ T5920] usb usb4-port1: unable to enumerate USB device [ 115.590862][ T6526] EXT4-fs (loop0): Free/Dirty block details [ 115.599479][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 115.599493][ T28] audit: type=1326 audit(1763180086.975:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 115.628049][ T6526] EXT4-fs (loop0): free_blocks=2415919104 [ 115.628127][ T6526] EXT4-fs (loop0): dirty_blocks=416 [ 115.628141][ T6526] EXT4-fs (loop0): Block reservation details [ 115.628154][ T6526] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 115.636912][ T6533] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 115.745704][ T28] audit: type=1326 audit(1763180087.025:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 115.809518][ T28] audit: type=1326 audit(1763180087.025:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 115.832803][ T28] audit: type=1326 audit(1763180087.025:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 115.899576][ T28] audit: type=1326 audit(1763180087.025:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5407186567 code=0x7ffc0000 [ 115.979143][ T28] audit: type=1326 audit(1763180087.025:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f540712b789 code=0x7ffc0000 [ 116.029144][ T28] audit: type=1326 audit(1763180087.025:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540718f6c9 code=0x7ffc0000 [ 116.275707][ T6545] loop0: detected capacity change from 0 to 128 [ 116.412394][ T28] audit: type=1326 audit(1763180087.795:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 116.505940][ T28] audit: type=1326 audit(1763180087.795:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 116.578880][ T28] audit: type=1326 audit(1763180087.795:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1323f8f6c9 code=0x7ffc0000 [ 116.624090][ T6558] loop3: detected capacity change from 0 to 512 [ 116.653964][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.861920][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.649375][ T6097] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.859317][ T6097] usb 3-1: Using ep0 maxpacket: 32 [ 118.878036][ T6097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.911132][ T6097] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.934016][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 118.959115][ T6097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.995794][ T6097] usb 3-1: config 0 descriptor?? [ 119.018211][ T6097] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.029452][ T6097] hub: probe of 3-1:0.0 failed with error -5 [ 119.384628][ T6097] usb 3-1: USB disconnect, device number 5 [ 120.541099][ T6617] netlink: 354 bytes leftover after parsing attributes in process `syz.0.227'. [ 120.716508][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 120.716521][ T28] audit: type=1326 audit(1763180092.095:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 120.767209][ T28] audit: type=1326 audit(1763180092.135:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 120.839096][ T28] audit: type=1326 audit(1763180092.175:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 120.864752][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 120.909214][ T28] audit: type=1326 audit(1763180092.175:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 120.949615][ T28] audit: type=1326 audit(1763180092.175:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.006482][ T28] audit: type=1326 audit(1763180092.175:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.071941][ T28] audit: type=1326 audit(1763180092.175:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.112428][ T28] audit: type=1326 audit(1763180092.175:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.161923][ T28] audit: type=1326 audit(1763180092.185:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.209204][ T28] audit: type=1326 audit(1763180092.185:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 121.369890][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'. [ 121.402382][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 124.080914][ T6705] netlink: 'syz.1.257': attribute type 13 has an invalid length. [ 124.115411][ T6705] gretap0: refused to change device tx_queue_len [ 124.129972][ T6705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.548795][ T6721] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.608235][ T6721] netlink: 'syz.3.265': attribute type 12 has an invalid length. [ 124.627639][ T6721] netlink: 'syz.3.265': attribute type 29 has an invalid length. [ 124.647093][ T6721] netlink: 148 bytes leftover after parsing attributes in process `syz.3.265'. [ 124.659976][ T6724] process 'syz.1.266' launched './file0' with NULL argv: empty string added [ 126.037001][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 126.037016][ T28] audit: type=1326 audit(1763180097.415:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 126.122283][ T28] audit: type=1326 audit(1763180097.415:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 126.149180][ T28] audit: type=1326 audit(1763180097.415:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 126.178791][ T28] audit: type=1326 audit(1763180097.415:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 126.207179][ T28] audit: type=1326 audit(1763180097.415:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 126.327835][ T6760] loop2: detected capacity change from 0 to 1024 [ 126.397660][ T6760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.592214][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.883154][ T6779] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.038070][ T28] audit: type=1326 audit(1763180098.415:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 127.073628][ T28] audit: type=1326 audit(1763180098.415:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 127.276985][ T28] audit: type=1326 audit(1763180098.455:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5c6bd8f6c9 code=0x7ffc0000 [ 127.312604][ T6793] loop0: detected capacity change from 0 to 512 [ 127.373374][ T6793] ------------[ cut here ]------------ [ 127.379330][ T6793] EA inode 11 i_nlink=2 [ 127.384539][ T6793] WARNING: CPU: 0 PID: 6793 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.399938][ T6793] Modules linked in: [ 127.403869][ T6793] CPU: 0 PID: 6793 Comm: syz.0.284 Not tainted syzkaller #0 [ 127.412683][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.423254][ T6793] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.430608][ T6793] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 127.450754][ T6793] RSP: 0018:ffffc900194a72e0 EFLAGS: 00010246 [ 127.456951][ T6793] RAX: c3900927f9129c00 RBX: 0000000000000002 RCX: 0000000000080000 [ 127.465586][ T6793] RDX: ffffc9000e1de000 RSI: 00000000000172da RDI: 00000000000172db [ 127.473894][ T6793] RBP: ffffc900194a73d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 127.482286][ T6793] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 127.490324][ T6793] R13: ffff8880608c68a8 R14: ffff8880608c66b0 R15: ffff8880608c6700 [ 127.498468][ T6793] FS: 00007f5c6cc336c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 127.507891][ T6793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.515166][ T6793] CR2: 00007f30b0d7ae9c CR3: 000000005fdfa000 CR4: 00000000003506f0 [ 127.523670][ T6793] Call Trace: [ 127.526962][ T6793] [ 127.530001][ T6793] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 127.535657][ T6793] ? __ext4_journal_ensure_credits+0x30/0x450 [ 127.542127][ T6793] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 127.548129][ T6793] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 127.554344][ T6793] ? __ext4_journal_ensure_credits+0x450/0x450 [ 127.560691][ T6793] ext4_xattr_delete_inode+0xa45/0xc00 [ 127.566292][ T6793] ? ext4_reserve_inode_write+0x248/0x2a0 [ 127.572613][ T6793] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 127.578981][ T6793] ext4_evict_inode+0xaa3/0xea0 [ 127.584099][ T6793] ? _raw_spin_unlock+0x28/0x40 [ 127.589173][ T6793] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.595208][ T6793] ? do_raw_spin_unlock+0x121/0x230 [ 127.600546][ T6793] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.606718][ T6793] evict+0x486/0x870 [ 127.610719][ T6793] ? __lock_acquire+0x7c80/0x7c80 [ 127.615833][ T6793] ? proc_nr_inodes+0x230/0x230 [ 127.620739][ T6793] ? do_raw_spin_unlock+0x121/0x230 [ 127.625968][ T6793] ? _raw_spin_unlock+0x28/0x40 [ 127.630907][ T6793] ? iput+0x70a/0x920 [ 127.635270][ T6793] ext4_orphan_cleanup+0xbd4/0x1400 [ 127.640601][ T6793] ? ext4_orphan_del+0xba0/0xba0 [ 127.645565][ T6793] ? ext4_register_li_request+0x183/0x940 [ 127.651730][ T6793] ? errseq_check_and_advance+0x66/0x120 [ 127.657502][ T6793] ext4_fill_super+0x5de4/0x66c0 [ 127.662547][ T6793] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.668888][ T6793] ? __might_sleep+0xe0/0xe0 [ 127.673558][ T6793] ? read_lock_is_recursive+0x20/0x20 [ 127.679265][ T6793] ? snprintf+0xdb/0x120 [ 127.683564][ T6793] ? vscnprintf+0x80/0x80 [ 127.687981][ T6793] ? down_write+0x162/0x1f0 [ 127.692855][ T6793] ? down_read_killable+0x340/0x340 [ 127.698313][ T6793] ? setup_bdev_super+0x56b/0x660 [ 127.703469][ T6793] get_tree_bdev+0x3e4/0x510 [ 127.708154][ T6793] ? vfs_parse_fs_string+0x160/0x160 [ 127.713781][ T6793] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.720148][ T6793] ? setup_bdev_super+0x660/0x660 [ 127.725191][ T6793] ? apparmor_capable+0x137/0x1a0 [ 127.730523][ T6793] ? bpf_lsm_capable+0x9/0x10 [ 127.735286][ T6793] ? security_capable+0x89/0xb0 [ 127.740184][ T6793] vfs_get_tree+0x8c/0x280 [ 127.744926][ T6793] do_new_mount+0x24b/0xa40 [ 127.749537][ T6793] __se_sys_mount+0x2da/0x3c0 [ 127.754362][ T6793] ? __x64_sys_mount+0xc0/0xc0 [ 127.759229][ T6793] ? lockdep_hardirqs_on+0x98/0x150 [ 127.764610][ T6793] ? __x64_sys_mount+0x20/0xc0 [ 127.769533][ T6793] do_syscall_64+0x55/0xb0 [ 127.774075][ T6793] ? clear_bhb_loop+0x40/0x90 [ 127.778793][ T6793] ? clear_bhb_loop+0x40/0x90 [ 127.783811][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.789924][ T6793] RIP: 0033:0x7f5c6bd90e6a [ 127.794481][ T6793] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.814655][ T6793] RSP: 002b:00007f5c6cc32e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.823301][ T6793] RAX: ffffffffffffffda RBX: 00007f5c6cc32ef0 RCX: 00007f5c6bd90e6a [ 127.833881][ T6793] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5c6cc32eb0 [ 127.842207][ T6793] RBP: 0000200000000180 R08: 00007f5c6cc32ef0 R09: 0000000001a08700 [ 127.850860][ T6793] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 127.859151][ T6793] R13: 00007f5c6cc32eb0 R14: 0000000000000470 R15: 0000200000000700 [ 127.867160][ T6793] [ 127.870451][ T6793] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.878146][ T6793] CPU: 0 PID: 6793 Comm: syz.0.284 Not tainted syzkaller #0 [ 127.886241][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.896716][ T6793] Call Trace: [ 127.899994][ T6793] [ 127.903089][ T6793] dump_stack_lvl+0x16c/0x230 [ 127.907792][ T6793] ? show_regs_print_info+0x20/0x20 [ 127.913103][ T6793] ? load_image+0x3b0/0x3b0 [ 127.917737][ T6793] panic+0x2c0/0x710 [ 127.921639][ T6793] ? bpf_jit_dump+0xd0/0xd0 [ 127.926519][ T6793] __warn+0x2e0/0x470 [ 127.930596][ T6793] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.936862][ T6793] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.943046][ T6793] report_bug+0x2be/0x4f0 [ 127.947390][ T6793] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.953805][ T6793] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.959876][ T6793] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 127.965986][ T6793] handle_bug+0xcf/0x120 [ 127.970242][ T6793] exc_invalid_op+0x1a/0x50 [ 127.974738][ T6793] asm_exc_invalid_op+0x1a/0x20 [ 127.980235][ T6793] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.987681][ T6793] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 128.009640][ T6793] RSP: 0018:ffffc900194a72e0 EFLAGS: 00010246 [ 128.016764][ T6793] RAX: c3900927f9129c00 RBX: 0000000000000002 RCX: 0000000000080000 [ 128.025289][ T6793] RDX: ffffc9000e1de000 RSI: 00000000000172da RDI: 00000000000172db [ 128.033644][ T6793] RBP: ffffc900194a73d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 128.041830][ T6793] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 128.050546][ T6793] R13: ffff8880608c68a8 R14: ffff8880608c66b0 R15: ffff8880608c6700 [ 128.059157][ T6793] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 128.065163][ T6793] ? __ext4_journal_ensure_credits+0x30/0x450 [ 128.071513][ T6793] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 128.077529][ T6793] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 128.084053][ T6793] ? __ext4_journal_ensure_credits+0x450/0x450 [ 128.090796][ T6793] ext4_xattr_delete_inode+0xa45/0xc00 [ 128.096436][ T6793] ? ext4_reserve_inode_write+0x248/0x2a0 [ 128.102282][ T6793] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 128.108539][ T6793] ext4_evict_inode+0xaa3/0xea0 [ 128.113591][ T6793] ? _raw_spin_unlock+0x28/0x40 [ 128.118691][ T6793] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.124886][ T6793] ? do_raw_spin_unlock+0x121/0x230 [ 128.130181][ T6793] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.136550][ T6793] evict+0x486/0x870 [ 128.140732][ T6793] ? __lock_acquire+0x7c80/0x7c80 [ 128.148012][ T6793] ? proc_nr_inodes+0x230/0x230 [ 128.153584][ T6793] ? do_raw_spin_unlock+0x121/0x230 [ 128.158906][ T6793] ? _raw_spin_unlock+0x28/0x40 [ 128.163778][ T6793] ? iput+0x70a/0x920 [ 128.167780][ T6793] ext4_orphan_cleanup+0xbd4/0x1400 [ 128.172996][ T6793] ? ext4_orphan_del+0xba0/0xba0 [ 128.177953][ T6793] ? ext4_register_li_request+0x183/0x940 [ 128.183690][ T6793] ? errseq_check_and_advance+0x66/0x120 [ 128.189353][ T6793] ext4_fill_super+0x5de4/0x66c0 [ 128.194312][ T6793] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 128.200562][ T6793] ? __might_sleep+0xe0/0xe0 [ 128.205149][ T6793] ? read_lock_is_recursive+0x20/0x20 [ 128.210604][ T6793] ? snprintf+0xdb/0x120 [ 128.214941][ T6793] ? vscnprintf+0x80/0x80 [ 128.219393][ T6793] ? down_write+0x162/0x1f0 [ 128.223916][ T6793] ? down_read_killable+0x340/0x340 [ 128.229135][ T6793] ? setup_bdev_super+0x56b/0x660 [ 128.234149][ T6793] get_tree_bdev+0x3e4/0x510 [ 128.238730][ T6793] ? vfs_parse_fs_string+0x160/0x160 [ 128.244014][ T6793] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 128.250336][ T6793] ? setup_bdev_super+0x660/0x660 [ 128.255352][ T6793] ? apparmor_capable+0x137/0x1a0 [ 128.260372][ T6793] ? bpf_lsm_capable+0x9/0x10 [ 128.265056][ T6793] ? security_capable+0x89/0xb0 [ 128.270691][ T6793] vfs_get_tree+0x8c/0x280 [ 128.275116][ T6793] do_new_mount+0x24b/0xa40 [ 128.280723][ T6793] __se_sys_mount+0x2da/0x3c0 [ 128.286476][ T6793] ? __x64_sys_mount+0xc0/0xc0 [ 128.292212][ T6793] ? lockdep_hardirqs_on+0x98/0x150 [ 128.297698][ T6793] ? __x64_sys_mount+0x20/0xc0 [ 128.302659][ T6793] do_syscall_64+0x55/0xb0 [ 128.307250][ T6793] ? clear_bhb_loop+0x40/0x90 [ 128.312014][ T6793] ? clear_bhb_loop+0x40/0x90 [ 128.316712][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.322656][ T6793] RIP: 0033:0x7f5c6bd90e6a [ 128.327244][ T6793] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.347203][ T6793] RSP: 002b:00007f5c6cc32e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.355712][ T6793] RAX: ffffffffffffffda RBX: 00007f5c6cc32ef0 RCX: 00007f5c6bd90e6a [ 128.363685][ T6793] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5c6cc32eb0 [ 128.371669][ T6793] RBP: 0000200000000180 R08: 00007f5c6cc32ef0 R09: 0000000001a08700 [ 128.379646][ T6793] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.387713][ T6793] R13: 00007f5c6cc32eb0 R14: 0000000000000470 R15: 0000200000000700 [ 128.395784][ T6793] [ 128.399417][ T6793] Kernel Offset: disabled [ 128.404188][ T6793] Rebooting in 86400 seconds..